VULNERABILITY INTELLIGENCE

CVE-2004-1489

CVSS score2.6 LOW
EPSS probability2.01%
CISA KEVNot currently listed
Published2004-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:N/A:N

Description

Opera 7.54 and earlier does not properly limit an applet's access to internal Java packages from Sun, which allows remote attackers to gain sensitive information, such as user names and the installation directory.

Weakness classification

  • CWE-668: Exposure of Resource to Wrong Sphere

Primary references