VRT
391,192 CVEs tracked ·
15,442 in RASP scope ·
data as of 18 hours ago
VRT
391,192 CVEs tracked ·
15,442 in RASP scope ·
data as of 18 hours ago
CVE-2007-3922Unspecified vulnerability in the Java Runtime Environment (JRE) Applet Class Loader in Sun JDK and JRE 5.0 Update 11 and earlier, 6 through 6 Update 1, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to violate the security model for an applet's outbound connections by connecting to certain localhost services running on the machine that loaded the applet.
No public exploit
Nothing published shows this CVE being exploited, which is not the same as ruling it out. nothing published in 19 years.
CVSS E:U
In RASP's scope, but nothing published names a fix and nothing published shows an exploit. Neither of the two things VRT can act on exists, which is a claim about the available evidence, not about the vulnerability.
| Decided by | no-exploit : With no fix path, a public exploit, or a CISA record of one |
|---|---|
| Finding | Resolved from QUEUED-FOR-REVIEW: this CVE affects a known product, but nothing published names a fix and nothing published shows an exploit. That is a statement about the evidence, not about the defect — it does not mean the vulnerability is unimportant or unreachable, only that neither of the two things VRT can act on exists. |
AV:N/AC:M/Au:N/C:P/I:P/A:P
1 metric
VRT selects the newest version's highest entry and
publishes it as cvssScore, newest rather than largest because scores are not comparable
across versions, and highest rather than first because the first entry is frequently a CNA placeholder
scoring 0.0 over NVD's own analysis.
| Version | Score | Band | Vector | Assigner | Type | |
|---|---|---|---|---|---|---|
| CVSS 2.0 | 6.8 | no band published | AV:N/AC:M/Au:N/C:P/I:P/A:P |
NVD | Primary | published |
| Published | 2007-07-21 | By the CVE Program. |
|---|---|---|
| NVD record modified | 2026-06-16 | NVD's own last-modified date for this record. |