CVE-2019-2699: Critical severity oracle java se 7 vulnerability
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL). The supported version that is affected is Java SE: 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. While the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-2699?
CVE-2019-2699 has a medium severity rating, indicating a significant risk of exploitation.
How do I fix CVE-2019-2699?
To mitigate CVE-2019-2699, you should update to the latest version of Oracle Java SE beyond 8u202.
Who is affected by CVE-2019-2699?
CVE-2019-2699 affects users of Oracle JDK and Oracle Java Runtime Environment at version 1.8.0-update202.
Can CVE-2019-2699 be exploited remotely?
Yes, CVE-2019-2699 can be exploited remotely by an unauthenticated attacker with network access.
What types of protocols can exploit CVE-2019-2699?
CVE-2019-2699 can be exploited via multiple network protocols that allow access to the vulnerable Java SE component.