VULNERABILITY INTELLIGENCE
CVE-2009-1105
CVSS score7.5 HIGH
EPSS probability3.56%
CISA KEVNot currently listed
Published2009-03-25
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 allows user-assisted remote attackers to cause a trusted applet to run in an older JRE version, which can be used to exploit vulnerabilities in that older version, aka CR 6706490.