Red Hat Security Advisory

RHSA-2012:0514

java-1.6.0-ibm security update

Released 2012-04-24 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.10.1-1jpp.1.el5, java-1.6.0-ibm-1:1.6.0.10.1-1jpp.1.el5.i386, java-1.6.0-ibm-accessibility-1:1.6.0.10.1-1jpp.1.el5 +13
Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.10.1-1jpp.5.el6_2, java-1.6.0-ibm-demo-1:1.6.0.10.1-1jpp.5.el6_2, java-1.6.0-ibm-devel-1:1.6.0.10.1-1jpp.5.el6_2 +4
Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.10.1-1jpp.5.el6_2, java-1.6.0-ibm-demo-1:1.6.0.10.1-1jpp.5.el6_2, java-1.6.0-ibm-devel-1:1.6.0.10.1-1jpp.5.el6_2 +2
Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.10.1-1jpp.1.el5, java-1.6.0-ibm-1:1.6.0.10.1-1jpp.1.el5.i386, java-1.6.0-ibm-1:1.6.0.10.1-1jpp.1.el5.ppc +21
Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.10.1-1jpp.5.el6_2, java-1.6.0-ibm-demo-1:1.6.0.10.1-1jpp.5.el6_2, java-1.6.0-ibm-devel-1:1.6.0.10.1-1jpp.5.el6_2 +5
Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.10.1-1jpp.5.el6_2, java-1.6.0-ibm-demo-1:1.6.0.10.1-1jpp.5.el6_2, java-1.6.0-ibm-devel-1:1.6.0.10.1-1jpp.5.el6_2 +4

Fixes 12 records

TI-2012-00455 CVE-2012-0507 · GHSA-43xj-964v-hcjf

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

CRITICAL 100KEV

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98189 Published 2012-06-07 Partial fix CWE-843

TI-2012-00448 CVE-2012-0500 · GHSA-5845-68q3-8r26

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

HIGH 77

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and JavaFX 2.0.2 and earlier allows remote untrusted Java Web Start application…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.5804 Published 2012-02-15 Partial fix

TI-2011-04312 CVE-2011-5035 · GHSA-6mxv-54wx-wppj

Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java…

MEDIUM 60

Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 and 8.2, and possibly other products, computes hash values for form parameters without restricting th…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.68155 Published 2011-12-30 Fixed CWE-20

TI-2012-00447 CVE-2012-0499 · GHSA-w5h4-pg4w-wqvr

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 52

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier; and JavaFX 2.0.2 and earli…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06159 Published 2012-02-15 Partial fix

TI-2012-00446 CVE-2012-0498 · GHSA-vjgx-6cj7-qwh6

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 52

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05751 Published 2012-02-15 Partial fix

TI-2012-00445 CVE-2012-0497 · GHSA-x8rc-48fv-g2g8

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 52

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, and 6 Update 30 and earlier, allows remote attackers to affect confidentiality, integrity, and availabil…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05751 Published 2012-02-15 Fixed

TI-2012-00453 CVE-2012-0505 · GHSA-265h-j3mg-7rf9

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 38

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02627 Published 2012-02-15 Partial fix

TI-2012-00451 CVE-2012-0503 · GHSA-9g8w-c3c6-8wxm

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 38

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02786 Published 2012-02-15 Partial fix

TI-2011-03141 CVE-2011-3563 · GHSA-mwf7-vx5q-mx9x

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 35

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03697 Published 2012-02-15 Partial fix

TI-2012-00450 CVE-2012-0502 · GHSA-m25x-m489-rqr9

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 34

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02806 Published 2012-02-15 Partial fix

TI-2012-00449 CVE-2012-0501 · GHSA-8366-7q28-v2hw

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 29

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03487 Published 2012-02-15 Partial fix

TI-2012-00454 CVE-2012-0506 · GHSA-9c5v-r999-w34j

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 24

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02065 Published 2012-02-15 Partial fix