Sun Jsse vulnerabilities

3 CVEs affecting Sun Jsse, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-5201, published 2006-10-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2003-1229, published 2003-12-31. High severity, CVSS 7.5. EPSS: 4.6% chance of exploitation in the next 30 days. X509TrustManager in (1) Java Secure Socket Extension (JSSE) in SDK and JRE 1.4.0 through 1.4.0_01, (2) JSSE before 1.0.3, (3) Java Plug-in SDK and JRE 1.3.0 through 1.4.1, and (4) Java Web Start 1.0…
CVE-2006-5201, published 2006-10-10. Medium severity, CVSS 4.0. EPSS: 3.4% chance of exploitation in the next 30 days. Multiple packages on Sun Solaris, including (1) NSS; (2) Java JDK and JRE 5.0 Update 8 and earlier, SDK and JRE 1.4.x up to 1.4.2_12, and SDK and JRE 1.3.x up to 1.3.1_19; (3) JSSE 1.0.3_03 and…
CVE-2004-2393, published 2004-12-31. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2 does not properly validate the certificate chain of a client or server, which allows remote attackers to falsely authenticate peers for…