Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2008-5345

20
FAUCET Score

CVE-2008-5345 is an unspecified vulnerability in various versions of Sun JDK, JRE, and SDK that allows locally loaded code to read arbitrary files and establish unauthorized connections to localhost. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector and low attack complexity, potentially leading to partial confidentiality, integrity, and availability compromise. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage surrounding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
1.3.1CPE matchmatch criteria
cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:*
1.3.1_2CPE matchmatch criteria
cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*
1.3.1_03CPE matchmatch criteria
cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*
1.3.1_04CPE matchmatch criteria
cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*
1.3.1_05CPE matchmatch criteria
cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

7.5HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P

Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
6.4
CvssVersion
2.0

Exploit Intelligence

EPSS Score
4.12%
Probability of exploitation in next 30 days
EPSS Percentile
89.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0412 is in the 82nd percentile among its peer group of 51,506 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (12)

redhatpatch availablevia redhat_api
Product: Extras for RHEL 3Fixed in: java-1.4.2-ibm-0:1.4.2.13-1jpp.1.el3
View patch
redhatpatch availablevia redhat_api
Product: Extras for RHEL 4Fixed in: java-1.6.0-sun-1:1.6.0.11-1jpp.1.el4
View patch
redhatpatch availablevia redhat_api
Product: Extras for RHEL 4Fixed in: java-1.5.0-sun-0:1.5.0.17-1jpp.2.el4
View patch
redhatpatch availablevia redhat_api
Product: Extras for RHEL 4Fixed in: java-1.6.0-ibm-1:1.6.0.3-1jpp.3.el4
View patch
redhatpatch availablevia redhat_api
Product: Extras for RHEL 4Fixed in: java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4
View patch
redhatpatch availablevia redhat_api
Product: Extras for RHEL 4Fixed in: java-1.4.2-ibm-0:1.4.2.13-1jpp.1.el4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Network Satellite Server v 5.2Fixed in: java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5
View patch
redhatpatch availablevia redhat_api
Product: Supplementary for Red Hat Enterprise Linux 5Fixed in: java-1.6.0-sun-1:1.6.0.11-1jpp.1.el5
View patch
redhatpatch availablevia redhat_api
Product: Supplementary for Red Hat Enterprise Linux 5Fixed in: java-1.5.0-sun-0:1.5.0.17-1jpp.2.el5
View patch
redhatpatch availablevia redhat_api
Product: Supplementary for Red Hat Enterprise Linux 5Fixed in: java-1.6.0-ibm-1:1.6.0.3-1jpp.1.el5
View patch
redhatpatch availablevia redhat_api
Product: Supplementary for Red Hat Enterprise Linux 5Fixed in: java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5
View patch
redhatpatch availablevia redhat_api
Product: Supplementary for Red Hat Enterprise Linux 5Fixed in: java-1.4.2-ibm-0:1.4.2.13-1jpp.1.el5
View patch

Vendor Advisories (1)

redhatCVE-2008-5345Moderate

JRE allows unauthorized file access and connections to localhost

Dec 4, 2008

References

lists.opensuse.org / opensuse-security-announce/2009-01/msg00009.html
Mailing ListThird Party Advisory
lists.opensuse.org / opensuse-security-announce/2009-04/msg00004.html
Mailing ListThird Party Advisory
lists.opensuse.org / opensuse-security-announce/2009-05/msg00000.html
Mailing ListThird Party Advisory
marc.info
Mailing ListThird Party Advisory
marc.info
Mailing ListThird Party Advisory
osvdb.org / 50508
Broken Link
rhn.redhat.com / errata/RHSA-2008-1018.html
Third Party Advisory
rhn.redhat.com / errata/RHSA-2008-1025.html
Third Party Advisory
secunia.com / advisories/32991
Third Party Advisory
secunia.com / advisories/33015
Third Party Advisory
secunia.com / advisories/33528
Third Party Advisory
secunia.com / advisories/33710
Third Party Advisory
secunia.com / advisories/34233
Third Party Advisory
secunia.com / advisories/34605
Third Party Advisory
secunia.com / advisories/34889
Third Party Advisory
secunia.com / advisories/34972
Third Party Advisory
secunia.com / advisories/35065
Third Party Advisory
secunia.com / advisories/37386
Third Party Advisory
secunia.com / advisories/38539
Third Party Advisory
security.gentoo.org / glsa/glsa-200911-02.xml
Third Party Advisory
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6059
Third Party Advisory
rhn.redhat.com / errata/RHSA-2009-0466.html
Third Party Advisory
sunsolve.sun.com / search/document.do
Vendor Advisory
support.avaya.com / elmodocs2/security/ASA-2009-012.htm
Third Party Advisory
support.nortel.com / go/main.jsp
Third Party Advisory
www116.nortel.com / pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf
Third Party Advisory
redhat.com / support/errata/RHSA-2009-0015.html
Third Party Advisory
redhat.com / support/errata/RHSA-2009-0016.html
Third Party Advisory
redhat.com / support/errata/RHSA-2009-0445.html
Third Party Advisory
securitytracker.com / id
Third Party AdvisoryVDB Entry
us-cert.gov / cas/techalerts/TA08-340A.html
Third Party AdvisoryUS Government Resource
vupen.com / english/advisories/2008/3339
Third Party Advisory
vupen.com / english/advisories/2009/0672
Third Party Advisory