AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2009-1107

MEDIUM · CVSS 4.3 EPSS 2.80%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-03-25 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2009-1107
Severity
MEDIUM
CVSS
4.3
EPSS
2.80%
Java

Original NVD Description

The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog, related to a "Swing JLabel HTML parsing vulnerability," aka CR 6782871.