Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-kptw-3u1d-3ugk
Vulnerability ID VCID-kptw-3u1d-3ugk
Aliases CVE-2019-2684
Summary Multiple vulnerabilities have been found in Oracle’s JDK and JRE software suites.
Status Published
Exploitability 0.5
Weighted Severity 5.3
Risk 2.6
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
ssvc Track http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00007.html
ssvc Track http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.html
ssvc Track http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html
ssvc Track http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.html
ssvc Track https://access.redhat.com/errata/RHBA-2019:0959
ssvc Track https://access.redhat.com/errata/RHSA-2019:1146
ssvc Track https://access.redhat.com/errata/RHSA-2019:1163
ssvc Track https://access.redhat.com/errata/RHSA-2019:1164
ssvc Track https://access.redhat.com/errata/RHSA-2019:1165
ssvc Track https://access.redhat.com/errata/RHSA-2019:1166
ssvc Track https://access.redhat.com/errata/RHSA-2019:1238
ssvc Track https://access.redhat.com/errata/RHSA-2019:1325
ssvc Track https://access.redhat.com/errata/RHSA-2019:1518
cvssv3 5.9 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2684.json
epss 0.01264 https://api.first.org/data/v1/epss?cve=CVE-2019-2684
epss 0.01264 https://api.first.org/data/v1/epss?cve=CVE-2019-2684
epss 0.01264 https://api.first.org/data/v1/epss?cve=CVE-2019-2684
epss 0.01264 https://api.first.org/data/v1/epss?cve=CVE-2019-2684
epss 0.01264 https://api.first.org/data/v1/epss?cve=CVE-2019-2684
epss 0.01264 https://api.first.org/data/v1/epss?cve=CVE-2019-2684
epss 0.01264 https://api.first.org/data/v1/epss?cve=CVE-2019-2684
epss 0.01264 https://api.first.org/data/v1/epss?cve=CVE-2019-2684
epss 0.01264 https://api.first.org/data/v1/epss?cve=CVE-2019-2684
cvssv3 5.9 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
ssvc Track https://lists.apache.org/thread.html/38a01302c92ae513910d8c851a2d111736565bd698be4e3af3e4c063%40%3Cdev.tomcat.apache.org%3E
ssvc Track https://lists.apache.org/thread.html/43530b91506e2e0c11cfbe691173f5df8c48f51b98262426d7493b67%40%3Cannounce.tomcat.apache.org%3E
ssvc Track https://lists.apache.org/thread.html/71bd3e4e222479c266eaafc8d0c171ef5782a69b52f68df11b650ed7%40%3Cusers.tomcat.apache.org%3E
ssvc Track https://lists.apache.org/thread.html/c58d6c3b49c615916b163809f963a55421cac2264885739508e68108%40%3Cannounce.apache.org%3E
ssvc Track https://lists.apache.org/thread.html/f7f54b4888060d99f59993f006e25005a2b58db0c07ff866bdcd6f17%40%3Cdev.tomcat.apache.org%3E
ssvc Track https://lists.apache.org/thread.html/r1fd117082b992e7d43c1286e966c285f98aa362e685695d999ff42f7%40%3Cuser.cassandra.apache.org%3E
ssvc Track https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E
ssvc Track https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E
ssvc Track https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E
ssvc Track https://lists.apache.org/thread.html/r718e01f61b35409a4f7a3ccbc1cb5136a1558a9f9c2cb8d4ca9be1ce%40%3Cuser.cassandra.apache.org%3E
ssvc Track https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E
ssvc Track https://lists.apache.org/thread.html/rab8d90d28f944d84e4d7852f355a25c89451ae02c2decc4d355a9cfc%40%3Cuser.cassandra.apache.org%3E
ssvc Track https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E
ssvc Track https://lists.apache.org/thread.html/rcd7544b24d8fc32b7950ec4c117052410b661babaa857fb1fc641152%40%3Cdev.cassandra.apache.org%3E
ssvc Track https://lists.apache.org/thread.html/rcd7544b24d8fc32b7950ec4c117052410b661babaa857fb1fc641152%40%3Cuser.cassandra.apache.org%3E
ssvc Track https://lists.debian.org/debian-lts-announce/2019/05/msg00011.html
ssvc Track https://seclists.org/bugtraq/2019/May/75
ssvc Track https://security.gentoo.org/glsa/201908-10
ssvc Track https://support.f5.com/csp/article/K11175903?utm_source=f5support&amp%3Butm_medium=RSS
ssvc Track https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03959en_us
ssvc Track https://usn.ubuntu.com/3975-1/
ssvc Track https://www.debian.org/security/2019/dsa-4453
ssvc Track http://www.openwall.com/lists/oss-security/2020/09/01/4
ssvc Track http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2684.json
https://api.first.org/data/v1/epss?cve=CVE-2019-2684
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2602
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2684
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2698
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1700564 https://bugzilla.redhat.com/show_bug.cgi?id=1700564
38a01302c92ae513910d8c851a2d111736565bd698be4e3af3e4c063%40%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/38a01302c92ae513910d8c851a2d111736565bd698be4e3af3e4c063%40%3Cdev.tomcat.apache.org%3E
4 http://www.openwall.com/lists/oss-security/2020/09/01/4
71bd3e4e222479c266eaafc8d0c171ef5782a69b52f68df11b650ed7%40%3Cusers.tomcat.apache.org%3E https://lists.apache.org/thread.html/71bd3e4e222479c266eaafc8d0c171ef5782a69b52f68df11b650ed7%40%3Cusers.tomcat.apache.org%3E
75 https://seclists.org/bugtraq/2019/May/75
c58d6c3b49c615916b163809f963a55421cac2264885739508e68108%40%3Cannounce.apache.org%3E https://lists.apache.org/thread.html/c58d6c3b49c615916b163809f963a55421cac2264885739508e68108%40%3Cannounce.apache.org%3E
display?docLocale=en_US&docId=emr_na-hpesbst03959en_us https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03959en_us
dsa-4453 https://www.debian.org/security/2019/dsa-4453
f7f54b4888060d99f59993f006e25005a2b58db0c07ff866bdcd6f17%40%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/f7f54b4888060d99f59993f006e25005a2b58db0c07ff866bdcd6f17%40%3Cdev.tomcat.apache.org%3E
GLSA-201908-10 https://security.gentoo.org/glsa/201908-10
K11175903?utm_source=f5support&amp%3Butm_medium=RSS https://support.f5.com/csp/article/K11175903?utm_source=f5support&amp%3Butm_medium=RSS
msg00007.html http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00007.html
msg00011.html https://lists.debian.org/debian-lts-announce/2019/05/msg00011.html
msg00058.html http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.html
r1fd117082b992e7d43c1286e966c285f98aa362e685695d999ff42f7%40%3Cuser.cassandra.apache.org%3E https://lists.apache.org/thread.html/r1fd117082b992e7d43c1286e966c285f98aa362e685695d999ff42f7%40%3Cuser.cassandra.apache.org%3E
r718e01f61b35409a4f7a3ccbc1cb5136a1558a9f9c2cb8d4ca9be1ce%40%3Cuser.cassandra.apache.org%3E https://lists.apache.org/thread.html/r718e01f61b35409a4f7a3ccbc1cb5136a1558a9f9c2cb8d4ca9be1ce%40%3Cuser.cassandra.apache.org%3E
rab8d90d28f944d84e4d7852f355a25c89451ae02c2decc4d355a9cfc%40%3Cuser.cassandra.apache.org%3E https://lists.apache.org/thread.html/rab8d90d28f944d84e4d7852f355a25c89451ae02c2decc4d355a9cfc%40%3Cuser.cassandra.apache.org%3E
rcd7544b24d8fc32b7950ec4c117052410b661babaa857fb1fc641152%40%3Cdev.cassandra.apache.org%3E https://lists.apache.org/thread.html/rcd7544b24d8fc32b7950ec4c117052410b661babaa857fb1fc641152%40%3Cdev.cassandra.apache.org%3E
RHSA-2019:0774 https://access.redhat.com/errata/RHSA-2019:0774
RHSA-2019:0775 https://access.redhat.com/errata/RHSA-2019:0775
RHSA-2019:0778 https://access.redhat.com/errata/RHSA-2019:0778
RHSA-2019:0790 https://access.redhat.com/errata/RHSA-2019:0790
RHSA-2019:0791 https://access.redhat.com/errata/RHSA-2019:0791
RHSA-2019:1146 https://access.redhat.com/errata/RHSA-2019:1146
RHSA-2019:1163 https://access.redhat.com/errata/RHSA-2019:1163
RHSA-2019:1164 https://access.redhat.com/errata/RHSA-2019:1164
RHSA-2019:1165 https://access.redhat.com/errata/RHSA-2019:1165
RHSA-2019:1166 https://access.redhat.com/errata/RHSA-2019:1166
RHSA-2019:1238 https://access.redhat.com/errata/RHSA-2019:1238
RHSA-2019:1325 https://access.redhat.com/errata/RHSA-2019:1325
RHSA-2019:1518 https://access.redhat.com/errata/RHSA-2019:1518
USN-3975-1 https://usn.ubuntu.com/3975-1/
No exploits are available.
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00007.html
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.html
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.html
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://access.redhat.com/errata/RHBA-2019:0959
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://access.redhat.com/errata/RHSA-2019:1146
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://access.redhat.com/errata/RHSA-2019:1163
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://access.redhat.com/errata/RHSA-2019:1164
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://access.redhat.com/errata/RHSA-2019:1165
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://access.redhat.com/errata/RHSA-2019:1166
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://access.redhat.com/errata/RHSA-2019:1238
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://access.redhat.com/errata/RHSA-2019:1325
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://access.redhat.com/errata/RHSA-2019:1518
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2684.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://lists.apache.org/thread.html/38a01302c92ae513910d8c851a2d111736565bd698be4e3af3e4c063%40%3Cdev.tomcat.apache.org%3E
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://lists.apache.org/thread.html/43530b91506e2e0c11cfbe691173f5df8c48f51b98262426d7493b67%40%3Cannounce.tomcat.apache.org%3E
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://lists.apache.org/thread.html/71bd3e4e222479c266eaafc8d0c171ef5782a69b52f68df11b650ed7%40%3Cusers.tomcat.apache.org%3E
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://lists.apache.org/thread.html/c58d6c3b49c615916b163809f963a55421cac2264885739508e68108%40%3Cannounce.apache.org%3E
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://lists.apache.org/thread.html/f7f54b4888060d99f59993f006e25005a2b58db0c07ff866bdcd6f17%40%3Cdev.tomcat.apache.org%3E
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://lists.apache.org/thread.html/r1fd117082b992e7d43c1286e966c285f98aa362e685695d999ff42f7%40%3Cuser.cassandra.apache.org%3E
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://lists.apache.org/thread.html/r718e01f61b35409a4f7a3ccbc1cb5136a1558a9f9c2cb8d4ca9be1ce%40%3Cuser.cassandra.apache.org%3E
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://lists.apache.org/thread.html/rab8d90d28f944d84e4d7852f355a25c89451ae02c2decc4d355a9cfc%40%3Cuser.cassandra.apache.org%3E
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://lists.apache.org/thread.html/rcd7544b24d8fc32b7950ec4c117052410b661babaa857fb1fc641152%40%3Cdev.cassandra.apache.org%3E
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://lists.apache.org/thread.html/rcd7544b24d8fc32b7950ec4c117052410b661babaa857fb1fc641152%40%3Cuser.cassandra.apache.org%3E
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://lists.debian.org/debian-lts-announce/2019/05/msg00011.html
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://seclists.org/bugtraq/2019/May/75
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://security.gentoo.org/glsa/201908-10
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://support.f5.com/csp/article/K11175903?utm_source=f5support&amp%3Butm_medium=RSS
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03959en_us
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://usn.ubuntu.com/3975-1/
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at https://www.debian.org/security/2019/dsa-4453
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at http://www.openwall.com/lists/oss-security/2020/09/01/4
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-02T13:59:32Z/ Found at http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
Exploit Prediction Scoring System (EPSS)
Percentile 0.79394
EPSS Score 0.01264
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:04:30.406996+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/201908-10 38.0.0