CVE-2010-3573 - CVE House

Back to Database

Status published Medium CVE-2010-3573

Unspecified vulnerability in the Networking component in Oracle Java SE...

5.1 CVSS

Vulnerability Description

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-3573

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from sun

View All →

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Emergency Responder 11.5(0.99833.5)...

Cisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1), and...

Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager...

Cross-site scripting (XSS) vulnerability in Cisco Unity Connection 11.5(0.199) allows...

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Fog Director 1.0(0)...

Affected Vendor

sun

View all reports →

Affected Software

jre, jdk

Vulnerable Versions:

0, 1.6.0, 1.5.0

Timeline

Official Publish: October 19th, 2010

Last Modified: August 7th, 2024

Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.