RHSA-2013:1440: java-1.7.0-oracle security update

TI-2013-04978 CVE-2013-5842 · GHSA-vmv2-mj2q-xc6j

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 60

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.17606 Published 2013-10-16 Fixed

TI-2013-04966 CVE-2013-5830 · GHSA-xw8h-rxrp-9g5w

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 53

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows r…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07188 Published 2013-10-16 Fixed

TI-2013-04965 CVE-2013-5829 · GHSA-7rfx-xgp9-xj2c

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 53

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07188 Published 2013-10-16 Fixed

TI-2013-04979 CVE-2013-5843 · GHSA-8649-jcf2-5whp

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JavaFX 2.2.40 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confi…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06132 Published 2013-10-16 Fixed

TI-2013-04953 CVE-2013-5817 · GHSA-wgfw-56pr-3h8c

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06295 Published 2013-10-16 Fixed

TI-2013-04950 CVE-2013-5814 · GHSA-3fjw-qcx6-3qqp

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06295 Published 2013-10-16 Fixed

TI-2013-04945 CVE-2013-5809 · GHSA-rrgj-7px5-9crq

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05894 Published 2013-10-16 Fixed

TI-2013-04918 CVE-2013-5782 · GHSA-4g8v-h4h8-7w96

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows r…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06295 Published 2013-10-16 Fixed

TI-2013-03496 CVE-2013-4002 · GHSA-7j4h-8wpf-rqfh

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime…

MEDIUM 52

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracl…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.24738 Published 2013-07-23 Partial fix · 2.12.0 CWE-112

TI-2013-04960 CVE-2013-5824 · GHSA-frxg-363v-8mx2

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 51

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05572 Published 2013-10-16 Fixed

TI-2013-04925 CVE-2013-5789 · GHSA-w23w-6w4w-7f72

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 51

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05572 Published 2013-10-16 Fixed

TI-2013-04923 CVE-2013-5787 · GHSA-xq78-qf9x-qjjv

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 51

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05572 Published 2013-10-16 Fixed

TI-2013-04924 CVE-2013-5788 · GHSA-qjh7-wg3x-m5hm

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40…

MEDIUM 50

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03958 Published 2013-10-16 Fixed

TI-2013-04986 CVE-2013-5850 · GHSA-x5jv-3m34-q996

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 48

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05501 Published 2013-10-16 Fixed

TI-2013-04974 CVE-2013-5838 · GHSA-5f5p-94mf-qrjx

Unspecified vulnerability in Oracle Java SE 7u25 and earlier, and Java SE Embedded 7u25…

MEDIUM 48

Unspecified vulnerability in Oracle Java SE 7u25 and earlier, and Java SE Embedded 7u25 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04652 Published 2013-10-16 Fixed

TI-2013-04968 CVE-2013-5832 · GHSA-w69g-ffcv-3gw3

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 48

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vec…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04751 Published 2013-10-16 Fixed

TI-2013-04982 CVE-2013-5846 · GHSA-jpj8-x7cr-p898

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, and JavaFX 2.2.40 and…

MEDIUM 46

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, and JavaFX 2.2.40 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03559 Published 2013-10-16 Fixed

TI-2013-04980 CVE-2013-5844 · GHSA-8cvf-fjrc-gr48

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and…

MEDIUM 46

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03559 Published 2013-10-16 Fixed

TI-2013-04946 CVE-2013-5810 · GHSA-whhj-wpj3-66r6

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and…

MEDIUM 46

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03271 Published 2013-10-16 Fixed

TI-2013-04913 CVE-2013-5777 · GHSA-fc42-wvhr-5mm8

Unspecified vulnerability in the Java SE and JavaFX components in Oracle Java SE 7u40 and…

MEDIUM 46

Unspecified vulnerability in the Java SE and JavaFX components in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown v…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03271 Published 2013-10-16 Fixed

TI-2013-04988 CVE-2013-5852 · GHSA-cpxh-4vhc-97mc

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 40

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vec…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.03733 Published 2013-10-16 Fixed

TI-2013-04938 CVE-2013-5802 · GHSA-7cfg-cx4q-wp3r

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 40

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows r…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04431 Published 2013-10-16 Fixed

TI-2013-04911 CVE-2013-5775 · GHSA-vh5f-hgf9-rcwq

Unspecified vulnerability in the Java SE and JavaFX components in Oracle Java SE 7u40 and…

LOW 38

Unspecified vulnerability in the Java SE and JavaFX components in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown v…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02513 Published 2013-10-16 Fixed

TI-2013-04948 CVE-2013-5812 · GHSA-45m9-cx5g-fv72

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 35

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and availability via unknown vectors related…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03847 Published 2013-10-16 Fixed

TI-2013-04940 CVE-2013-5804 · GHSA-4q4c-9cmc-j4jc

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 35

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, and JRockit R27.7.6 and earlier allows remote attackers to affect confident…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03932 Published 2013-10-16 Fixed

TI-2013-04919 CVE-2013-5783 · GHSA-6qxm-ffhw-5pm9

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 35

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and integrity vi…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03932 Published 2013-10-16 Fixed

TI-2013-03340 CVE-2013-3829 · GHSA-p8hc-mqcm-847r

Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE…

LOW 35

Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote a…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03932 Published 2013-10-16 Fixed

TI-2013-04987 CVE-2013-5851 · GHSA-5fc7-h7w8-354m

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40…

LOW 30

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JAXP.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03927 Published 2013-10-16 Partial fix

TI-2013-04976 CVE-2013-5840 · GHSA-8m45-r9p3-wv24

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 30

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vect…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03961 Published 2013-10-16 Fixed

TI-2013-04961 CVE-2013-5825 · GHSA-wx46-7528-f884

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 30

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows r…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04464 Published 2013-10-16 Fixed

TI-2013-04959 CVE-2013-5823 · GHSA-8gwc-x7mg-7p7p

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 30

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect av…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04732 Published 2013-10-16 Fixed in 1.4.8, 1.5.3

TI-2013-04956 CVE-2013-5820 · GHSA-7phw-hfv6-72h3

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 30

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via vectors related to JAX-WS.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04169 Published 2013-10-16 Fixed

TI-2013-04914 CVE-2013-5778 · GHSA-mwvj-gmfv-48xf

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51…

LOW 30

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03961 Published 2013-10-16 Fixed

TI-2013-04910 CVE-2013-5774 · GHSA-7vx4-68w6-mm4p

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51…

LOW 30

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03932 Published 2013-10-16 Fixed

TI-2013-04984 CVE-2013-5848 · GHSA-7vj6-73x7-37g5

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 29

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and JavaFX 2.2.40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03195 Published 2013-10-16 Fixed

TI-2013-04967 CVE-2013-5831 · GHSA-wprp-gm7q-m73f

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 29

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a diffe…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03388 Published 2013-10-16 Fixed

TI-2013-04955 CVE-2013-5819 · GHSA-hp9f-rp8m-298x

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 29

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a diffe…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03388 Published 2013-10-16 Fixed

TI-2013-04954 CVE-2013-5818 · GHSA-79hw-f3v3-g5qw

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 29

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a diffe…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03388 Published 2013-10-16 Fixed

TI-2013-04937 CVE-2013-5801 · GHSA-gp97-hfp2-qjf7

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 29

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vect…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03219 Published 2013-10-16 Fixed

TI-2013-04912 CVE-2013-5776 · GHSA-h7mm-rm52-m4cv

Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java…

LOW 29

Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integ…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03388 Published 2013-10-16 Fixed

TI-2013-04985 CVE-2013-5849 · GHSA-c7x8-r349-5mjp

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 26

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors rela…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03433 Published 2013-10-16 Fixed

TI-2013-04936 CVE-2013-5800 · GHSA-pqph-p45p-gw7f

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40…

LOW 26

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JGSS.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03482 Published 2013-10-16 Fixed

TI-2013-04926 CVE-2013-5790 · GHSA-p8r5-x7pf-3mx8

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 26

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors rela…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0364 Published 2013-10-16 Fixed

TI-2013-04920 CVE-2013-5784 · GHSA-m45v-56wf-mp49

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 26

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via vectors related to SCRIPTING.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0364 Published 2013-10-16 Fixed

TI-2013-04916 CVE-2013-5780 · GHSA-894f-5c3c-5r7v

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 26

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows r…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03433 Published 2013-10-16 Fixed

TI-2013-04933 CVE-2013-5797 · GHSA-cxh8-c38w-rhhm

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 22

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and JavaFX 2.2.40 and earlier allows remote au…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02633 Published 2013-10-16 Fixed

TI-2013-04939 CVE-2013-5803 · GHSA-xg6x-r7hq-2gx8

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 20

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows r…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.03864 Published 2013-10-16 Fixed

TI-2013-04908 CVE-2013-5772 · GHSA-vqmc-crhg-7qrp

Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u40 and…

LOW 20

Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u40 and earlier and Java SE 6u60 and earlier allows remote attackers to affect integrity via unknown vectors related to jhat.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.03756 Published 2013-10-16 Fixed

TI-2013-04990 CVE-2013-5854 · GHSA-pm5g-mcvv-5jvj

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and…

LOW 18

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to affect confidentiality via unknown vectors.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02208 Published 2013-10-16 Fixed

RHSA-2013:1440

Fixed in

Fixes 49 records