Unscored severity · published Nov 3, 2005
CVE-2005-3472
Unspecified vulnerability in Sun Java System Communications Express 2005Q1 and 2004Q2 allows local and remote attackers to read sensitive information from configuration files
–
CVSS
2.3%
EPSS
No
On KEV
Description
Unspecified vulnerability in Sun Java System Communications Express 2005Q1 and 2004Q2 allows local and remote attackers to read sensitive information from configuration files.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JS
Java System Communications Express · Sun
2004q2; 2005q1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3472
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3472
Patch
http://secunia.com/advisories/17395
securitytracker.com
http://securitytracker.com/id?1015135
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101948-1
www.osvdb.org
http://www.osvdb.org/20448
www.securityfocus.com
http://www.securityfocus.com/bid/15271
www.vupen.com
http://www.vupen.com/english/advisories/2005/2274
More from Java System Communications Express
–
CVE-2010-4456
Unspecified vulnerability in Oracle Sun Java System Communications Express 6.2 and 6.3 allows remote attackers to affect integrity via unknown vectors related to Web Mail
–
CVE-2010-1227
Cross-site scripting (XSS) vulnerability in Sun Java System Communications Express 6.2 and 6.3 allows remote attackers to inject arbitrary web script or HTML via the subject field…
–
CVE-2009-1729
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express 6 2005Q4 (aka 6.2) and 6.3 allow remote attackers to inject arbitrary web script or…
–
CVE-2009-0877
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express allow remote attackers to inject arbitrary web script or HTML via the (1) Full Name…