CVE-2019-2816

CVE-2019-2816 is a difficult-to-exploit vulnerability in the Networking subcomponent of Oracle Java SE and Java SE Embedded, affecting versions 7u221, 8u212, 11.0.3, 12.0.1, and 8u211 respectively. An unauthenticated attacker with network access can compromise these Java deployments, particularly those running sandboxed Java Web Start applications or applets that load untrusted code. Successful exploitation can lead to unauthorized read, update, insert, or delete access to a subset of accessible data. The vulnerability has a CVSS 3.0 Base Score of 4.8 (Medium), indicating low confidentiality and integrity impacts, with no availability impact. Its attack vector is network-based, but the attack complexity is high, and no user interaction is required. The EPSS score is very low, suggesting a minimal likelihood of exploitation. Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are also minimal, indicating a low level of public attention.