[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fm3PwjvtOCPeavD3QKvQDaZhSgoBGUdjTgsqSXo_xqUQ":3,"g5a-risk:CVE-2009-2476":189},{"success":4,"data":5,"meta":187},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":28,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":44,"references":45,"referencesCount":142,"weaknesses":143,"weaknessesCount":147,"isActivelyExploited":30,"cisaInfo":28,"otxData":28,"relatedBlogPosts":148,"seoMetadata":149,"configurations":174,"relatedVendorCves":185,"notableEvents":186},"CVE-2009-2476","What is CVE-2009-2476?","The Java Management Extensions (JMX) implementation in Sun Java SE 6 before Update 15, and OpenJDK, does not properly enforce OpenType checks, which allows context-dependent attackers to bypass intended access restrictions by leveraging finalizer resurrection to obtain a reference to a privileged object.","The Java Management Extensions (JMX) implementation in Sun Java SE 6 before Update 15, and OpenJDK, does not properly enforce OpenType checks, which allows c...","2009-08-10T18:30:00.407","2026-06-16T23:09:31.98",10,"AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":31},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":12,"ImpactScore":12,"ACInsufInfo":30,"ObtainAllPrivilege":4,"ObtainUserPrivilege":30,"ObtainOtherPrivilege":30,"UserInteractionRequired":30},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","COMPLETE","",null,"HIGH",false,[],0.02877,[32,32,32,32,32,32,32],"Critical",[36,41],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"sun","java_se","*","cpe:2.3:a:sun:java_se:*:14:*:*:*:*:*:*",{"vendor":37,"product":42,"version":39,"criteria":43,"vulnerable":4},"openjdk","cpe:2.3:a:sun:openjdk:*:*:*:*:*:*:*:*",2,[46,51,55,59,63,66,69,72,76,80,84,88,92,96,99,102,105,108,110,112,114,116,118,120,122,124,126,128,130,132,134,136,138,140],{"url":47,"source":48,"tags":49},"http:\u002F\u002Fjava.sun.com\u002Fjavase\u002F6\u002Fwebnotes\u002F6u15.html","Sun",[50],"Vendor Advisory",{"url":52,"source":53,"tags":54},"http:\u002F\u002Flists.apple.com\u002Farchives\u002Fsecurity-announce\u002F2009\u002FSep\u002Fmsg00000.html","Apple",[],{"url":56,"source":57,"tags":58},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2009-10\u002Fmsg00001.html","Opensuse",[],{"url":60,"source":61,"tags":62},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F36162","Secunia",[50],{"url":64,"source":61,"tags":65},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F36176",[50],{"url":67,"source":61,"tags":68},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F36180",[50],{"url":70,"source":61,"tags":71},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F37386",[],{"url":73,"source":74,"tags":75},"http:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002Fglsa-200911-02.xml","Gentoo",[],{"url":77,"source":48,"tags":78},"http:\u002F\u002Fsunsolve.sun.com\u002Fsearch\u002Fdocument.do?assetkey=1-21-125139-16-1",[79,50],"Patch",{"url":81,"source":82,"tags":83},"http:\u002F\u002Fwww.mandriva.com\u002Fsecurity\u002Fadvisories?name=MDVSA-2009:209","Mandriva",[],{"url":85,"source":86,"tags":87},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2009\u002F2543","Vupen",[],{"url":89,"source":90,"tags":91},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=513220","Red Hat",[],{"url":93,"source":94,"tags":95},"https:\u002F\u002Foval.cisecurity.org\u002Frepository\u002Fsearch\u002Fdefinition\u002Foval%3Aorg.mitre.oval%3Adef%3A10381","Cisecurity",[],{"url":97,"source":90,"tags":98},"https:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2009-1200.html",[],{"url":100,"source":90,"tags":101},"https:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2009-1201.html",[],{"url":103,"source":90,"tags":104},"https:\u002F\u002Fwww.redhat.com\u002Farchives\u002Ffedora-package-announce\u002F2009-August\u002Fmsg00310.html",[],{"url":106,"source":90,"tags":107},"https:\u002F\u002Fwww.redhat.com\u002Farchives\u002Ffedora-package-announce\u002F2009-August\u002Fmsg00325.html",[],{"url":47,"source":48,"tags":109},[50],{"url":52,"source":53,"tags":111},[],{"url":56,"source":57,"tags":113},[],{"url":60,"source":61,"tags":115},[50],{"url":64,"source":61,"tags":117},[50],{"url":67,"source":61,"tags":119},[50],{"url":70,"source":61,"tags":121},[],{"url":73,"source":74,"tags":123},[],{"url":77,"source":48,"tags":125},[79,50],{"url":81,"source":82,"tags":127},[],{"url":85,"source":86,"tags":129},[],{"url":89,"source":90,"tags":131},[],{"url":93,"source":94,"tags":133},[],{"url":97,"source":90,"tags":135},[],{"url":100,"source":90,"tags":137},[],{"url":103,"source":90,"tags":139},[],{"url":106,"source":90,"tags":141},[],34,[144],{"id":145,"name":145,"description":146},"Unknown","CWE-264",1,[],{"title":150,"metaDescription":151,"keywords":152,"canonicalUrl":153,"structuredData":154},"What is CVE-2009-2476? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2009-2476, a critical severity cyber security vulnerability from 2009. The Java Management Extensions (JMX) implementation in S...","CVE-2009-2476, CVE-2009-2476 vulnerability, CVE-2009-2476 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2009, CVSS score, exploit, patch, remediation, sun security, java_se vulnerability, openjdk vulnerability","\u002Fwhat-is\u002Fcve-2009-2476",{"@context":155,"@type":156,"headline":150,"description":151,"datePublished":10,"dateModified":11,"author":157,"publisher":161,"about":165,"mainEntityOfPage":169,"articleSection":172,"keywords":173},"https:\u002F\u002Fschema.org","TechArticle",{"@type":158,"name":159,"url":160},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":158,"name":159,"url":160,"logo":162},{"@type":163,"url":164},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":166,"name":6,"description":167,"additionalType":168},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":170,"@id":171},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2009-2476","Cybersecurity","CVE-2009-2476, CVE-2009-2476 vulnerability, CVE-2009-2476 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[175],{"Operator":28,"Negate":28,"Nodes":176},[177],{"Operator":178,"Negate":30,"CPEMatch":179},"OR",[180,183],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":181,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":182},"EB9DE8D5-D4F6-45DE-9DB4-9E5BB7E518F9","6",{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":184,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"0E78309B-E13F-4B65-9F59-39A993B900AF",[],[],{"lastModified":11,"cacheTime":188,"version":22},1792265579292,{"score":190,"band":191,"action":192,"scoredAt":193},54,"Medium","Plan remediation","2026-10-17T06:36:48.524763+00:00"]