RHSA-2012:1467: java-1.7.0-ibm security update

TI-2012-04270 CVE-2012-5076 · GHSA-v7gg-cccr-jpfx

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

CRITICAL 100KEV

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.9125 Published 2012-10-16 Partial fix CWE-284

TI-2011-03122 CVE-2011-3544 · GHSA-25jq-3vh4-pgv4

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

CRITICAL 100KEV

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect con…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.96653 Published 2011-10-19 Partial fix CWE-284

TI-2012-04282 CVE-2012-5088 · GHSA-4mvh-76x5-57p4

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

HIGH 83

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relate…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.78696 Published 2012-10-16 Partial fix

TI-2012-01342 CVE-2012-1533 · GHSA-39xq-q2rq-4395

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

HIGH 80

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availabil…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.69037 Published 2012-10-16 Partial fix

TI-2012-04261 CVE-2012-5067 · GHSA-v6jx-x9wj-v8pq

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 58

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.63983 Published 2012-10-16 Partial fix

TI-2013-01282 CVE-2013-1475 · GHSA-6r72-525q-8rvj

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07634 Published 2013-02-02 Fixed

TI-2012-04280 CVE-2012-5086 · GHSA-8fc7-wjj7-mg5j

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 52

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availabil…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05983 Published 2012-10-16 Partial fix

TI-2012-04277 CVE-2012-5083 · GHSA-fxwc-8229-fw87

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 52

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, 1.4.2_38 and earlier, and JavaFX 2.2 and earlier all…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06491 Published 2012-10-16 Partial fix

TI-2012-04275 CVE-2012-5081 · GHSA-qp68-v8gp-9g69

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 52

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.45113 Published 2012-10-16 Partial fix

TI-2012-01340 CVE-2012-1531 · GHSA-6784-35h5-4m72

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 52

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier; and JavaFX 2.2 and earlier…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0624 Published 2012-10-16 Partial fix

TI-2012-04281 CVE-2012-5087 · GHSA-rph6-5363-mw9v

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 51

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relate…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05572 Published 2012-10-16 Partial fix

TI-2012-02695 CVE-2012-3143 · GHSA-pqv3-87c3-h9cw

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 51

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05572 Published 2012-10-16 Partial fix

TI-2012-01341 CVE-2012-1532 · GHSA-4ph5-3333-xv3f

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 51

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier and 6 Update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availabilit…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05572 Published 2012-10-16 Partial fix

TI-2012-04075 CVE-2012-4823 · GHSA-4837-9rvp-84f3

Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1…

MEDIUM 50

Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06864 Published 2013-01-11 Fixed

TI-2012-04074 CVE-2012-4822 · GHSA-p39h-jmg2-h2pw

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier…

MEDIUM 50

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Ra…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06903 Published 2013-01-11 Partial fix

TI-2012-04073 CVE-2012-4821 · GHSA-m96x-9xwr-7g88

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier…

MEDIUM 50

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Ra…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06903 Published 2013-01-11 Partial fix

TI-2012-04072 CVE-2012-4820 · GHSA-jfrg-75v5-493f

Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1…

MEDIUM 48

Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05086 Published 2013-01-11 Partial fix

TI-2012-04283 CVE-2012-5089 · GHSA-rpr7-2rf2-926r

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 41

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.04826 Published 2012-10-16 Partial fix

TI-2012-04278 CVE-2012-5084 · GHSA-p37p-c73m-g5cg

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 41

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.04826 Published 2012-10-16 Partial fix

TI-2012-02711 CVE-2012-3159 · GHSA-rm3j-xjw9-m9p3

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 39

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availabil…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03819 Published 2012-10-16 Partial fix

TI-2012-04268 CVE-2012-5074 · GHSA-9j6r-hxv4-2h2w

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 34

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality and integrity, related to JAX-WS.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03115 Published 2012-10-16 Partial fix

TI-2012-04265 CVE-2012-5071 · GHSA-q7x9-8wcv-c5wh

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 34

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03388 Published 2012-10-16 Partial fix

TI-2012-04263 CVE-2012-5069 · GHSA-8rmw-362c-qr8m

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.02833 Published 2012-10-16 Partial fix

TI-2012-01506 CVE-2012-1718 · GHSA-q3mc-2rf6-h4h2

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to af…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04214 Published 2012-06-16 Partial fix

TI-2012-04273 CVE-2012-5079 · GHSA-p8m4-cjfw-3q55

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 29

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03388 Published 2012-10-16 Partial fix

TI-2012-04269 CVE-2012-5075 · GHSA-hmgc-rcfm-7374

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 29

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03413 Published 2012-10-16 Partial fix

TI-2012-04267 CVE-2012-5073 · GHSA-x729-rfgf-jg4g

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 29

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03388 Published 2012-10-16 Partial fix

TI-2012-04266 CVE-2012-5072 · GHSA-p34p-28jp-wfv2

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 29

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality via unknown vectors relat…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03413 Published 2012-10-16 Partial fix

TI-2012-04264 CVE-2012-5070 · GHSA-22xv-2q85-75xq

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 29

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, related to JMX.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03138 Published 2012-10-16 Partial fix

TI-2012-04271 CVE-2012-5077 · GHSA-rm29-f2rr-x57m

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 19

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.03052 Published 2012-10-16 Partial fix

TI-2012-02768 CVE-2012-3216 · GHSA-8p49-c7qf-43vm

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 19

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02878 Published 2012-10-16 Partial fix

RHSA-2012:1467

Fixed in

Fixes 31 records

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1…

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier…

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier…

Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…