CVE-2017-10125

Published: Aug 8, 2017Modified: May 13, 2026

7.1

Vector

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitability: 0.5 / Impact: 6.0

Source: NVD

Description

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows physical access to compromise Java SE. While the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: Applies to deployment of Java where the Java Auto Update is enabled. CVSS 3.0 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).

Affected (27)

Products: Oracle: Jdk, Jre · Netapp: Active Iq Unified Manager, Cloud Backup, E Series Santricity Os Controller, E Series Santricity Storage Manager, Element Software, Oncommand Balance, Oncommand Insight, Oncommand Performance Manager, Oncommand Shift, Oncommand Unified Manager, Plug In For Symantec Netbackup, Snapmanager, Steelstore Cloud Integrated Storage, Storage Replication Adapter For Clustered Data Ontap, Vasa Provider For Clustered Data Ontap, Virtual Storage Console

2 products

16 products

Active Iq Unified Manager

Cloud Backup

E Series Santricity Os Controller

E Series Santricity Storage Manager

Element Software

Oncommand Balance

Oncommand Insight

Oncommand Performance Manager

Oncommand Shift

Oncommand Unified Manager

Plug In For Symantec Netbackup

Snapmanager

Steelstore Cloud Integrated Storage

Storage Replication Adapter For Clustered Data Ontap

Vasa Provider For Clustered Data Ontap

Virtual Storage Console

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Oracle Jdk	Version 1.7.0 update141
Oracle Jdk	Version 1.8.0 update131
Oracle Jre	Version 1.7.0 update141
Oracle Jre	Version 1.8.0 update131

Configuration B

23 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	From 9.5
Netapp Active Iq Unified Manager	From 7.3
Netapp Cloud Backup	All versions
Netapp E Series Santricity Os Controller	From 11.0 to 11.70.1
Netapp E Series Santricity Storage Manager	All versions
Netapp Element Software	All versions
Netapp Oncommand Balance	All versions
Netapp Oncommand Insight	All versions
Netapp Oncommand Performance Manager	All versions
Netapp Oncommand Shift	All versions
Netapp Oncommand Unified Manager	Up to 7.1
Netapp Oncommand Unified Manager	Up to 7.1
Netapp Oncommand Unified Manager	All versions
Netapp Plug In For Symantec Netbackup	All versions
Netapp Snapmanager	All versions
Netapp Snapmanager	All versions
Netapp Steelstore Cloud Integrated Storage	All versions
Netapp Storage Replication Adapter For Clustered Data Ontap	From 7.2
Netapp Storage Replication Adapter For Clustered Data Ontap	Version 9.6
Netapp Vasa Provider For Clustered Data Ontap	From 7.2
Netapp Vasa Provider For Clustered Data Ontap	Version 6.0
Netapp Virtual Storage Console	From 7.2
Netapp Virtual Storage Console	Version 6.0