Search for vulnerabilities
Vulnerability details: VCID-c7x5-ag8c-wbfg
Vulnerability ID VCID-c7x5-ag8c-wbfg
Aliases CVE-2019-2762
Summary Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
Status Published
Exploitability 0.5
Weighted Severity 4.8
Risk 2.4
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
ssvc Track http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html
ssvc Track http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html
ssvc Track https://access.redhat.com/errata/RHSA-2019:2494
ssvc Track https://access.redhat.com/errata/RHSA-2019:2495
ssvc Track https://access.redhat.com/errata/RHSA-2019:2585
ssvc Track https://access.redhat.com/errata/RHSA-2019:2590
ssvc Track https://access.redhat.com/errata/RHSA-2019:2592
ssvc Track https://access.redhat.com/errata/RHSA-2019:2737
cvssv3 5.3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2762.json
epss 0.00095 https://api.first.org/data/v1/epss?cve=CVE-2019-2762
epss 0.00095 https://api.first.org/data/v1/epss?cve=CVE-2019-2762
epss 0.00095 https://api.first.org/data/v1/epss?cve=CVE-2019-2762
epss 0.00095 https://api.first.org/data/v1/epss?cve=CVE-2019-2762
epss 0.00095 https://api.first.org/data/v1/epss?cve=CVE-2019-2762
epss 0.00095 https://api.first.org/data/v1/epss?cve=CVE-2019-2762
epss 0.00095 https://api.first.org/data/v1/epss?cve=CVE-2019-2762
epss 0.00095 https://api.first.org/data/v1/epss?cve=CVE-2019-2762
epss 0.00095 https://api.first.org/data/v1/epss?cve=CVE-2019-2762
epss 0.00095 https://api.first.org/data/v1/epss?cve=CVE-2019-2762
epss 0.00095 https://api.first.org/data/v1/epss?cve=CVE-2019-2762
epss 0.00095 https://api.first.org/data/v1/epss?cve=CVE-2019-2762
epss 0.00095 https://api.first.org/data/v1/epss?cve=CVE-2019-2762
epss 0.00095 https://api.first.org/data/v1/epss?cve=CVE-2019-2762
epss 0.00095 https://api.first.org/data/v1/epss?cve=CVE-2019-2762
epss 0.00095 https://api.first.org/data/v1/epss?cve=CVE-2019-2762
epss 0.00095 https://api.first.org/data/v1/epss?cve=CVE-2019-2762
epss 0.00341 https://api.first.org/data/v1/epss?cve=CVE-2019-2762
cvssv3 5.3 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
ssvc Track https://kc.mcafee.com/corporate/index?page=content&id=SB10300
ssvc Track https://lists.debian.org/debian-lts-announce/2019/08/msg00020.html
cvssv2 5.0 https://nvd.nist.gov/vuln/detail/CVE-2019-2762
cvssv3.1 5.3 https://nvd.nist.gov/vuln/detail/CVE-2019-2762
ssvc Track https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03977en_us
ssvc Track https://usn.ubuntu.com/4080-1/
ssvc Track https://usn.ubuntu.com/4083-1/
ssvc Track http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2762.json
https://api.first.org/data/v1/epss?cve=CVE-2019-2762
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2745
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2762
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2769
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2786
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2816
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2818
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2821
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2842
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1730415 https://bugzilla.redhat.com/show_bug.cgi?id=1730415
cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*
cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*
cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*
cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*
cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*
cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_4:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_4:*:*:*:*:*:*
cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:11.0.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:oracle:jdk:11.0.3:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:12.0.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:oracle:jdk:12.0.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.7.0:update221:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:oracle:jdk:1.7.0:update221:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8.0:update211:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:oracle:jdk:1.8.0:update211:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8.0:update212:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:oracle:jdk:1.8.0:update212:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:11.0.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:oracle:jre:11.0.3:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:12.0.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:oracle:jre:12.0.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.7.0:update221:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:oracle:jre:1.7.0:update221:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update211:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:oracle:jre:1.8.0:update211:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update212:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:oracle:jre:1.8.0:update212:*:*:*:*:*:*
cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
cpujul2019-5072835.html http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
CVE-2019-2762 https://nvd.nist.gov/vuln/detail/CVE-2019-2762
display?docLocale=en_US&docId=emr_na-hpesbst03977en_us https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03977en_us
index?page=content&id=SB10300 https://kc.mcafee.com/corporate/index?page=content&id=SB10300
msg00020.html https://lists.debian.org/debian-lts-announce/2019/08/msg00020.html
msg00038.html http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html
msg00044.html http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html
RHSA-2019:1810 https://access.redhat.com/errata/RHSA-2019:1810
RHSA-2019:1811 https://access.redhat.com/errata/RHSA-2019:1811
RHSA-2019:1815 https://access.redhat.com/errata/RHSA-2019:1815
RHSA-2019:1816 https://access.redhat.com/errata/RHSA-2019:1816
RHSA-2019:1817 https://access.redhat.com/errata/RHSA-2019:1817
RHSA-2019:1839 https://access.redhat.com/errata/RHSA-2019:1839
RHSA-2019:1840 https://access.redhat.com/errata/RHSA-2019:1840
RHSA-2019:2494 https://access.redhat.com/errata/RHSA-2019:2494
RHSA-2019:2495 https://access.redhat.com/errata/RHSA-2019:2495
RHSA-2019:2585 https://access.redhat.com/errata/RHSA-2019:2585
RHSA-2019:2590 https://access.redhat.com/errata/RHSA-2019:2590
RHSA-2019:2592 https://access.redhat.com/errata/RHSA-2019:2592
RHSA-2019:2737 https://access.redhat.com/errata/RHSA-2019:2737
USN-4080-1 https://usn.ubuntu.com/4080-1/
USN-4083-1 https://usn.ubuntu.com/4083-1/
No exploits are available.
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:30:03Z/ Found at http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:30:03Z/ Found at http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:30:03Z/ Found at https://access.redhat.com/errata/RHSA-2019:2494
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:30:03Z/ Found at https://access.redhat.com/errata/RHSA-2019:2495
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:30:03Z/ Found at https://access.redhat.com/errata/RHSA-2019:2585
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:30:03Z/ Found at https://access.redhat.com/errata/RHSA-2019:2590
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:30:03Z/ Found at https://access.redhat.com/errata/RHSA-2019:2592
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:30:03Z/ Found at https://access.redhat.com/errata/RHSA-2019:2737
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2762.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:30:03Z/ Found at https://kc.mcafee.com/corporate/index?page=content&id=SB10300
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:30:03Z/ Found at https://lists.debian.org/debian-lts-announce/2019/08/msg00020.html
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2019-2762
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Found at https://nvd.nist.gov/vuln/detail/CVE-2019-2762
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:30:03Z/ Found at https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03977en_us
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:30:03Z/ Found at https://usn.ubuntu.com/4080-1/
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:30:03Z/ Found at https://usn.ubuntu.com/4083-1/
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:30:03Z/ Found at http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
Exploit Prediction Scoring System (EPSS)
Percentile 0.27608
EPSS Score 0.00095
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:29:13.941769+00:00 Alpine Linux Importer Import https://secdb.alpinelinux.org/v3.11/community.json 37.0.0