[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fi8JrLYm1x63t51gE4rRSTwd2aD4vo-5GQajl7ug1Eeg":3,"g5a-ex:sun\u002Fjava@*":112,"g5a-family:sun\u002Fjava":114},{"success":4,"data":5},true,{"product":6,"versions":29,"topVulnerabilitiesByEpss":35,"kevVulnerabilities":89,"seoMetadata":90,"meta":109},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":28},"sun","java",5,14,0,"2010-04-20",[14,18,21,24,26],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"1.3.1",2,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"1.4.1",1,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"1.4.2",3,{"version":25,"cve_count":20,"kev_count":11,"has_kev":17},"1.6.0",{"version":27,"cve_count":20,"kev_count":11,"has_kev":17},"6","Java by Sun is a technology product with 5 tracked versions and 14 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[30,31,32,33,34],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":20,"kev_count":11,"has_kev":17},{"version":27,"cve_count":20,"kev_count":11,"has_kev":17},[36,43,50,54,61,65,70,75,80,84],{"cveId":37,"description":38,"publishedDate":12,"cvssScore":39,"cvssVersion":40,"severity":41,"isKev":17,"epssScore":42},"CVE-2010-0887","Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business JDK and JRE 6 Update 18 and 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.",10,"v2","Critical",0.09428,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":40,"severity":48,"isKev":17,"epssScore":49},"CVE-2009-1102","Unspecified vulnerability in the Virtual Machine in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to \"code generation.\"","2009-03-25",6.4,"Medium",0.04574,{"cveId":51,"description":52,"publishedDate":46,"cvssScore":47,"cvssVersion":40,"severity":48,"isKev":17,"epssScore":53},"CVE-2009-1103","Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to \"deserializing applets,\" aka CR 6646860.",0.04519,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":40,"severity":59,"isKev":17,"epssScore":60},"CVE-1999-0440","The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.","1999-03-01",7.5,"High",0.03636,{"cveId":62,"description":63,"publishedDate":46,"cvssScore":58,"cvssVersion":40,"severity":59,"isKev":17,"epssScore":64},"CVE-2009-1105","The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 allows user-assisted remote attackers to cause a trusted applet to run in an older JRE version, which can be used to exploit vulnerabilities in that older version, aka CR 6706490.",0.03558,{"cveId":66,"description":67,"publishedDate":46,"cvssScore":68,"cvssVersion":40,"severity":48,"isKev":17,"epssScore":69},"CVE-2009-1107","The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog, related to a \"Swing JLabel HTML parsing vulnerability,\" aka CR 6782871.",4.3,0.02799,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":39,"cvssVersion":40,"severity":41,"isKev":17,"epssScore":74},"CVE-2005-2530","Unspecified vulnerability in Java 1.3.1 before 1.3.1_16 on Apple Mac OS X allows an untrusted applet to gain privileges, related to \"Mac OS X specific extensions.\"","2005-12-31",0.02508,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":58,"cvssVersion":40,"severity":59,"isKev":17,"epssScore":79},"CVE-2008-3440","Sun Java 1.6.0_03 and earlier versions, and possibly later versions, does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.","2008-08-01",0.02409,{"cveId":81,"description":82,"publishedDate":73,"cvssScore":39,"cvssVersion":40,"severity":41,"isKev":17,"epssScore":83},"CVE-2005-2529","Unspecified vulnerability in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to gain privileges via unspecified attack vectors relating to \"the utility used to update Java shared archives.\"",0.02309,{"cveId":85,"description":86,"publishedDate":46,"cvssScore":87,"cvssVersion":40,"severity":48,"isKev":17,"epssScore":88},"CVE-2009-1104","The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; and 1.4.2_19 and earlier does not prevent Javascript that is loaded from the localhost from connecting to other ports on the system, which allows user-assisted attackers to bypass intended access restrictions via LiveConnect, aka CR 6724331.  NOTE: this vulnerability can be leveraged with separate cross-site scripting (XSS) vulnerabilities for remote attack vectors.",5.8,0.02165,[],{"title":91,"metaDescription":92,"keywords":93,"structuredData":94},"Java by Sun - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Java by Sun covering 5 versions with 14 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Java vulnerabilities, Java security, Java CVE, Sun Java, Java threat intelligence, Sun security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":95,"@type":96,"name":97,"description":92,"url":98,"manufacturer":99,"applicationCategory":103,"softwareVersion":104,"mainEntity":105},"https:\u002F\u002Fschema.org","SoftwareApplication","Java","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsun\u002Fjava",{"@type":100,"name":101,"url":102},"Organization","Sun","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsun","Security Software","5 versions tracked",{"@type":106,"name":107,"description":108,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Java Security Vulnerabilities","Security vulnerabilities affecting Java by Sun",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":110,"apiVersion":111},"2026-10-17T19:17:52.711Z","3.0",{"rows":113,"total":11,"capped":17,"failed":11},[],[115,118,121,124,127,130,133,136,139,142,144,146],{"product":116,"cves":117},"java_system_web_server",32,{"product":119,"cves":120},"java_system_application_server",22,{"product":122,"cves":123},"java_se",21,{"product":125,"cves":126},"java_system_identity_manager",19,{"product":128,"cves":129},"java_system_directory_server",18,{"product":131,"cves":132},"java_system_access_manager",16,{"product":134,"cves":135},"java_system_web_proxy_server",12,{"product":137,"cves":138},"java_desktop_system",7,{"product":140,"cves":141},"java_system_portal_server",6,{"product":143,"cves":9},"java_system_communications_express",{"product":145,"cves":9},"java_web_start",{"product":147,"cves":148},"java_plug-in",4]