RHSA-2013:0237: java-1.7.0-oracle security update

TI-2013-00358 CVE-2013-0431 · GHSA-h3cw-j9j9-5pc4

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

HIGH 75KEV

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified ve…

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.9015 Published 2013-01-31 Partial fix CWE-693

TI-2012-01347 CVE-2012-1541 · GHSA-vcjx-5v7q-4697

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 56

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via u…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.10924 Published 2013-02-02 Partial fix

TI-2012-02765 CVE-2012-3213 · GHSA-3hv5-9cgc-v44r

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 55

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via u…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.09822 Published 2013-02-02 Partial fix

TI-2013-00373 CVE-2013-0446 · GHSA-rh6w-fpgp-6jh2

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via u…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08103 Published 2013-02-02 Partial fix

TI-2013-00372 CVE-2013-0445 · GHSA-j3c4-gfqw-3f6c

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect conf…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08087 Published 2013-02-02 Partial fix

TI-2013-00369 CVE-2013-0442 · GHSA-4pxg-g9pw-92x7

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08087 Published 2013-02-02 Partial fix

TI-2013-00368 CVE-2013-0441 · GHSA-5f7g-c4h7-7vv4

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08087 Published 2013-02-02 Partial fix

TI-2013-00353 CVE-2013-0426 · GHSA-2c2g-g7mc-jv23

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08087 Published 2013-02-02 Partial fix

TI-2013-00352 CVE-2013-0425 · GHSA-58g3-37cc-r74w

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08087 Published 2013-02-02 Partial fix

TI-2012-02878 CVE-2012-3342 · GHSA-gpqj-283q-qp2q

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via u…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08325 Published 2013-02-02 Partial fix

TI-2013-01296 CVE-2013-1489 · GHSA-2684-x557-ppqj

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote att…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07641 Published 2013-01-31 Partial fix

TI-2013-01287 CVE-2013-1480 · GHSA-mqpc-4cpm-7g8c

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07714 Published 2013-02-02 Partial fix

TI-2013-01285 CVE-2013-1478 · GHSA-84c5-rhrc-rq9v

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07634 Published 2013-02-02 Partial fix

TI-2013-01283 CVE-2013-1476 · GHSA-grxh-3mrm-g362

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07634 Published 2013-02-02 Partial fix

TI-2013-01282 CVE-2013-1475 · GHSA-6r72-525q-8rvj

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07634 Published 2013-02-02 Fixed

TI-2013-00377 CVE-2013-0450 · GHSA-q6fw-3p2m-2c6h

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect conf…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07634 Published 2013-02-02 Partial fix

TI-2013-00355 CVE-2013-0428 · GHSA-r97x-9xgg-cf5w

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07634 Published 2013-02-02 Partial fix

TI-2013-01286 CVE-2013-1479 · GHSA-6wgc-x7mj-wqm6

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 52

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integr…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06015 Published 2013-02-02 Partial fix

TI-2013-00364 CVE-2013-0437 · GHSA-q94x-7w93-7vv3

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 52

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05937 Published 2013-02-02 Partial fix

TI-2013-00371 CVE-2013-0444 · GHSA-px4h-jjhx-vcmc

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 43

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown v…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.06422 Published 2013-02-02 Partial fix

TI-2013-00356 CVE-2013-0429 · GHSA-pr3m-j4vm-4x8c

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 43

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect conf…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.06697 Published 2013-02-02 Partial fix

TI-2013-00350 CVE-2013-0423 · GHSA-rp49-xv9m-r6w5

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 43

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via u…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.0671 Published 2013-02-02 Partial fix

TI-2013-00347 CVE-2013-0419 · GHSA-vcpv-8f4g-jwm5

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 43

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via u…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.06895 Published 2013-02-02 Partial fix

TI-2013-00279 CVE-2013-0351 · GHSA-mf42-24fv-fm6r

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 42

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via u…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06013 Published 2013-02-02 Partial fix

TI-2013-00359 CVE-2013-0432 · GHSA-qrmf-26m7-r8fr

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 36

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.04875 Published 2013-02-02 Partial fix

TI-2013-00357 CVE-2013-0430 · GHSA-cmgc-2xrq-r89p

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 33

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38, allows local users to affect confidentiality, integrity, and availability via unkno…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.01249 Published 2013-02-02 Fixed

TI-2013-01280 CVE-2013-1473 · GHSA-8rgf-jg88-wjqm

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect integrity via unknown vectors related to Deploymen…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05487 Published 2013-02-02 Partial fix

TI-2013-00367 CVE-2013-0440 · GHSA-f73w-73w8-h7j9

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attacker…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05532 Published 2013-02-02 Partial fix

TI-2013-00362 CVE-2013-0435 · GHSA-hv74-3r93-2vw8

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality via vectors…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05205 Published 2013-02-02 Partial fix

TI-2013-00361 CVE-2013-0434 · GHSA-xh2v-r28j-h338

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04911 Published 2013-02-02 Partial fix

TI-2013-00360 CVE-2013-0433 · GHSA-rpgf-fvq5-9r6x

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect inte…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04875 Published 2013-02-02 Partial fix

TI-2013-00354 CVE-2013-0427 · GHSA-8m7x-fvvq-rprj

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect inte…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04875 Published 2013-02-02 Partial fix

TI-2013-00351 CVE-2013-0424 · GHSA-3w77-j752-v9mg

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attacker…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04795 Published 2013-02-02 Partial fix

TI-2013-00337 CVE-2013-0409 · GHSA-fqvr-3cc6-8q2c

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38 allows remote attackers to affect confidentiality via vector…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04856 Published 2013-02-02 Partial fix

TI-2013-00376 CVE-2013-0449 · GHSA-c32j-926c-f42x

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 29

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 allows remote attackers to affect confidentiality via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03839 Published 2013-02-02 Partial fix

TI-2013-00375 CVE-2013-0448 · GHSA-pjg9-8vm6-h7qj

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 29

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 allows remote attackers to affect integrity via unknown vectors related to Libraries.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03506 Published 2013-02-02 Fixed

TI-2013-00365 CVE-2013-0438 · GHSA-2r97-8xcx-w4g5

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 27

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality via unknown vectors related to Dep…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04284 Published 2013-02-02 Partial fix

TI-2013-00370 CVE-2013-0443 · GHSA-4p7m-gv97-7rq5

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 26

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.04259 Published 2013-02-02 Partial fix

RHSA-2013:0237

Fixed in

Fixes 38 records