← Vulnerability feed

Vulnerability record · CVE-2002-2005 · published 31 December 2002

CVE-2002-2005: Sun java web start vulnerability

Sun · Java Web Start

Unknown vulnerability in Java web start 1.0.1_01, 1.0.1, 1.0 and 1.0.1.01 (HP-UX 11.x only) allows attackers to gain access to restricted resources via unknown attack vectors.

7.5 CVSS 2.0 High EPSS 1.8% · top 21.9%
7.5CVSS 2.0 base score
1.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
16 Jun 2026Last modified by NVD

Description

Unknown vulnerability in Java web start 1.0.1_01, 1.0.1, 1.0 and 1.0.1.01 (HP-UX 11.x only) allows attackers to gain access to restricted resources via unknown attack vectors.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://archives.neohapsis.com/archives/hp/2002-q1/0084.html Patch
http://cert.uni-stuttgart.de/archive/bugtraq/2002/03/msg00279.html Patch
http://www.iss.net/security_center/static/8483.php Patch
http://www.securityfocus.com/bid/4310
http://archives.neohapsis.com/archives/hp/2002-q1/0084.html Patch
http://cert.uni-stuttgart.de/archive/bugtraq/2002/03/msg00279.html Patch
http://www.iss.net/security_center/static/8483.php Patch
http://www.securityfocus.com/bid/4310

Track CVE-2002-2005 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2008-4910Sun java web start improper input validation vulnerabilityThe BasicService in Sun Java Web Start allows remote attackers to execute arbitrary programs on a client machine via a file:// URL argument to the sh…EPSS 10%10.0CVE-2007-5019Sun java web start memory buffer overflow vulnerabilityBuffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment (JRE) 1.6.0_X allows remote attackers to have an unknown impact…EPSS 10%7.5CVE-2003-1229Oracle jre improper certificate validation vulnerabilityX509TrustManager in (1) Java Secure Socket Extension (JSSE) in SDK and JRE 1.4.0 through 1.4.0_01, (2) JSSE before 1.0.3, (3) Java Plug-in SDK and JR…EPSS 4.6%5.0CVE-2006-4302Sun j2se permissions and access controls vulnerabilityThe Java Plug-in J2SE 1.3.0_02 through 5.0 Update 5, and Java Web Start 1.0 through 1.2 and J2SE 1.4.2 through 5.0 Update 5, allows remote attackers …EPSS 4.0%

Source: NIST National Vulnerability Database (record CVE-2002-2005), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.