RHSA-2013:1060: java-1.7.0-ibm security update

TI-2013-02212 CVE-2013-2465 · GHSA-498p-qg8p-wgxg

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

CRITICAL 100KEV

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98773 Published 2013-06-18 Fixed CWE-693

TI-2013-02207 CVE-2013-2460 · GHSA-fmcw-8c9j-mwj4

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

HIGH 77

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unkno…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.7004 Published 2013-06-18 Fixed

TI-2013-02219 CVE-2013-2472 · GHSA-gjv2-jp2h-jxjh

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 63

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.22988 Published 2013-06-18 Fixed

TI-2013-02217 CVE-2013-2470 · GHSA-x8gh-hfwx-cvcw

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 63

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.22988 Published 2013-06-18 Fixed

TI-2013-02218 CVE-2013-2471 · GHSA-527c-rv7j-wxgp

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 59

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.15022 Published 2013-06-18 Fixed

TI-2013-01378 CVE-2013-1571 · GHSA-hq68-fx39-9xch

Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and…

MEDIUM 56

Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to af…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.66921 Published 2013-06-18 Fixed

TI-2013-02210 CVE-2013-2463 · GHSA-c2vj-w5wr-j285

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 55

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.10179 Published 2013-06-18 Fixed

TI-2013-02215 CVE-2013-2468 · GHSA-hpg7-v253-793h

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availabili…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07983 Published 2013-06-18 Fixed

TI-2013-02220 CVE-2013-2473 · GHSA-rqv8-fh49-xr2f

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07498 Published 2013-06-18 Fixed

TI-2013-02216 CVE-2013-2469 · GHSA-mx3f-824w-q245

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07133 Published 2013-06-18 Fixed

TI-2013-02213 CVE-2013-2466 · GHSA-x5p5-vp22-845x

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availabili…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07657 Published 2013-06-18 Fixed

TI-2013-02206 CVE-2013-2459 · GHSA-v8cv-cpwg-mmmf

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07437 Published 2013-06-18 Fixed

TI-2013-03496 CVE-2013-4002 · GHSA-7j4h-8wpf-rqfh

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime…

MEDIUM 52

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracl…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.24738 Published 2013-07-23 Partial fix · 2.12.0 CWE-112

TI-2013-02211 CVE-2013-2464 · GHSA-rf5v-3cvf-w4c6

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 52

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentialit…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06733 Published 2013-06-18 Fixed

TI-2013-02209 CVE-2013-2462 · GHSA-hq4r-2rgj-rj48

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 48

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relat…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05212 Published 2013-06-18 Fixed

TI-2013-02632 CVE-2013-3012 · GHSA-5924-8mpv-c4g3

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before…

MEDIUM 47

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to af…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04435 Published 2013-07-23 Fixed

TI-2013-02631 CVE-2013-3011 · GHSA-rpwx-9mqf-6hwr

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before…

MEDIUM 47

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to af…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04435 Published 2013-07-23 Fixed

TI-2013-02630 CVE-2013-3010 · GHSA-m9h2-5r32-9cx9

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before…

MEDIUM 47

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1 SR6 and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03973 Published 2013-07-23 Partial fix

TI-2013-02629 CVE-2013-3009 · GHSA-5wc9-xxxc-29xm

The com.ibm.CORBA.iiop.ClientDelegate class in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0…

MEDIUM 47

The com.ibm.CORBA.iiop.ClientDelegate class in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 improperly exposes the invoke method of the java.…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04382 Published 2013-07-23 Fixed

TI-2013-02628 CVE-2013-3008 · GHSA-9ffq-vhwj-qwhf

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7…

MEDIUM 47

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability tha…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03973 Published 2013-07-23 Partial fix

TI-2013-02627 CVE-2013-3007 · GHSA-56g2-qq6q-38fh

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before…

MEDIUM 47

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1 SR6 and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03973 Published 2013-07-23 Partial fix

TI-2013-02626 CVE-2013-3006 · GHSA-jq68-mm5g-r969

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7…

MEDIUM 47

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability tha…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03973 Published 2013-07-23 Partial fix

TI-2013-02195 CVE-2013-2448 · GHSA-p22p-5jvr-whv6

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 42

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.05571 Published 2013-06-18 Fixed

TI-2013-02189 CVE-2013-2442 · GHSA-ghqc-6vv2-rpqh

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 41

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availabili…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05679 Published 2013-06-18 Fixed

TI-2013-02154 CVE-2013-2407 · GHSA-gf86-x7w3-vm22

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 37

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and availa…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.05209 Published 2013-06-18 Fixed

TI-2013-02205 CVE-2013-2458 · GHSA-549r-9pr5-628x

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 33

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via unknown vectors rela…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.04128 Published 2013-06-18 Fixed

TI-2013-02201 CVE-2013-2454 · GHSA-p2rf-mr2p-r26v

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 33

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.04128 Published 2013-06-18 Fixed

TI-2013-02197 CVE-2013-2450 · GHSA-h4m3-84wr-c7xg

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05084 Published 2013-06-18 Fixed

TI-2013-02191 CVE-2013-2444 · GHSA-v66j-q7ff-pvwx

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04874 Published 2013-06-18 Fixed

TI-2013-02184 CVE-2013-2437 · GHSA-823g-hf5q-r787

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors relate…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0508 Published 2013-06-18 Fixed

TI-2013-02159 CVE-2013-2412 · GHSA-434m-x855-gvj6

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknow…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04823 Published 2013-06-18 Fixed

TI-2013-03257 CVE-2013-3744 · GHSA-q5rw-ppj2-3cjj

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulne…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04552 Published 2013-06-18 Fixed

TI-2013-02204 CVE-2013-2457 · GHSA-m3ch-223f-43c6

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04507 Published 2013-06-18 Fixed

TI-2013-02203 CVE-2013-2456 · GHSA-r2jw-6w2w-mv45

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04512 Published 2013-06-18 Fixed

TI-2013-02202 CVE-2013-2455 · GHSA-w6fp-3665-fq2r

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04326 Published 2013-06-18 Fixed

TI-2013-02200 CVE-2013-2453 · GHSA-6v99-2p53-chqj

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect integrity via vectors related to JMX.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04552 Published 2013-06-18 Fixed

TI-2013-02199 CVE-2013-2452 · GHSA-mj6j-2m32-x38f

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04326 Published 2013-06-18 Fixed

TI-2013-02194 CVE-2013-2447 · GHSA-6q4g-vp2w-v6q7

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04326 Published 2013-06-18 Fixed

TI-2013-02193 CVE-2013-2446 · GHSA-j2x7-qpr3-72q2

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04446 Published 2013-06-18 Fixed

TI-2013-02147 CVE-2013-2400 · GHSA-j4wx-m5g4-624q

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulne…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04187 Published 2013-06-18 Fixed

TI-2013-02196 CVE-2013-2449 · GHSA-6hpx-2f6c-q7xg

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 27

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Librari…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03757 Published 2013-06-18 Fixed

TI-2013-02198 CVE-2013-2451 · GHSA-prv5-6hqp-prj9

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 18

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality, integrity, and…

CVSS 2.0LOW 3.7 Local No auth Interaction — EPSS 0.00445 Published 2013-06-18 Fixed

TI-2013-01307 CVE-2013-1500 · GHSA-w6m9-3g8m-hgf4

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 18

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect con…

CVSS 2.0LOW 3.6 Local No auth Interaction — EPSS 0.00506 Published 2013-06-18 Fixed

RHSA-2013:1060

Fixed in

Fixes 43 records