CVE-2000-1099

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2001-01-09 · updated 2026-06-16

Description

Java Runtime Environment in Java Development Kit (JDK) 1.2.2_05 and earlier can allow an untrusted Java class to call into a disallowed class, which could allow an attacker to escape the Java sandbox and conduct unauthorized activities.

Affected products

Sun Jdk: through 1.2.1; 1.2.1-update3, 1.2.2-update4, 1.2.2-update5

References

http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/199&type=0&nav=sec.sba
http://www.osvdb.org/7255
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0011-132
https://exchange.xforce.ibmcloud.com/vulnerabilities/5605
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/199&type=0&nav=sec.sba
http://www.osvdb.org/7255
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0011-132
https://exchange.xforce.ibmcloud.com/vulnerabilities/5605

Get alerted when CVE-2000-1099 or the next vulnerability affects your stack