RHSA-2013:0757: java-1.7.0-oracle security update

TI-2013-01295 CVE-2013-1488 · GHSA-f2f6-qfp8-5hcm

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier…

CRITICAL 85

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to execute arbitrary code via unspecified vectors involving reflection, Libraries, "imp…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.87227 Published 2013-03-08 Fixed CWE-94

TI-2013-02170 CVE-2013-2423 · GHSA-wq4h-35pf-mp23

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

HIGH 75KEV

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.85215 Published 2013-04-17 Fixed CWE-284

TI-2013-01298 CVE-2013-1491 · GHSA-w2h9-vx32-mw67

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6…

MEDIUM 59

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code v…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.16422 Published 2013-03-08 Fixed CWE-94

TI-2013-01344 CVE-2013-1537 · GHSA-j5c6-qxp5-xf36

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 55

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.09875 Published 2013-04-17 Fixed

TI-2013-00330 CVE-2013-0402 · GHSA-8256-4rjv-442v

Heap-based buffer overflow in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 55

Heap-based buffer overflow in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via unspecified vectors…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.09627 Published 2013-03-08 Fixed CWE-119

TI-2013-00329 CVE-2013-0401 · GHSA-7fc2-vc87-69w8

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6…

MEDIUM 55

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via v…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.10342 Published 2013-03-08 Fixed CWE-94

TI-2013-02131 CVE-2013-2384 · GHSA-4g67-62qq-2rv4

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08778 Published 2013-04-17 Partial fix

TI-2013-02130 CVE-2013-2383 · GHSA-68qc-65jp-4m7w

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08778 Published 2013-04-17 Partial fix

TI-2013-01376 CVE-2013-1569 · GHSA-p2w7-2677-hrr8

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08869 Published 2013-04-17 Partial fix

TI-2013-02187 CVE-2013-2440 · GHSA-2252-mwqw-xgwq

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availabili…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07133 Published 2013-04-17 Fixed

TI-2013-02182 CVE-2013-2435 · GHSA-6whc-m4v6-hr38

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availabili…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07133 Published 2013-04-17 Fixed

TI-2013-02179 CVE-2013-2432 · GHSA-pm4f-9p32-rfm4

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attacker…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07133 Published 2013-04-17 Fixed

TI-2013-02178 CVE-2013-2431 · GHSA-mf4r-q9jv-3wcr

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07329 Published 2013-04-17 Partial fix

TI-2013-02169 CVE-2013-2422 · GHSA-vjrg-wqv9-qmc7

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, int…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06917 Published 2013-04-17 Fixed

TI-2013-02167 CVE-2013-2420 · GHSA-66wh-qh93-8p42

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06917 Published 2013-04-17 Fixed

TI-2013-01365 CVE-2013-1558 · GHSA-2mh3-566h-4f4x

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availabili…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07329 Published 2013-04-17 Fixed

TI-2013-01364 CVE-2013-1557 · GHSA-2q6v-6h98-x72r

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06917 Published 2013-04-17 Fixed

TI-2013-01325 CVE-2013-1518 · GHSA-vch7-4rrr-p8p4

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06917 Published 2013-04-17 Fixed

TI-2013-02181 CVE-2013-2434 · GHSA-fpx8-mv5j-34gq

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 51

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availabil…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05131 Published 2013-04-17 Fixed

TI-2013-02175 CVE-2013-2428 · GHSA-jw8r-h96r-55w9

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 50

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availabil…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04712 Published 2013-04-17 Fixed

TI-2013-02174 CVE-2013-2427 · GHSA-4463-4cg8-898f

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 50

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availabil…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04712 Published 2013-04-17 Fixed

TI-2013-02172 CVE-2013-2425 · GHSA-r2cx-28wv-46g2

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 50

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relat…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04712 Published 2013-04-17 Fixed

TI-2013-02161 CVE-2013-2414 · GHSA-qwqw-pj6q-q5rj

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 50

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availabil…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04712 Published 2013-04-17 Fixed

TI-2013-02183 CVE-2013-2436 · GHSA-6hc9-6xww-76p2

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 49

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unkno…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05691 Published 2013-04-17 Fixed

TI-2013-02173 CVE-2013-2426 · GHSA-2hfv-vqxq-gp7v

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 49

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05691 Published 2013-04-17 Fixed

TI-2013-02168 CVE-2013-2421 · GHSA-2q53-qv6g-qh4p

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 49

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05691 Published 2013-04-17 Fixed

TI-2013-02166 CVE-2013-2419 · GHSA-f4px-hx4m-mgqh

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 43

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.2258 Published 2013-04-17 Partial fix

TI-2013-02177 CVE-2013-2430 · GHSA-hh74-34h4-39gj

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 42

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; JavaFX 2.2.7 and earlier; and OpenJDK 6 and 7 a…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.05724 Published 2013-04-17 Fixed

TI-2013-02176 CVE-2013-2429 · GHSA-w263-x24h-qvff

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 42

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.05724 Published 2013-04-17 Fixed

TI-2013-02141 CVE-2013-2394 · GHSA-7569-gw6r-r73h

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 42

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attacker…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.05904 Published 2013-04-17 Fixed

TI-2013-01370 CVE-2013-1563 · GHSA-5wmp-rch3-mgpp

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 41

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.05125 Published 2013-04-17 Fixed

TI-2013-02186 CVE-2013-2439 · GHSA-v7j5-xfvg-jhj2

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows local users to…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00416 Published 2013-04-17 Fixed

TI-2013-02164 CVE-2013-2417 · GHSA-h54m-rh5c-c9h8

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05009 Published 2013-04-17 Fixed

TI-2013-02163 CVE-2013-2416 · GHSA-jqx5-64jc-mg47

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.08769 Published 2013-04-17 Fixed

TI-2013-02171 CVE-2013-2424 · GHSA-9vfq-2pc2-w68x

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04446 Published 2013-04-17 Fixed

TI-2013-02185 CVE-2013-2438 · GHSA-mpgr-j2xc-grrx

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 28

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier allows remote attackers to affect integrity via unknown vectors related to JavaFX.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02871 Published 2013-04-17 Fixed

TI-2013-01371 CVE-2013-1564 · GHSA-mcpq-p3cv-qj8q

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 28

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect integrity via unknown vectors related to…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02868 Published 2013-04-17 Fixed

TI-2013-01368 CVE-2013-1561 · GHSA-wp36-xg52-2w32

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 28

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality via unknown vectors relat…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02889 Published 2013-04-17 Fixed

TI-2013-02180 CVE-2013-2433 · GHSA-3fgh-gh6w-973v

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 27

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to D…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03757 Published 2013-04-17 Fixed

TI-2013-01347 CVE-2013-1540 · GHSA-399f-x62x-r9gr

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 27

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to D…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03757 Published 2013-04-17 Fixed

TI-2013-02165 CVE-2013-2418 · GHSA-h22v-jpfj-7qf8

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 22

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows local users to affect confidentiality, integrity, and availability vi…

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00463 Published 2013-04-17 Fixed

TI-2013-02162 CVE-2013-2415 · GHSA-vv67-5vpg-hpc7

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 12

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows local users to affect confidentiality via vectors related to JAX-WS.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00494 Published 2013-04-17 Fixed

RHSA-2013:0757

Fixed in

Fixes 42 records