CVE-2010-4472
Estado: ModificadaBaja (2.6)—
Vulnerabilidad no especificada en Java Runtime Environment (JRE) en Oracle Java SE y Java for Business 6 Update 23 y versiones anteriores permite a atacantes remotos afectar la disponibilidad, relacionado con XML Digital Signature y APIs no especificadas. NOTA: la información previa fue obtenida de febrero 2011 CPU. Oracle no ha comentado sobre las alegaciones de un proveedor downstream de que este problema conlleva el reemplazo de "implementaciones de algoritmos XML DSig Transform o C14N".
CVSS
- Versión: 2.0
- Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
- Puntuación base: 2.6
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 3.01%
- Percentil entre todas las CVEs puntuadas: 87
- Fecha de la puntuación: 12/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- NVD-CWE-noinfo
Referencias
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054115.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054134.html
- http://marc.info/?l=bugtraq&m=134254866602253&w=2
- http://marc.info/?l=bugtraq&m=134254957702612&w=2
- http://secunia.com/advisories/43350
- http://security.gentoo.org/glsa/glsa-201406-32.xml
- http://www.debian.org/security/2011/dsa-2224
- http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-003/index.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:054
- http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html
- http://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.html
- http://www.redhat.com/support/errata/RHSA-2011-0281.html
- http://www.redhat.com/support/errata/RHSA-2011-0282.html
- http://www.securityfocus.com/bid/46404
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65411
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12903
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14118
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054115.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054134.html
- http://marc.info/?l=bugtraq&m=134254866602253&w=2
- http://marc.info/?l=bugtraq&m=134254957702612&w=2
- http://secunia.com/advisories/43350
- http://security.gentoo.org/glsa/glsa-201406-32.xml
- http://www.debian.org/security/2011/dsa-2224
- http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-003/index.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:054
- http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html
- http://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.html
- http://www.redhat.com/support/errata/RHSA-2011-0281.html
- http://www.redhat.com/support/errata/RHSA-2011-0282.html
- http://www.securityfocus.com/bid/46404
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65411
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12903
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14118
JSON original (NVD)
Mostrar
{
"id": "CVE-2010-4472",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 2.6,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "HIGH",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 4.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "secalert_us@oracle.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2011-02-17T19:00:01.747",
"references": [
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054115.html",
"source": "secalert_us@oracle.com"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054134.html",
"source": "secalert_us@oracle.com"
},
{
"url": "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
"source": "secalert_us@oracle.com"
},
{
"url": "http://marc.info/?l=bugtraq&m=134254957702612&w=2",
"source": "secalert_us@oracle.com"
},
{
"url": "http://secunia.com/advisories/43350",
"tags": [
"Vendor Advisory"
],
"source": "secalert_us@oracle.com"
},
{
"url": "http://security.gentoo.org/glsa/glsa-201406-32.xml",
"source": "secalert_us@oracle.com"
},
{
"url": "http://www.debian.org/security/2011/dsa-2224",
"source": "secalert_us@oracle.com"
},
{
"url": "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-003/index.html",
"source": "secalert_us@oracle.com"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:054",
"source": "secalert_us@oracle.com"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html",
"source": "secalert_us@oracle.com"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "secalert_us@oracle.com"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2011-0281.html",
"tags": [
"Vendor Advisory"
],
"source": "secalert_us@oracle.com"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2011-0282.html",
"tags": [
"Vendor Advisory"
],
"source": "secalert_us@oracle.com"
},
{
"url": "http://www.securityfocus.com/bid/46404",
"source": "secalert_us@oracle.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65411",
"source": "secalert_us@oracle.com"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12903",
"source": "secalert_us@oracle.com"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14118",
"source": "secalert_us@oracle.com"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054115.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054134.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://marc.info/?l=bugtraq&m=134254866602253&w=2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://marc.info/?l=bugtraq&m=134254957702612&w=2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/43350",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://security.gentoo.org/glsa/glsa-201406-32.xml",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.debian.org/security/2011/dsa-2224",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-003/index.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:054",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2011-0281.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2011-0282.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/46404",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65411",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12903",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14118",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attackers to affect availability, related to XML Digital Signature and unspecified APIs. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue involves the replacement of the \"XML DSig Transform or C14N algorithm implementations.\""
},
{
"lang": "es",
"value": "Vulnerabilidad no especificada en Java Runtime Environment (JRE) en Oracle Java SE y Java for Business 6 Update 23 y versiones anteriores permite a atacantes remotos afectar la disponibilidad, relacionado con XML Digital Signature y APIs no especificadas. NOTA: la información previa fue obtenida de febrero 2011 CPU. Oracle no ha comentado sobre las alegaciones de un proveedor downstream de que este problema conlleva el reemplazo de \"implementaciones de algoritmos XML DSig Transform o C14N\"."
}
],
"lastModified": "2026-06-16T23:24:52.013",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sun:jre:*:update_23:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0863352B-4389-466F-9240-90944DB1B932",
"versionEndIncluding": "1.6.0"
},
{
"criteria": "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CBCD143C-057D-4F42-B487-46801E14ACF7"
},
{
"criteria": "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09027C19-D442-446F-B7A8-21DB6787CF43"
},
{
"criteria": "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
},
{
"criteria": "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
},
{
"criteria": "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"
},
{
"criteria": "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"
},
{
"criteria": "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"
},
{
"criteria": "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"
},
{
"criteria": "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AADBB4F9-E43E-428B-9979-F47A15696C85"
},
{
"criteria": "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49260B94-05DE-4B78-9068-6F5F6BFDD19E"
},
{
"criteria": "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4FDE9EB-08FE-436E-A265-30E83B15DB23"
},
{
"criteria": "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BE409D5C-8F9F-4DE9-ACB7-0E0B813F6399"
},
{
"criteria": "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7158D2C0-E9AC-4CD6-B777-EA7B7A181997"
},
{
"criteria": "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B08C075B-9FC0-4381-A9E4-FFF0362BD308"
},
{
"criteria": "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F587E635-3A15-4186-B6A1-F99BE0A56820"
},
{
"criteria": "cpe:2.3:a:sun:jre:1.6.0:update_22:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "188D2242-7D16-4F8E-AB61-4663804AAC17"
},
{
"criteria": "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "90EC6C13-4B37-48E5-8199-A702A944D5A6"
},
{
"criteria": "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
},
{
"criteria": "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A99DAB4C-272B-4C91-BC70-7729E1152590"
},
{
"criteria": "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
},
{
"criteria": "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sun:jdk:*:update_23:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F647BC01-31B7-4FF9-B77B-FD4F5B3E708D",
"versionEndIncluding": "1.6.0"
},
{
"criteria": "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A3A4FEC7-A4A0-4B5C-A56C-8F80AE19865E"
},
{
"criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "722A93D8-B5BC-42F3-92A2-E424F61269A8"
},
{
"criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "775F2611-F11C-4B84-8F40-0D034B81BF18"
},
{
"criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F20FDD9F-FF45-48BC-9207-54FB02E76071"
},
{
"criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9FA326F5-894A-4B01-BCA3-B126DA81CA59"
},
{
"criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "228AB7B4-4BA4-43D4-B562-D438884DB152"
},
{
"criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AFD5C688-2103-4D60-979E-D9BE69A989C3"
},
{
"criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "21421215-F722-4207-A2E5-E2DF4B29859B"
},
{
"criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BFB9EA23-0EF7-4582-A265-3F5AA9EC81B0"
},
{
"criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C367B418-659E-4627-B1F1-1B1216C99055"
},
{
"criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD5E6D4E-DDDD-4B45-B5E9-F8A916287AF9"
},
{
"criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7358492A-491C-491E-AEDF-63CB82619BAA"
},
{
"criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C3DACAAF-AFDC-4391-9E85-344F30937F76"
},
{
"criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_22:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ECEDE405-CEF6-4E52-A8AE-28B9274B2289"
},
{
"criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D98175BF-B084-4FA5-899D-9E80DC3923EE"
},
{
"criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "820632CE-F8DF-47EE-B716-7530E60008B7"
},
{
"criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA2BD0A3-7B2D-447B-ABAC-7B867B03B632"
},
{
"criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D54AB785-E9B7-47BD-B756-0C3A629D67DD"
},
{
"criteria": "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E9412098-0353-4F7B-9245-010557E6C651"
},
{
"criteria": "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD30DAEB-4893-41CF-A455-B69C463B9337"
},
{
"criteria": "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "21D6CE7E-A036-496C-8E08-A87F62B5290A"
},
{
"criteria": "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8F93BBE-1E8C-4EB3-BCC7-20AB2D813F98"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "secalert_us@oracle.com"
}