VulnerableCode Vulnerability Details

Staging Environment: Content and features may be unstable or change without notice.

Search for vulnerabilities

Vulnerability details: VCID-xnsc-n6vd-xkc1

Vulnerability ID	VCID-xnsc-n6vd-xkc1
Aliases	CVE-2010-3573
Summary	Multiple vulnerabilities have been found in the Oracle JRE/JDK, allowing attackers to cause unspecified impact.
Status	Published
Exploitability	2.0
Weighted Severity	0.1
Risk	0.2
Affected and Fixed Packages	Package Details

Weaknesses (0)

There are no known CWE.

System	Score	Found at
epss	0.08411	https://api.first.org/data/v1/epss?cve=CVE-2010-3573
epss	0.08411	https://api.first.org/data/v1/epss?cve=CVE-2010-3573
epss	0.08411	https://api.first.org/data/v1/epss?cve=CVE-2010-3573

Reference id	Reference type	URL
		https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-3573.json
		https://api.first.org/data/v1/epss?cve=CVE-2010-3573
642202		https://bugzilla.redhat.com/show_bug.cgi?id=642202
CVE-2010-3573	Exploit	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/15288.txt
CVE-2010-3573	Exploit	http://www.security-assessment.com/files/advisories/java_net_urlconnection_sop_bypass_demo.swf
GLSA-201111-02		https://security.gentoo.org/glsa/201111-02
GLSA-201406-32		https://security.gentoo.org/glsa/201406-32
RHSA-2010:0873		https://access.redhat.com/errata/RHSA-2010:0873
USN-1010-1		https://usn.ubuntu.com/1010-1/

Data source	Exploit-DB
Date added	Oct. 20, 2010
Description	Oracle JRE - java.net.URLConnection class Same-of-Origin 'SOP' Policy Bypass
Ransomware campaign use	Unknown
Source publication date	Oct. 20, 2010
Exploit type	remote
Platform	windows
Source update date	Oct. 20, 2010
Source URL	http://www.security-assessment.com/files/advisories/java_net_urlconnection_sop_bypass_demo.swf

There are no known vectors.

Exploit Prediction Scoring System (EPSS)

Date	Actor	Action	Source	VulnerableCode Version
2026-06-11T17:55:39.976948+00:00	Gentoo Importer	Import	https://security.gentoo.org/glsa/201111-02	38.6.0