Sun Java Plug-In vulnerabilities

4 CVEs affecting Sun Java Plug-In, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-4845, published 2005-12-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2003-1521, published 2003-12-31. Medium severity, CVSS 6.4. EPSS: 5.8% chance of exploitation in the next 30 days. Sun Java Plug-In 1.4 through 1.4.2_02 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class, which violates…
CVE-2003-1516, published 2003-12-31. Medium severity, CVSS 6.8. EPSS: 4.3% chance of exploitation in the next 30 days. The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed and unsigned applets to share variables, which violates the Java security model and could allow remote…
CVE-2001-1008, published 2001-08-31. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that has been signed by an…
CVE-2005-4845, published 2005-12-31. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. The Java Plug-in 1.4.2_03 and 1.4.2_04 controls, and the 1.4.2_03 and 1.4.2_04 <applet> redirector controls, allow remote attackers to cause a denial of service (Internet Explorer crash) by creating…