CVE-2008-3110 : Unspecified vulnerability in scripting language support in Sun Java Runtime Envi

Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows remote attackers to obtain sensitive information by using an applet to read information from another applet.

Published 2008-07-09 23:41:00

Updated 2018-10-11 20:46:32

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2008-3110

SUN » JDK » Update Update 6
Versions up to, including, (<=) 6
cpe:2.3:a:sun:jdk:*:update_6:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 6 Update Update 1
cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 6 Update Update 3
cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 6 Update Update 2
cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 6 Update Update 5
cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 6 Update Update 4
cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*
Matching versions
SUN » JRE » Update Update 6
Versions up to, including, (<=) 6
cpe:2.3:a:sun:jre:*:update_6:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 6 Update Update 1
cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 6 Update Update 2
cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 6 Update Update 3
cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 6 Update Update 4
cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 6 Update Update 5
cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2008-3110

EPSS FAQ

1.73%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 88 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2008-3110

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.3	MEDIUM	AV:N/AC:M/Au:N/C:P/I:N/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

CWE ids for CVE-2008-3110

CWE-264

Assigned by: nvd@nist.gov (Primary)

References for CVE-2008-3110

Jump to

Vulnerability Details : CVE-2008-3110

Products affected by CVE-2008-3110

Exploit prediction scoring system (EPSS) score for CVE-2008-3110

CVSS scores for CVE-2008-3110

CWE ids for CVE-2008-3110

References for CVE-2008-3110