CVE-2024-41995

Initialization of a resource with an insecure default vulnerability exists in JavaTM Platform Ver.12.89 and earlier

High · published August 6, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
42.6
In the wild
Unconfirmed
What it is

Initialization of a resource with an insecure default vulnerability exists in JavaTM Platform Ver.12.89 and earlier. If this vulnerability is exploited, the product may be affected by some known TLS1.0 and TLS1.1 vulnerabilities. As for the specific products/models/versions of MFPs and printers that contain JavaTM Platform, see the information provided by the vendor.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00510 · 42.6th percentile
Published
2024-08-06T06:51Z
EPSS history
Timeline
  • 06 AUG 06:51Z
    Initialization of a resource with an insecure default vulnerability exists in JavaTM Platform Ver.12.89 and earlier
    cvelistv5