RHSA-2011:0880: Red Hat Network Satellite server IBM Java Runtime security…

TI-2009-03392 CVE-2009-3555 · GHSA-f7w7-6pjc-wwm6

The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft…

CRITICAL 91

The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.87264 Published 2009-11-09 Fixed in 7.0.10, 6.0.32 +1 CWE-300

TI-2010-04185 CVE-2010-4452 · GHSA-mq39-jwgr-3jxw

Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE)…

HIGH 84

Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote untrusted Java Web Start applications and untrusted Ja…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.83037 Published 2011-02-17 Fixed

TI-2010-03392 CVE-2010-3563 · GHSA-fj9r-jhxx-vm9v

Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for…

HIGH 84

Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.8425 Published 2010-10-19 Fixed

TI-2010-03400 CVE-2010-3571 · GHSA-wrrm-3qvm-g7qm

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6…

MEDIUM 55

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.09146 Published 2010-10-19 Fixed

TI-2010-03398 CVE-2010-3569 · GHSA-gxmw-9pmp-92hq

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and avail…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07099 Published 2010-10-19 Fixed

TI-2010-03391 CVE-2010-3562 · GHSA-7242-cf77-68qm

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6…

MEDIUM 53

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07099 Published 2010-10-19 Fixed

TI-2010-03395 CVE-2010-3566 · GHSA-95wc-36p6-5x3p

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6…

MEDIUM 52

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update and 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05885 Published 2010-10-19 Fixed

TI-2010-04206 CVE-2010-4473 · GHSA-pq9h-x7ww-cqrg

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

MEDIUM 51

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote attackers to affect confi…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05489 Published 2011-02-17 Fixed

TI-2010-04195 CVE-2010-4462 · GHSA-63ph-j5mq-mmjf

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

MEDIUM 51

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote attackers to affect confi…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05489 Published 2011-02-17 Fixed

TI-2010-04187 CVE-2010-4454 · GHSA-vp2p-mr7x-53m2

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

MEDIUM 51

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote attackers to affect confi…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05489 Published 2011-02-17 Fixed

TI-2010-03403 CVE-2010-3574 · GHSA-6gvj-cjgc-qxmv

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for…

MEDIUM 51

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availabil…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.049 Published 2010-10-19 Fixed

TI-2010-03401 CVE-2010-3572 · GHSA-58vp-fj3h-8rjv

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business…

MEDIUM 51

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability v…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05193 Published 2010-10-19 Fixed

TI-2010-03397 CVE-2010-3568 · GHSA-jmxm-vpv4-jjr2

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and…

MEDIUM 51

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and avail…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.049 Published 2010-10-19 Fixed

TI-2010-03394 CVE-2010-3565 · GHSA-h9j4-m2pf-hmrh

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6…

MEDIUM 51

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown ve…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05616 Published 2010-10-19 Fixed

TI-2010-03387 CVE-2010-3558 · GHSA-h8rv-q3m4-j86c

Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for…

MEDIUM 51

Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.049 Published 2010-10-19 Fixed

TI-2010-03385 CVE-2010-3556 · GHSA-65g6-r5w2-5m6f

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6…

MEDIUM 51

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05193 Published 2010-10-19 Fixed

TI-2010-03384 CVE-2010-3555 · GHSA-f2gj-f7q5-jjg4

Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for…

MEDIUM 51

Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.07968 Published 2010-10-19 Fixed

TI-2010-03382 CVE-2010-3553 · GHSA-2v8j-qh76-qvv8

Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business…

MEDIUM 51

Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability v…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.049 Published 2010-10-19 Fixed

TI-2010-04198 CVE-2010-4465 · GHSA-47vr-m75r-g978

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

MEDIUM 50

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04132 Published 2011-02-17 Fixed

TI-2010-04200 CVE-2010-4467 · GHSA-q7pq-72jp-3392

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

MEDIUM 48

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 10 through 6 Update 23 allows remote untrusted Java Web Start applications and untrusted Java applets to af…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02737 Published 2011-02-17 Fixed

TI-2010-04196 CVE-2010-4463 · GHSA-p9wg-9276-53fv

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

MEDIUM 47

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 21 through 6 Update 23 allows remote untrusted Java Web Start applications and untrusted Java applets to af…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02415 Published 2011-02-17 Fixed

TI-2010-03379 CVE-2010-3550 · GHSA-m6fr-478g-xrmj

Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for…

MEDIUM 47

Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown v…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04427 Published 2010-10-19 Fixed

TI-2010-04209 CVE-2010-4476 · GHSA-gvgc-rxmh-5hvw

The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and…

MEDIUM 43

The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb,…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.2349 Published 2011-02-17 Fixed in 7.0.7, 6.0.32 +1

TI-2010-01276 CVE-2010-1321 · GHSA-pcm6-6x97-2mrc

The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT…

MEDIUM 40

The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for inva…

CVSS 2.0MEDIUM 6.8 Network Low privileges Interaction — EPSS 0.06884 Published 2010-05-19 Fixed CWE-476

TI-2010-04155 CVE-2010-4422 · GHSA-4xxc-4hqj-j8vc

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

LOW 39

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown v…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.03444 Published 2011-02-17 Fixed

TI-2010-03402 CVE-2010-3573 · GHSA-hv45-8vp2-m2c8

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for…

LOW 36

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vecto…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.10557 Published 2010-10-19 Fixed

TI-2010-03378 CVE-2010-3549 · GHSA-jf8h-wqmh-2m6x

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for…

LOW 36

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availabil…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03337 Published 2010-10-19 Fixed

TI-2010-03386 CVE-2010-3557 · GHSA-6jxx-vp42-6rcv

Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business…

LOW 35

Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability v…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02879 Published 2010-10-19 Fixed

TI-2010-03371 CVE-2010-3541 · GHSA-wp5h-xwhh-9fw3

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for…

LOW 29

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availabil…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.03102 Published 2010-10-19 Fixed

TI-2010-04199 CVE-2010-4466 · GHSA-wchx-r84v-92xj

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

LOW 28

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier for Windows, Solaris, and, Linux; 5.0 Update 27 and earlier for Windows; and 1.4.2_29 and ea…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02523 Published 2011-02-17 Fixed

TI-2010-03380 CVE-2010-3551 · GHSA-m34f-4vjh-jxj4

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for…

LOW 28

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02999 Published 2010-10-19 Fixed

TI-2010-03377 CVE-2010-3548 · GHSA-mp8j-7g6r-hj45

Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in…

LOW 28

Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02999 Published 2010-10-19 Fixed

TI-2010-04204 CVE-2010-4471 · GHSA-6jc7-hhf7-27hm

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

LOW 27

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier allows remote untrusted Java Web Start applications and untru…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02275 Published 2011-02-17 Fixed

TI-2010-04208 CVE-2010-4475 · GHSA-6p4c-6mx2-r9cv

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

LOW 25

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02321 Published 2011-02-17 Fixed

TI-2010-04180 CVE-2010-4447 · GHSA-w4x5-vg67-qgh9

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

LOW 24

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02236 Published 2011-02-17 Fixed

TI-2010-04201 CVE-2010-4468 · GHSA-468p-vxcq-gqg2

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

LOW 23

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier, allows remote untrusted Java Web Start applications and untr…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.01959 Published 2011-02-17 Fixed

TI-2010-04181 CVE-2010-4448 · GHSA-q763-247f-jf2v

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

LOW 18

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 earlier allows remote untrusted Java Web Start appl…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02407 Published 2011-02-17 Fixed

TI-2010-03389 CVE-2010-3560 · GHSA-4292-w862-9w9c

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for…

LOW 18

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality via unknown vectors.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02681 Published 2010-10-19 Fixed

RHSA-2011:0880

Fixed in

Fixes 38 records