Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-xx59-6jd1-wbdr
Vulnerability ID VCID-xx59-6jd1-wbdr
Aliases CVE-2019-2766
Summary OpenJDK: Insufficient permission checks for file:// URLs on Windows (Networking, 8213431)
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
ssvc Track http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html
ssvc Track http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html
cvssv3 3.1 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2766.json
epss 0.01179 https://api.first.org/data/v1/epss?cve=CVE-2019-2766
epss 0.01649 https://api.first.org/data/v1/epss?cve=CVE-2019-2766
epss 0.01649 https://api.first.org/data/v1/epss?cve=CVE-2019-2766
epss 0.01649 https://api.first.org/data/v1/epss?cve=CVE-2019-2766
epss 0.01649 https://api.first.org/data/v1/epss?cve=CVE-2019-2766
epss 0.01649 https://api.first.org/data/v1/epss?cve=CVE-2019-2766
epss 0.01649 https://api.first.org/data/v1/epss?cve=CVE-2019-2766
epss 0.01649 https://api.first.org/data/v1/epss?cve=CVE-2019-2766
epss 0.01649 https://api.first.org/data/v1/epss?cve=CVE-2019-2766
cvssv3 3.1 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
ssvc Track https://kc.mcafee.com/corporate/index?page=content&id=SB10300
ssvc Track https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03977en_us
ssvc Track http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2766.json
https://api.first.org/data/v1/epss?cve=CVE-2019-2766
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1730459 https://bugzilla.redhat.com/show_bug.cgi?id=1730459
cpujul2019-5072835.html http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
index?page=content&id=SB10300 https://kc.mcafee.com/corporate/index?page=content&id=SB10300
No exploits are available.
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-01T16:18:00Z/ Found at http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-01T16:18:00Z/ Found at http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2766.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-01T16:18:00Z/ Found at https://kc.mcafee.com/corporate/index?page=content&id=SB10300
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-01T16:18:00Z/ Found at https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03977en_us
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-01T16:18:00Z/ Found at http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
Exploit Prediction Scoring System (EPSS)
Percentile 0.7874
EPSS Score 0.01179
Published At April 13, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T14:18:15.510131+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-2766.json 38.0.0