CVE-2019-11696

Files with the .JNLP extension used for "Java web start" applications are not treated as executable content for download prompts even though they can be…

published July 23, 2019

CVSS
—
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

Files with the .JNLP extension used for "Java web start" applications are not treated as executable content for download prompts even though they can be executed if Java is installed on the local system. This could allow users to mistakenly launch an executable binary locally. This vulnerability affects Firefox < 67.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00839 · 57.4th percentile
Published
2019-07-23T13:22Z
EPSS history
Timeline
  • 23 JUL 13:22Z
    Files with the .JNLP extension used for "Java web start" applications are not treated as executable content for download prompts even though they can be…
    cvelistv5