Red Hat Security AdvisoryRHSA-2014:0407
java-1.7.0-openjdk security update
Released 2014-04-16 · Red Hat rating Important · View on Red Hat →
Fixes 24 records
Priority MEDIUM 53
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vec…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07418 · Published 2014-04-15 · Fixed
Priority MEDIUM 52
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related t…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06765 · Published 2014-04-16 · Fixed
Priority MEDIUM 52
Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06765 · Published 2014-04-16 · Fixed
Priority MEDIUM 52
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06765 · Published 2014-04-16 · Fixed
Priority MEDIUM 49
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05963 · Published 2014-04-16 · Fixed
Priority MEDIUM 48
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05486 · Published 2014-04-16 · Fixed
Priority MEDIUM 48
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vuln…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05486 · Published 2014-04-16 · Fixed
Priority MEDIUM 41
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05072 · Published 2014-04-16 · Fixed
Priority MEDIUM 41
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerab…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05072 · Published 2014-04-16 · Fixed
Priority MEDIUM 41
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXB.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05072 · Published 2014-04-16 · Fixed
Priority MEDIUM 41
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05072 · Published 2014-04-16 · Fixed
Priority MEDIUM 41
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerab…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05072 · Published 2014-04-16 · Fixed
Priority MEDIUM 41
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerab…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05072 · Published 2014-04-16 · Fixed
Priority MEDIUM 41
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vul…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05072 · Published 2014-04-16 · Fixed
Priority MEDIUM 41
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05072 · Published 2014-04-15 · Fixed
Priority MEDIUM 40
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vuln…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04078 · Published 2014-04-16 · Fixed
Priority MEDIUM 40
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04666 · Published 2014-04-16 · Fixed
Priority LOW 33
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.04334 · Published 2014-04-16 · Fixed
Priority LOW 33
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04082 · Published 2014-04-16 · Partial fix
Priority LOW 30
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via vectors related to JAXP.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03927 · Published 2014-04-16 · Fixed
Priority LOW 27
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to…
CVSS 2.0MEDIUM 4.0· Network · No auth · Interaction — · EPSS 0.04993 · Published 2014-04-16 · Fixed
Priority LOW 25
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Libraries.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02715 · Published 2014-04-16 · Fixed
Priority LOW 22
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.02566 · Published 2014-04-16 · Fixed
Priority LOW 21
The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.00456 · Published 2014-02-10 · Partial fix CWE-59