RHSA-2012:0322: java-1.6.0-openjdk security update

TI-2012-00455 CVE-2012-0507 · GHSA-43xj-964v-hcjf

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

CRITICAL 100KEV

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98189 Published 2012-06-07 Partial fix CWE-843

TI-2011-04312 CVE-2011-5035 · GHSA-6mxv-54wx-wppj

Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java…

MEDIUM 60

Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 and 8.2, and possibly other products, computes hash values for form parameters without restricting th…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.68155 Published 2011-12-30 Fixed CWE-20

TI-2012-00445 CVE-2012-0497 · GHSA-x8rc-48fv-g2g8

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 52

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, and 6 Update 30 and earlier, allows remote attackers to affect confidentiality, integrity, and availabil…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05751 Published 2012-02-15 Fixed

TI-2012-00453 CVE-2012-0505 · GHSA-265h-j3mg-7rf9

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 38

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02627 Published 2012-02-15 Partial fix

TI-2012-00451 CVE-2012-0503 · GHSA-9g8w-c3c6-8wxm

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 38

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Jav…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02786 Published 2012-02-15 Partial fix

TI-2011-03141 CVE-2011-3563 · GHSA-mwf7-vx5q-mx9x

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 35

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote attackers to…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03697 Published 2012-02-15 Partial fix

TI-2012-00450 CVE-2012-0502 · GHSA-m25x-m489-rqr9

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 34

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Jav…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02806 Published 2012-02-15 Partial fix

TI-2012-00449 CVE-2012-0501 · GHSA-8366-7q28-v2hw

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 29

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect availability vi…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03487 Published 2012-02-15 Partial fix

TI-2012-00454 CVE-2012-0506 · GHSA-9c5v-r999-w34j

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 24

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Jav…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02065 Published 2012-02-15 Partial fix

TI-2011-03148 CVE-2011-3571 · GHSA-fjgc-8pc6-5qr3

Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle…

LOW 21

Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Sessio…

CVSS 2.0LOW 3.6 Network Low privileges Interaction — EPSS 0.01632 Published 2012-01-18 Partial fix

RHSA-2012:0322

Fixed in

Fixes 10 records

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle…