SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-1999-1262

Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, which violates the Java security model and could allow remote attackers to conduct unauthorized activities.

MEDIUM 5.1EPSS 1.62%

Does this matter?

Lower severity and a low EPSS score (1.62%). Track it; it rarely justifies an emergency change on its own.

Description

Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, which violates the Java security model and could allow remote attackers to conduct unauthorized activities.

CVSS 2.0
5.1 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P
EPSS
1.62% probability · 75th percentile
CISA KEV
Not listed
Affected
netscape/communicator
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.