RHSA-2013:0626: java-1.7.0-ibm security update

TI-2013-00349 CVE-2013-0422 · GHSA-r293-6mhc-29xx

Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to…

CRITICAL 100KEV

Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a reference to a priva…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.9708 Published 2013-01-10 Fixed CWE-284

TI-2013-01300 CVE-2013-1493 · GHSA-v3wr-hv3w-x2rj

The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update…

CRITICAL 85

The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.86151 Published 2013-03-04 Fixed CWE-119

TI-2013-00358 CVE-2013-0431 · GHSA-h3cw-j9j9-5pc4

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

HIGH 75KEV

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified ve…

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.9015 Published 2013-01-31 Partial fix CWE-693

TI-2013-00690 CVE-2013-0809 · GHSA-qv6m-9ccr-3jxp

Unspecified vulnerability in the 2D component in the Java Runtime Environment (JRE)…

MEDIUM 56

Unspecified vulnerability in the 2D component in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to e…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.10753 Published 2013-03-04 Fixed

TI-2012-01347 CVE-2012-1541 · GHSA-vcjx-5v7q-4697

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 56

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via u…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.10924 Published 2013-02-02 Partial fix

TI-2012-02765 CVE-2012-3213 · GHSA-3hv5-9cgc-v44r

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 55

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via u…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.09822 Published 2013-02-02 Partial fix

TI-2013-00373 CVE-2013-0446 · GHSA-rh6w-fpgp-6jh2

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via u…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08103 Published 2013-02-02 Partial fix

TI-2013-00372 CVE-2013-0445 · GHSA-j3c4-gfqw-3f6c

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect conf…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08087 Published 2013-02-02 Partial fix

TI-2013-00369 CVE-2013-0442 · GHSA-4pxg-g9pw-92x7

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08087 Published 2013-02-02 Partial fix

TI-2013-00368 CVE-2013-0441 · GHSA-5f7g-c4h7-7vv4

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08087 Published 2013-02-02 Partial fix

TI-2013-00353 CVE-2013-0426 · GHSA-2c2g-g7mc-jv23

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08087 Published 2013-02-02 Partial fix

TI-2013-00352 CVE-2013-0425 · GHSA-58g3-37cc-r74w

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08087 Published 2013-02-02 Partial fix

TI-2012-02878 CVE-2012-3342 · GHSA-gpqj-283q-qp2q

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via u…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08325 Published 2013-02-02 Partial fix

TI-2013-01293 CVE-2013-1486 · GHSA-vjwx-g4g2-r336

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier, 6 Update 39 and earlier, and 5.0 Update 39 and earlier allows remote attackers to affect confidentialit…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06917 Published 2013-02-20 Fixed

TI-2013-01287 CVE-2013-1480 · GHSA-mqpc-4cpm-7g8c

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07714 Published 2013-02-02 Partial fix

TI-2013-01285 CVE-2013-1478 · GHSA-84c5-rhrc-rq9v

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07634 Published 2013-02-02 Partial fix

TI-2013-01283 CVE-2013-1476 · GHSA-grxh-3mrm-g362

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07634 Published 2013-02-02 Partial fix

TI-2013-00377 CVE-2013-0450 · GHSA-q6fw-3p2m-2c6h

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect conf…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07634 Published 2013-02-02 Partial fix

TI-2013-00355 CVE-2013-0428 · GHSA-r97x-9xgg-cf5w

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07634 Published 2013-02-02 Partial fix

TI-2013-01294 CVE-2013-1487 · GHSA-38cq-685v-jw65

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE 7…

MEDIUM 52

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE 7 Update 13 and earlier and 6 Update 39 and earlier allows remote attackers to affect confidentiality, integrity, and availability via…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06036 Published 2013-02-20 Fixed

TI-2013-01291 CVE-2013-1484 · GHSA-5cwq-8529-gmxx

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 52

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relat…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06196 Published 2013-02-20 Fixed

TI-2013-00364 CVE-2013-0437 · GHSA-q94x-7w93-7vv3

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 52

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05937 Published 2013-02-02 Partial fix

TI-2012-02726 CVE-2012-3174 · GHSA-xcww-3952-xr69

Unspecified vulnerability in Oracle Java 7 before Update 11 allows remote attackers to…

MEDIUM 50

Unspecified vulnerability in Oracle Java 7 before Update 11 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-0422.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04577 Published 2013-01-14 Fixed CWE-264

TI-2013-00371 CVE-2013-0444 · GHSA-px4h-jjhx-vcmc

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 43

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown v…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.06422 Published 2013-02-02 Partial fix

TI-2013-00350 CVE-2013-0423 · GHSA-rp49-xv9m-r6w5

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 43

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via u…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.0671 Published 2013-02-02 Partial fix

TI-2013-00347 CVE-2013-0419 · GHSA-vcpv-8f4g-jwm5

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 43

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via u…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.06895 Published 2013-02-02 Partial fix

TI-2013-00279 CVE-2013-0351 · GHSA-mf42-24fv-fm6r

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 42

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via u…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06013 Published 2013-02-02 Partial fix

TI-2013-00359 CVE-2013-0432 · GHSA-qrmf-26m7-r8fr

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 36

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.04875 Published 2013-02-02 Partial fix

TI-2013-01280 CVE-2013-1473 · GHSA-8rgf-jg88-wjqm

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect integrity via unknown vectors related to Deploymen…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05487 Published 2013-02-02 Partial fix

TI-2013-00367 CVE-2013-0440 · GHSA-f73w-73w8-h7j9

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attacker…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05532 Published 2013-02-02 Partial fix

TI-2013-00362 CVE-2013-0435 · GHSA-hv74-3r93-2vw8

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality via vectors…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05205 Published 2013-02-02 Partial fix

TI-2013-00361 CVE-2013-0434 · GHSA-xh2v-r28j-h338

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04911 Published 2013-02-02 Partial fix

TI-2013-00360 CVE-2013-0433 · GHSA-rpgf-fvq5-9r6x

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect inte…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04875 Published 2013-02-02 Partial fix

TI-2013-00354 CVE-2013-0427 · GHSA-8m7x-fvvq-rprj

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect inte…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04875 Published 2013-02-02 Partial fix

TI-2013-00351 CVE-2013-0424 · GHSA-3w77-j752-v9mg

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attacker…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04795 Published 2013-02-02 Partial fix

TI-2013-00337 CVE-2013-0409 · GHSA-fqvr-3cc6-8q2c

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38 allows remote attackers to affect confidentiality via vector…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04856 Published 2013-02-02 Partial fix

TI-2013-01292 CVE-2013-1485 · GHSA-xg94-74gq-gc6p

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0395 Published 2013-02-20 Fixed

TI-2013-00376 CVE-2013-0449 · GHSA-c32j-926c-f42x

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 29

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 allows remote attackers to affect confidentiality via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03839 Published 2013-02-02 Partial fix

TI-2013-00365 CVE-2013-0438 · GHSA-2r97-8xcx-w4g5

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 27

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality via unknown vectors related to Dep…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04284 Published 2013-02-02 Partial fix

TI-2013-00370 CVE-2013-0443 · GHSA-4p7m-gv97-7rq5

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 26

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.04259 Published 2013-02-02 Partial fix

TI-2012-04279 CVE-2012-5085 · GHSA-3mfh-w2fp-jmmm

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 7

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote authenticated…

CVSS 2.0LOW 0.0 Network Low privileges Interaction — EPSS 0.02172 Published 2012-10-16 Partial fix

RHSA-2013:0626

Fixed in

Fixes 41 records