Unscored severity · published Nov 3, 2009
CVE-2009-3852
Unspecified vulnerability in the XML component in IBM Runtimes for Java Technology 5.0.0 before SR10 has unknown impact and attack vectors, related to the "updated version of…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Unspecified vulnerability in the XML component in IBM Runtimes for Java Technology 5.0.0 before SR10 has unknown impact and attack vectors, related to the "updated version of XML4J 4.4.17."
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RF
Runtimes For Java Technology · Ibm
through 5.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-3852
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-3852
Vendor Advisory
http://secunia.com/advisories/37210
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ63920
www.securityfocus.com
http://www.securityfocus.com/bid/36894
Vendor Advisory
http://www.vupen.com/english/advisories/2009/3106
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/54069
More from Runtimes For Java Technology
7.8
CVE-2018-1890
IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local users
–
CVE-2011-0311
The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java Technology 5.0.0 before SR13 and 6.0.0 before SR10, allows remote authenticated users to…