CVE-2010-3561 - CVE House

Back to Database

Status published High CVE-2010-3561

Unspecified vulnerability in the CORBA component in Oracle Java SE...

7.5 CVSS

Vulnerability Description

Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this involves the use of the privileged accept method in the ServerSocket class, which does not limit which hosts can connect and allows remote attackers to bypass intended network access restrictions.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-3561

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from sun

View All →

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Emergency Responder 11.5(0.99833.5)...

Cisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1), and...

Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager...

Cross-site scripting (XSS) vulnerability in Cisco Unity Connection 11.5(0.199) allows...

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Fog Director 1.0(0)...

Affected Vendor

sun

View all reports →

Affected Software

jre, jdk

Vulnerable Versions:

0, 1.6.0, 1.5.0

Timeline

Official Publish: October 19th, 2010

Last Modified: August 7th, 2024

Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.