Detections
Analytics

CVE-2009-3852

critical

Description

Unspecified vulnerability in the XML component in IBM Runtimes for Java Technology 5.0.0 before SR10 has unknown impact and attack vectors, related to the "updated version of XML4J 4.4.17."

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/54069

http://www.vupen.com/english/advisories/2009/3106

http://www.securityfocus.com/bid/36894

http://www-01.ibm.com/support/docview.wss?uid=swg1IZ63920

http://secunia.com/advisories/37210

Details

Source: Mitre, NVD

Published: 2009-11-03

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.00415