RHSA-2013:0963: java-1.7.0-oracle security update

TI-2013-02212 CVE-2013-2465 · GHSA-498p-qg8p-wgxg

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

CRITICAL 100KEV

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98773 Published 2013-06-18 Fixed CWE-693

TI-2013-02207 CVE-2013-2460 · GHSA-fmcw-8c9j-mwj4

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

HIGH 77

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unkno…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.7004 Published 2013-06-18 Fixed

TI-2013-02219 CVE-2013-2472 · GHSA-gjv2-jp2h-jxjh

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 63

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.22988 Published 2013-06-18 Fixed

TI-2013-02217 CVE-2013-2470 · GHSA-x8gh-hfwx-cvcw

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 63

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.22988 Published 2013-06-18 Fixed

TI-2013-02218 CVE-2013-2471 · GHSA-527c-rv7j-wxgp

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 59

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.15022 Published 2013-06-18 Fixed

TI-2013-01378 CVE-2013-1571 · GHSA-hq68-fx39-9xch

Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and…

MEDIUM 56

Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to af…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.66921 Published 2013-06-18 Fixed

TI-2013-02210 CVE-2013-2463 · GHSA-c2vj-w5wr-j285

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 55

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.10179 Published 2013-06-18 Fixed

TI-2013-02215 CVE-2013-2468 · GHSA-hpg7-v253-793h

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availabili…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07983 Published 2013-06-18 Fixed

TI-2013-02220 CVE-2013-2473 · GHSA-rqv8-fh49-xr2f

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07498 Published 2013-06-18 Fixed

TI-2013-02216 CVE-2013-2469 · GHSA-mx3f-824w-q245

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07133 Published 2013-06-18 Fixed

TI-2013-02213 CVE-2013-2466 · GHSA-x5p5-vp22-845x

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availabili…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07657 Published 2013-06-18 Fixed

TI-2013-02206 CVE-2013-2459 · GHSA-v8cv-cpwg-mmmf

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07437 Published 2013-06-18 Fixed

TI-2013-02211 CVE-2013-2464 · GHSA-rf5v-3cvf-w4c6

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 52

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentialit…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06733 Published 2013-06-18 Fixed

TI-2013-02209 CVE-2013-2462 · GHSA-hq4r-2rgj-rj48

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 48

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relat…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05212 Published 2013-06-18 Fixed

TI-2013-02192 CVE-2013-2445 · GHSA-wphf-wxvh-vmjg

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 43

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.05725 Published 2013-06-18 Fixed

TI-2013-02208 CVE-2013-2461 · GHSA-xp47-mpxp-9h7v

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 42

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier; the Oracle JRockit component in Oracle Fusion Middleware R27.7.5 and earlie…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06746 Published 2013-06-18 Fixed

TI-2013-02195 CVE-2013-2448 · GHSA-p22p-5jvr-whv6

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 42

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.05571 Published 2013-06-18 Fixed

TI-2013-02189 CVE-2013-2442 · GHSA-ghqc-6vv2-rpqh

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 41

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availabili…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05679 Published 2013-06-18 Fixed

TI-2013-02154 CVE-2013-2407 · GHSA-gf86-x7w3-vm22

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 37

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and availa…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.05209 Published 2013-06-18 Fixed

TI-2013-02205 CVE-2013-2458 · GHSA-549r-9pr5-628x

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 33

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via unknown vectors rela…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.04128 Published 2013-06-18 Fixed

TI-2013-02201 CVE-2013-2454 · GHSA-p2rf-mr2p-r26v

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 33

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.04128 Published 2013-06-18 Fixed

TI-2013-02197 CVE-2013-2450 · GHSA-h4m3-84wr-c7xg

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05084 Published 2013-06-18 Fixed

TI-2013-02191 CVE-2013-2444 · GHSA-v66j-q7ff-pvwx

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04874 Published 2013-06-18 Fixed

TI-2013-02184 CVE-2013-2437 · GHSA-823g-hf5q-r787

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors relate…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0508 Published 2013-06-18 Fixed

TI-2013-02159 CVE-2013-2412 · GHSA-434m-x855-gvj6

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknow…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04823 Published 2013-06-18 Fixed

TI-2013-03257 CVE-2013-3744 · GHSA-q5rw-ppj2-3cjj

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulne…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04552 Published 2013-06-18 Fixed

TI-2013-02204 CVE-2013-2457 · GHSA-m3ch-223f-43c6

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04507 Published 2013-06-18 Fixed

TI-2013-02203 CVE-2013-2456 · GHSA-r2jw-6w2w-mv45

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04512 Published 2013-06-18 Fixed

TI-2013-02202 CVE-2013-2455 · GHSA-w6fp-3665-fq2r

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04326 Published 2013-06-18 Fixed

TI-2013-02200 CVE-2013-2453 · GHSA-6v99-2p53-chqj

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect integrity via vectors related to JMX.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04552 Published 2013-06-18 Fixed

TI-2013-02199 CVE-2013-2452 · GHSA-mj6j-2m32-x38f

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04326 Published 2013-06-18 Fixed

TI-2013-02194 CVE-2013-2447 · GHSA-6q4g-vp2w-v6q7

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04326 Published 2013-06-18 Fixed

TI-2013-02193 CVE-2013-2446 · GHSA-j2x7-qpr3-72q2

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04446 Published 2013-06-18 Fixed

TI-2013-02190 CVE-2013-2443 · GHSA-x452-rm6w-q6xw

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04586 Published 2013-06-18 Partial fix

TI-2013-02147 CVE-2013-2400 · GHSA-j4wx-m5g4-624q

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulne…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04187 Published 2013-06-18 Fixed

TI-2013-02196 CVE-2013-2449 · GHSA-6hpx-2f6c-q7xg

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 27

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Librari…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03757 Published 2013-06-18 Fixed

TI-2013-02198 CVE-2013-2451 · GHSA-prv5-6hqp-prj9

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 18

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality, integrity, and…

CVSS 2.0LOW 3.7 Local No auth Interaction — EPSS 0.00445 Published 2013-06-18 Fixed

TI-2013-01307 CVE-2013-1500 · GHSA-w6m9-3g8m-hgf4

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 18

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect con…

CVSS 2.0LOW 3.6 Local No auth Interaction — EPSS 0.00506 Published 2013-06-18 Fixed

RHSA-2013:0963

Fixed in

Fixes 38 records