01 Record
CVE-2004-2764
Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and unprivileged servlets to gain privileges and read
UnratedPUBLISHEDCNA: mitre
CNA base scoreUnratedNo CNA CVSS vector
02 Description
Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and unprivileged servlets to gain privileges and read
03 Exploitation and scoring
- Exploitation
- Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
- SSVC decision
- Not assessed by CISA
- EPSS probability
- 2.36% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 83.2% of scored records. A rank, not a probability.
- NVD base score
- The NVD has published no score for this record
- NVD CVSS vector
- No NVD score to derive
- NVD analysis status
- Modified. NVD last modified this record on 2026-06-16.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2009-06-02 10:00Z17 YR AGO
- Last updated
- 2024-08-08 01:36Z2 YR AGO
- Reserved
- 2009-06-01
- Assigning CNA
- mitre
- Record state
- PUBLISHED
- Severity
- Not rated by the issuing CNA
- CNA CVSS vector
- Not published by the issuing CNA
- Weaknesses
- Data version
- 5.1
- Document digest
- 0527ad06f80d2e32cea531f783ab788a8f16c121cd8cad68b0f63d75165bd126
05 Affected products
06 References
- groups.google.comHPSBUX01087http://groups.google.com/group/comp.security.unix/tree/browse_frm/month/2004-10/fe63f1daa9689d50?rnum=161&_done=%2Fgroup%2Fcomp.security.unix%2Fbrowse_frm%2Fmonth%2F2004-10%3Ffwc%3D1%26#doc_29036353582c690d
- exchange.xforce.ibmcloud.comsun-xslt-applet-gain-privileges(16864)https://exchange.xforce.ibmcloud.com/vulnerabilities/16864
- www.osvdb.org8288http://www.osvdb.org/8288
- archive.cert.uni-stuttgart.de57613http://archive.cert.uni-stuttgart.de/uniras/2004/08/msg00007.html
- securitytracker.com1011661http://securitytracker.com/id?1011661
- www.securityfocus.com20040808 Java XSLT security advisory addendumhttp://www.securityfocus.com/archive/1/371208
- secunia.com12206http://secunia.com/advisories/12206
- www.securityfocus.com10844http://www.securityfocus.com/bid/10844