CVE-2011-0815
CVE-2011-0815 is a critical-severity vulnerability in Sun Jdk with a CVSS 2.0 base score of 10.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Critical (CVSS 2.0 base score 10.0)
- EPSS exploit prediction: 4% (88th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Sun Jdk
- Published:
- Last modified:
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to AWT.
Frequently asked questions
- What is CVE-2011-0815?
- Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to AWT.
- How severe is CVE-2011-0815?
- CVE-2011-0815 has a CVSS 2.0 base score of 10.0, rated critical severity.
- Is CVE-2011-0815 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 4% (88th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2011-0815?
- CVE-2011-0815 primarily affects Sun Jdk. In total, 173 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2011-0815?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- When was CVE-2011-0815 published?
- CVE-2011-0815 was published on 2011-06-14 and last updated on 2026-06-16.
References
- http://lists.opensuse.org/opensuse-security-announce/2011-06/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00009.html
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00025.html
- http://marc.info/?l=bugtraq&m=132439520301822&w=2
- http://marc.info/?l=bugtraq&m=133728004526190&w=2
- http://marc.info/?l=bugtraq&m=134254866602253&w=2
- http://marc.info/?l=bugtraq&m=134254957702612&w=2
- http://secunia.com/advisories/44930
- http://secunia.com/advisories/49198
- http://security.gentoo.org/glsa/glsa-201406-32.xml
- http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-015/index.html
- http://www.ibm.com/developerworks/java/jdk/alerts/
- http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html
- http://www.oracle.com/technetwork/topics/security/javacpujune2011-313339.html
- http://www.us-cert.gov/cas/techalerts/TA11-201A.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14335
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14896
Affected products (173)
- cpe:2.3:a:sun:jdk:*:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_1:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_2:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_3:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_4:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_5:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_6:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_7:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_8:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_9:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_10:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_11:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_12:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_13:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_14:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_15:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_16:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_17:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_18:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_19:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_20:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_21:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_22:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_23:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_24:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_25:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_26:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_27:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_28:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_29:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jdk:1.4.2_30:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*
- cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*
More vulnerabilities in Sun Jdk
- CVE-2013-5824 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and…
- CVE-2013-5817 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…
- CVE-2013-5814 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…
- CVE-2013-5809 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and…
- CVE-2013-5789 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and…
- CVE-2013-5787 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and…