RHSA-2013:1508: java-1.6.0-ibm security update

TI-2013-04978 CVE-2013-5842 · GHSA-vmv2-mj2q-xc6j

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 60

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.17606 Published 2013-10-16 Fixed

TI-2013-04966 CVE-2013-5830 · GHSA-xw8h-rxrp-9g5w

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 53

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows r…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07188 Published 2013-10-16 Fixed

TI-2013-04965 CVE-2013-5829 · GHSA-7rfx-xgp9-xj2c

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 53

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07188 Published 2013-10-16 Fixed

TI-2013-04979 CVE-2013-5843 · GHSA-8649-jcf2-5whp

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JavaFX 2.2.40 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confi…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06132 Published 2013-10-16 Fixed

TI-2013-04953 CVE-2013-5817 · GHSA-wgfw-56pr-3h8c

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06295 Published 2013-10-16 Fixed

TI-2013-04950 CVE-2013-5814 · GHSA-3fjw-qcx6-3qqp

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06295 Published 2013-10-16 Fixed

TI-2013-04945 CVE-2013-5809 · GHSA-rrgj-7px5-9crq

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05894 Published 2013-10-16 Fixed

TI-2013-04918 CVE-2013-5782 · GHSA-4g8v-h4h8-7w96

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows r…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06295 Published 2013-10-16 Fixed

TI-2013-04960 CVE-2013-5824 · GHSA-frxg-363v-8mx2

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 51

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05572 Published 2013-10-16 Fixed

TI-2013-04925 CVE-2013-5789 · GHSA-w23w-6w4w-7f72

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 51

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05572 Published 2013-10-16 Fixed

TI-2013-04923 CVE-2013-5787 · GHSA-xq78-qf9x-qjjv

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 51

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05572 Published 2013-10-16 Fixed

TI-2013-04656 CVE-2013-5457 · GHSA-p7vj-c6jh-2j22

Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0…

MEDIUM 49

Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06101 Published 2013-11-24 Fixed

TI-2013-04986 CVE-2013-5850 · GHSA-x5jv-3m34-q996

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 48

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05501 Published 2013-10-16 Fixed

TI-2013-04968 CVE-2013-5832 · GHSA-w69g-ffcv-3gw3

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 48

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vec…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04751 Published 2013-10-16 Fixed

TI-2013-04938 CVE-2013-5802 · GHSA-7cfg-cx4q-wp3r

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 40

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows r…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04431 Published 2013-10-16 Fixed

TI-2013-04948 CVE-2013-5812 · GHSA-45m9-cx5g-fv72

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 35

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and availability via unknown vectors related…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03847 Published 2013-10-16 Fixed

TI-2013-04940 CVE-2013-5804 · GHSA-4q4c-9cmc-j4jc

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 35

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, and JRockit R27.7.6 and earlier allows remote attackers to affect confident…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03932 Published 2013-10-16 Fixed

TI-2013-04919 CVE-2013-5783 · GHSA-6qxm-ffhw-5pm9

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 35

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and integrity vi…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03932 Published 2013-10-16 Fixed

TI-2013-04591 CVE-2013-5375 · GHSA-7h9x-q59m-q97v

Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, 6.0.0…

LOW 35

Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, 6.0.0 before SR15, and 5.0.0 before SR16 FP4 allows remote attackers to access restricted classes via unspecified vectors related to XML and X…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02812 Published 2013-11-24 Fixed

TI-2013-03528 CVE-2013-4041 · GHSA-x62c-8f45-jx5r

Unspecified vulnerability in IBM Java SDK 5.0.0 before SR16 FP4, 7.0.0 before SR6, 6.0.1…

LOW 35

Unspecified vulnerability in IBM Java SDK 5.0.0 before SR16 FP4, 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to access restricted classes via unspecified vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02812 Published 2013-11-24 Fixed

TI-2013-03340 CVE-2013-3829 · GHSA-p8hc-mqcm-847r

Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE…

LOW 35

Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote a…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03932 Published 2013-10-16 Fixed

TI-2013-04987 CVE-2013-5851 · GHSA-5fc7-h7w8-354m

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40…

LOW 30

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JAXP.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03927 Published 2013-10-16 Partial fix

TI-2013-04976 CVE-2013-5840 · GHSA-8m45-r9p3-wv24

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 30

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vect…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03961 Published 2013-10-16 Fixed

TI-2013-04961 CVE-2013-5825 · GHSA-wx46-7528-f884

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 30

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows r…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04464 Published 2013-10-16 Fixed

TI-2013-04959 CVE-2013-5823 · GHSA-8gwc-x7mg-7p7p

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 30

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect av…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04732 Published 2013-10-16 Fixed in 1.4.8, 1.5.3

TI-2013-04956 CVE-2013-5820 · GHSA-7phw-hfv6-72h3

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 30

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via vectors related to JAX-WS.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04169 Published 2013-10-16 Fixed

TI-2013-04914 CVE-2013-5778 · GHSA-mwvj-gmfv-48xf

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51…

LOW 30

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03961 Published 2013-10-16 Fixed

TI-2013-04910 CVE-2013-5774 · GHSA-7vx4-68w6-mm4p

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51…

LOW 30

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03932 Published 2013-10-16 Fixed

TI-2013-04984 CVE-2013-5848 · GHSA-7vj6-73x7-37g5

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 29

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and JavaFX 2.2.40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03195 Published 2013-10-16 Fixed

TI-2013-04967 CVE-2013-5831 · GHSA-wprp-gm7q-m73f

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 29

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a diffe…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03388 Published 2013-10-16 Fixed

TI-2013-04955 CVE-2013-5819 · GHSA-hp9f-rp8m-298x

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 29

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a diffe…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03388 Published 2013-10-16 Fixed

TI-2013-04954 CVE-2013-5818 · GHSA-79hw-f3v3-g5qw

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 29

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a diffe…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03388 Published 2013-10-16 Fixed

TI-2013-04937 CVE-2013-5801 · GHSA-gp97-hfp2-qjf7

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 29

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vect…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03219 Published 2013-10-16 Fixed

TI-2013-04912 CVE-2013-5776 · GHSA-h7mm-rm52-m4cv

Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java…

LOW 29

Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integ…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03388 Published 2013-10-16 Fixed

TI-2013-04985 CVE-2013-5849 · GHSA-c7x8-r349-5mjp

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 26

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors rela…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03433 Published 2013-10-16 Fixed

TI-2013-04920 CVE-2013-5784 · GHSA-m45v-56wf-mp49

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 26

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via vectors related to SCRIPTING.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0364 Published 2013-10-16 Fixed

TI-2013-04916 CVE-2013-5780 · GHSA-894f-5c3c-5r7v

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 26

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows r…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03433 Published 2013-10-16 Fixed

TI-2013-04589 CVE-2013-5372 · GHSA-fq7g-96mj-hhf9

The XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7…

LOW 25

The XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0 before 8.0.0.4 and IBM Integration Bus 9.0 before 9.0.0.1 allows remote attackers to cause a denial of service (memory con…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02812 Published 2013-10-19 Fixed CWE-399

TI-2013-04933 CVE-2013-5797 · GHSA-cxh8-c38w-rhhm

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 22

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and JavaFX 2.2.40 and earlier allows remote au…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02633 Published 2013-10-16 Fixed

TI-2013-04939 CVE-2013-5803 · GHSA-xg6x-r7hq-2gx8

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 20

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows r…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.03864 Published 2013-10-16 Fixed

TI-2013-04908 CVE-2013-5772 · GHSA-vqmc-crhg-7qrp

Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u40 and…

LOW 20

Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u40 and earlier and Java SE 6u60 and earlier allows remote attackers to affect integrity via unknown vectors related to jhat.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.03756 Published 2013-10-16 Fixed

RHSA-2013:1508

Fixed in

Fixes 41 records