CVE-2009-1006: Oracle JRockit

High severity, CVSS 10.0. EPSS: 2.7% chance of exploitation in the next 30 days.

Unspecified vulnerability in the JRockit component in BEA Product Suite R27.6.2 and earlier, with SDK/JRE 1.4.2, JRE/JDK 5, and JRE/JDK 6, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Affected products

• Oracle JRockit: up to and including r27.6.2; version r26.0 only; version r26.1 only; version r26.2 only; version r26.3 only; version r26.4 only; …

Published 2009-04-15. Last modified 2026-06-16.