Home / Vulnerability Database / Java : Unsafe database connection via applet
Java
Java : Unsafe database connection via applet
Classification
OWASP Top 10 2017
OWASP Top 10 2021
PCI DSS 4.0
HIPAA
CWE
CWE/SANS Top 25 2011
CWE/SANS Top 25 2021
Overview
The application uses JDBC (Java Database Connectivity) methods. Applets that use JDBC in an untrusted environment can compromise the database.
According to the default settings, Java applet can open a connection to a database located on the server from which it was downloaded. This is acceptable only in a trusted environment. Otherwise, an attacker can use the applet to get access parameters and ultimately to gain direct access to the database.
MEDIUM
DerScanner Severity Score
Do you want to fix Java : Unsafe database connection via applet in your application?
See also
Java
Java : Race condition
Java
Java : Text4Shell Vulnerability
Java
