CVE-2005-3472 Unspecified vulnerability in Sun Java System Communications Express 2005Q1 and 2004Q2 allows local and remote attackers to read sensitive information from configuration files.

MediumCVSS 5.0 EPSS 2.3%

Published: 2005-11-03 04:00
Updated: 2026-06-17 01:17
Exploit status: No public exploit known

Description

Unspecified vulnerability in Sun Java System Communications Express 2005Q1 and 2004Q2 allows local and remote attackers to read sensitive information from configuration files.

Affected products

Product	Affected versions	Fixed in
sun java system communications express	= 2004q2	No fix listed
sun java system communications express	= 2005q1	No fix listed

References

17395 patch third-party-advisory vendor-advisory
1015135 vdb-entry
101948 patch vendor-advisory
20448 vdb-entry
15271 vdb-entry
ADV-2005-2274 vdb-entry

CVSS v2.0

5.0 Medium

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 2.30% (percentile 83.6)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.