 
                            ...
Java Web Start applications and applets particular to JDK version 1.6, prior to update 4, were affected by a bug that had some noteworthy security consequences. In some isolated cases, the application or applet's attempt to establish an HTTPS connection with a server generated a NullPointerException [SDN 2008]. The resulting failure to establish a secure HTTPS connection with the server caused a denial of service. Clients were temporarily forced to use an insecure HTTP channel for data exchange.
Related Guidelines
| Null Pointer Dereference [XYH] | |
| CWE-476. NULL pointer dereference | 
...
| [API 2006] | |
| [API 2014] | Class java.util.Optional | 
| 
 | |
| Defect ID 00-0001 | |
| 
 | Null Pointer Dereference | 
| [Seacord 2015] | EXP01-J. Never dereference null pointers LiveLesson | 
| [SDN 2008] | |
| [Urma 2014] | Tired of Null Pointer Exceptions? Consider Using Java SE 8's Optional! | 
...