CVE-2019-2958
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2019-2958
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Oracle Java SE和Oracle Java SE Embedded 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Oracle Java SE和Oracle Java SE Embedded都是美国甲骨文（Oracle）公司的产品。Oracle Java SE是一款用于开发和部署桌面、服务器以及嵌入设备和实时环境中的Java应用程序。Oracle Java SE Embedded是一款针对嵌入式系统的、可移植的应用程序的Java平台。 Oracle Java SE和Java SE Embedded中的Libraries组件存在安全漏洞。攻击者可利用该漏洞未授权创建、删除或修改数据，影响数据的完整性。以下产品及版本受到
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Oracle Corporation | Java | Java SE: 7u231, 8u221, 11.0.4, 13 | - |
II. Public POCs for CVE-2019-2958
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-2958
请登录查看更多情报信息。
- https://security.netapp.com/advisory/ntap-20191017-0001/x_refsource_CONFIRM
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.htmlvendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.htmlvendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.htmlvendor-advisoryx_refsource_SUSE
- https://nvd.nist.gov/vuln/detail/CVE-2019-2958
Same Patch Batch · Oracle Corporation · 2019-10-16 · 137 CVEs total
| CVE-2019-2943 | Oracle Fusion Middleware Data Integrator 安全漏洞 | |
| CVE-2019-2915 | Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools组件安全漏洞 | |
| CVE-2019-2914 | Oracle MySQL Server 安全漏洞 | |
| CVE-2019-2913 | Oracle Database Server Core RDBMS组件信息泄露漏洞 | |
| CVE-2019-2911 | Oracle MySQL Server 安全漏洞 | |
| CVE-2019-2910 | Oracle MySQL Server 安全漏洞 | |
| CVE-2019-2909 | Oracle Database Server Java VM组件输入验证错误漏洞 | |
| CVE-2019-2907 | Oracle Fusion Middleware Web Services 安全漏洞 | |
| CVE-2019-2906 | Oracle Fusion Middleware BI Publisher 安全漏洞 | |
| CVE-2019-2905 | Oracle Fusion Middleware Business Intelligence Enterprise Edition 信息泄露漏洞 | |
| CVE-2019-2950 | Oracle MySQL Server 安全漏洞 | |
| CVE-2019-2949 | Oracle Java SE和Oracle Java SE Embedded 安全漏洞 | |
| CVE-2019-2948 | Oracle MySQL Server 安全漏洞 | |
| CVE-2019-2947 | Oracle Food and Beverage Applications Hospitality Reporting and Analytics组件安全漏洞 | |
| CVE-2019-2946 | Oracle MySQL Server 安全漏洞 | |
| CVE-2019-2945 | Oracle Java SE和Oracle Java SE Embedded 安全漏洞 | |
| CVE-2019-2944 | Oracle Virtualization VM VirtualBox 安全漏洞 | |
| CVE-2019-2933 | Oracle Java SE和Oracle Java SE Embedded 信息泄露漏洞 | |
| CVE-2019-2968 | Oracle MySQL Server 安全漏洞 | |
| CVE-2019-2932 | Oracle PeopleSoft PeopleSoft Enterprise PeopleTools 安全漏洞 |
Showing top 20 of 137 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2019-2958
No comments yet