RHSA-2014:0414: java-1.6.0-sun security update

TI-2013-02212 CVE-2013-2465 · GHSA-498p-qg8p-wgxg

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

CRITICAL 100KEV

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98773 Published 2013-06-18 Fixed CWE-693

TI-2013-02219 CVE-2013-2472 · GHSA-gjv2-jp2h-jxjh

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 63

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.22988 Published 2013-06-18 Fixed

TI-2013-02217 CVE-2013-2470 · GHSA-x8gh-hfwx-cvcw

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 63

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.22988 Published 2013-06-18 Fixed

TI-2013-04978 CVE-2013-5842 · GHSA-vmv2-mj2q-xc6j

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 60

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.17606 Published 2013-10-16 Fixed

TI-2013-02218 CVE-2013-2471 · GHSA-527c-rv7j-wxgp

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 59

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.15022 Published 2013-06-18 Fixed

TI-2013-01378 CVE-2013-1571 · GHSA-hq68-fx39-9xch

Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and…

MEDIUM 56

Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to af…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.66921 Published 2013-06-18 Fixed

TI-2013-02210 CVE-2013-2463 · GHSA-c2vj-w5wr-j285

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 55

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.10179 Published 2013-06-18 Fixed

TI-2013-05042 CVE-2013-5907 · GHSA-f4vm-g8q2-m52q

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and…

MEDIUM 54

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unk…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0816 Published 2014-01-15 Partial fix

TI-2013-02215 CVE-2013-2468 · GHSA-hpg7-v253-793h

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 54

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availabili…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07983 Published 2013-06-18 Fixed

TI-2014-00408 CVE-2014-0429 · GHSA-6966-vmh9-2rgg

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1…

MEDIUM 53

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07418 Published 2014-04-15 Fixed

TI-2013-04966 CVE-2013-5830 · GHSA-xw8h-rxrp-9g5w

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 53

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows r…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07188 Published 2013-10-16 Fixed

TI-2013-04965 CVE-2013-5829 · GHSA-7rfx-xgp9-xj2c

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 53

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07188 Published 2013-10-16 Fixed

TI-2013-02220 CVE-2013-2473 · GHSA-rqv8-fh49-xr2f

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07498 Published 2013-06-18 Fixed

TI-2013-02216 CVE-2013-2469 · GHSA-mx3f-824w-q245

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07133 Published 2013-06-18 Fixed

TI-2013-02213 CVE-2013-2466 · GHSA-x5p5-vp22-845x

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availabili…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07657 Published 2013-06-18 Fixed

TI-2013-02206 CVE-2013-2459 · GHSA-v8cv-cpwg-mmmf

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07437 Published 2013-06-18 Fixed

TI-2014-01931 CVE-2014-2421 · GHSA-xpc4-vv94-q5pm

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related t…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06765 Published 2014-04-16 Fixed

TI-2014-00436 CVE-2014-0457 · GHSA-ph3v-m9mc-6c3f

Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06765 Published 2014-04-16 Fixed

TI-2014-00435 CVE-2014-0456 · GHSA-jc53-2whr-8m6w

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06765 Published 2014-04-16 Fixed

TI-2014-00407 CVE-2014-0428 · GHSA-26mx-fqqx-jrm9

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06126 Published 2014-01-15 Fixed

TI-2014-00401 CVE-2014-0422 · GHSA-9m4w-3pwq-4rhj

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06126 Published 2014-01-15 Fixed

TI-2014-00394 CVE-2014-0415 · GHSA-cqqp-93v3-9577

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0624 Published 2014-01-15 Fixed

TI-2014-00389 CVE-2014-0410 · GHSA-h55x-f7m7-p9jh

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0624 Published 2014-01-15 Fixed

TI-2013-04979 CVE-2013-5843 · GHSA-8649-jcf2-5whp

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JavaFX 2.2.40 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confi…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06132 Published 2013-10-16 Fixed

TI-2013-04953 CVE-2013-5817 · GHSA-wgfw-56pr-3h8c

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06295 Published 2013-10-16 Fixed

TI-2013-04950 CVE-2013-5814 · GHSA-3fjw-qcx6-3qqp

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06295 Published 2013-10-16 Fixed

TI-2013-04945 CVE-2013-5809 · GHSA-rrgj-7px5-9crq

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05894 Published 2013-10-16 Fixed

TI-2013-04918 CVE-2013-5782 · GHSA-4g8v-h4h8-7w96

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 52

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows r…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06295 Published 2013-10-16 Fixed

TI-2013-03496 CVE-2013-4002 · GHSA-7j4h-8wpf-rqfh

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime…

MEDIUM 52

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracl…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.24738 Published 2013-07-23 Partial fix · 2.12.0 CWE-112

TI-2013-02211 CVE-2013-2464 · GHSA-rf5v-3cvf-w4c6

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 52

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentialit…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06733 Published 2013-06-18 Fixed

TI-2013-04960 CVE-2013-5824 · GHSA-frxg-363v-8mx2

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 51

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05572 Published 2013-10-16 Fixed

TI-2013-04925 CVE-2013-5789 · GHSA-w23w-6w4w-7f72

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 51

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05572 Published 2013-10-16 Fixed

TI-2013-04923 CVE-2013-5787 · GHSA-xq78-qf9x-qjjv

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 51

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vec…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05572 Published 2013-10-16 Fixed

TI-2014-00440 CVE-2014-0461 · GHSA-jhjq-483p-7vc6

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51…

MEDIUM 49

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05963 Published 2014-04-16 Fixed

TI-2013-03256 CVE-2013-3743 · GHSA-5v44-94cq-c338

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 49

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 45 and earlier and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availabi…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06083 Published 2013-06-18 Fixed

TI-2014-00396 CVE-2014-0417 · GHSA-3vpv-9g36-x8h4

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JavaFX 2.2.45; and…

MEDIUM 48

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JavaFX 2.2.45; and Java SE Embedded 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0536 Published 2014-01-15 Fixed

TI-2013-05025 CVE-2013-5889 · GHSA-288c-8vm9-x4gr

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to…

MEDIUM 48

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0536 Published 2014-01-15 Fixed

TI-2013-04986 CVE-2013-5850 · GHSA-x5jv-3m34-q996

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 48

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05501 Published 2013-10-16 Fixed

TI-2013-04968 CVE-2013-5832 · GHSA-w69g-ffcv-3gw3

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 48

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vec…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04751 Published 2013-10-16 Fixed

TI-2013-02192 CVE-2013-2445 · GHSA-wphf-wxvh-vmjg

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 43

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.05725 Published 2013-06-18 Fixed

TI-2014-00367 CVE-2014-0387 · GHSA-f894-vhcw-ww3j

Unspecified vulnerability in Oracle Java SE 6u65 and Java SE 7u45, when running on…

MEDIUM 42

Unspecified vulnerability in Oracle Java SE 6u65 and Java SE 7u45, when running on Firefox, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.05406 Published 2014-01-15 Fixed

TI-2013-02208 CVE-2013-2461 · GHSA-xp47-mpxp-9h7v

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 42

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier; the Oracle JRockit component in Oracle Fusion Middleware R27.7.5 and earlie…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06746 Published 2013-06-18 Fixed

TI-2013-02195 CVE-2013-2448 · GHSA-p22p-5jvr-whv6

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 42

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.05571 Published 2013-06-18 Fixed

TI-2014-01938 CVE-2014-2428 · GHSA-xj88-q9xm-8q7v

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51…

MEDIUM 41

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.05173 Published 2014-04-16 Fixed

TI-2014-01937 CVE-2014-2427 · GHSA-2h4c-7xh4-m37v

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE…

MEDIUM 41

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05072 Published 2014-04-16 Fixed

TI-2014-01933 CVE-2014-2423 · GHSA-4rcf-j8r8-4576

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51…

MEDIUM 41

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerab…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05072 Published 2014-04-16 Fixed

TI-2014-01924 CVE-2014-2414 · GHSA-9wjx-27cp-x4w8

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51…

MEDIUM 41

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXB.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05072 Published 2014-04-16 Fixed

TI-2014-01922 CVE-2014-2412 · GHSA-wf6j-4458-f5r7

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE…

MEDIUM 41

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05072 Published 2014-04-16 Fixed

TI-2014-00437 CVE-2014-0458 · GHSA-94mc-862r-9gjc

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51…

MEDIUM 41

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerab…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05072 Published 2014-04-16 Fixed

TI-2014-00431 CVE-2014-0452 · GHSA-p9f6-jpfc-m7rw

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51…

MEDIUM 41

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerab…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05072 Published 2014-04-16 Fixed

TI-2014-00430 CVE-2014-0451 · GHSA-3fv5-2j3p-9qmm

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE…

MEDIUM 41

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vul…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05072 Published 2014-04-16 Fixed

TI-2014-00425 CVE-2014-0446 · GHSA-89j3-8w2j-whq3

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE…

MEDIUM 41

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05072 Published 2014-04-15 Fixed

TI-2013-02189 CVE-2013-2442 · GHSA-ghqc-6vv2-rpqh

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 41

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availabili…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05679 Published 2013-06-18 Fixed

TI-2014-00403 CVE-2014-0424 · GHSA-8c58-33g9-wwwv

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to…

MEDIUM 40

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04393 Published 2014-01-15 Fixed

TI-2014-00353 CVE-2014-0373 · GHSA-r3gh-pvf4-6v4v

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and OpenJDK 7, allows…

MEDIUM 40

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04287 Published 2014-01-15 Fixed

TI-2013-05014 CVE-2013-5878 · GHSA-v5jp-9wvr-f556

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and…

MEDIUM 40

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04312 Published 2014-01-15 Fixed

TI-2013-04988 CVE-2013-5852 · GHSA-cpxh-4vhc-97mc

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 40

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vec…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.03733 Published 2013-10-16 Fixed

TI-2013-04938 CVE-2013-5802 · GHSA-7cfg-cx4q-wp3r

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

MEDIUM 40

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows r…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04431 Published 2013-10-16 Fixed

TI-2013-02154 CVE-2013-2407 · GHSA-gf86-x7w3-vm22

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 37

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and availa…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.05209 Published 2013-06-18 Fixed

TI-2013-05715 CVE-2013-6954 · GHSA-jqh6-vqxw-fcv3

The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to…

LOW 36

The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, re…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.04692 Published 2014-01-12 Fixed CWE-476

TI-2013-05458 CVE-2013-6629 · GHSA-7vr8-hqr3-rjrw

The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0…

LOW 35

The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of componen…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0973 Published 2013-11-15 Fixed CWE-200

TI-2013-04948 CVE-2013-5812 · GHSA-45m9-cx5g-fv72

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 35

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and availability via unknown vectors related…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03847 Published 2013-10-16 Fixed

TI-2013-04940 CVE-2013-5804 · GHSA-4q4c-9cmc-j4jc

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 35

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, and JRockit R27.7.6 and earlier allows remote attackers to affect confident…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03932 Published 2013-10-16 Fixed

TI-2013-04919 CVE-2013-5783 · GHSA-6qxm-ffhw-5pm9

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 35

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and integrity vi…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03932 Published 2013-10-16 Fixed

TI-2013-03340 CVE-2013-3829 · GHSA-p8hc-mqcm-847r

Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE…

LOW 35

Unspecified vulnerability in the Java SE, Java SE Embedded component in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote a…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03932 Published 2013-10-16 Fixed

TI-2014-01919 CVE-2014-2409 · GHSA-7wjh-f35m-p84f

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51…

LOW 34

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03155 Published 2014-04-16 Fixed

TI-2014-00439 CVE-2014-0460 · GHSA-5fhm-4w6c-fp4v

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1…

LOW 33

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.04334 Published 2014-04-16 Fixed

TI-2013-02201 CVE-2013-2454 · GHSA-p2rf-mr2p-r26v

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 33

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.04128 Published 2013-06-18 Fixed

TI-2014-00397 CVE-2014-0418 · GHSA-6rg3-2gcm-cqhg

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to…

LOW 32

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.06263 Published 2014-01-15 Fixed

TI-2014-00383 CVE-2014-0403 · GHSA-654g-jrw5-fmvv

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to…

LOW 32

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5898 and CVE-20…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.03482 Published 2014-01-15 Fixed

TI-2014-00355 CVE-2014-0375 · GHSA-wch9-56hq-q6hv

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to…

LOW 32

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5898 and CVE-20…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.03482 Published 2014-01-15 Fixed

TI-2013-05041 CVE-2013-5906 · GHSA-4v4j-f74g-gxqv

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45 allows remote…

LOW 32

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install, a different vulnerability than CVE…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.06263 Published 2014-01-15 Fixed

TI-2014-00402 CVE-2014-0423 · GHSA-3pf2-g488-cwrg

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and…

LOW 31

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote authenticated users to affect confidentiality and availability via unkno…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.03661 Published 2014-01-15 Fixed

TI-2013-02197 CVE-2013-2450 · GHSA-h4m3-84wr-c7xg

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05084 Published 2013-06-18 Fixed

TI-2013-02191 CVE-2013-2444 · GHSA-v66j-q7ff-pvwx

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04874 Published 2013-06-18 Fixed

TI-2013-02184 CVE-2013-2437 · GHSA-823g-hf5q-r787

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors relate…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0508 Published 2013-06-18 Fixed

TI-2013-02159 CVE-2013-2412 · GHSA-434m-x855-gvj6

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 31

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknow…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04823 Published 2013-06-18 Fixed

TI-2014-01913 CVE-2014-2403 · GHSA-3w67-8p8m-wgqf

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51…

LOW 30

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via vectors related to JAXP.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03927 Published 2014-04-16 Fixed

TI-2014-00395 CVE-2014-0416 · GHSA-jj69-rwgw-8vmj

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded…

LOW 30

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAAS.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04056 Published 2014-01-15 Fixed

TI-2013-05040 CVE-2013-5905 · GHSA-5mxc-78h5-qrc7

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45 allows remote…

LOW 30

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install, a different vulnerability than CVE…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.03613 Published 2014-01-15 Fixed

TI-2013-05038 CVE-2013-5902 · GHSA-f7v3-px7g-cc2c

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to…

LOW 30

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.03613 Published 2014-01-15 Fixed

TI-2013-05035 CVE-2013-5899 · GHSA-pw7h-wfmq-9ph4

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to…

LOW 30

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03927 Published 2014-01-15 Fixed

TI-2013-05032 CVE-2013-5896 · GHSA-7v64-rv29-rwhf

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded…

LOW 30

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect availability via vectors related to CORBA.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04344 Published 2014-01-15 Fixed

TI-2013-05023 CVE-2013-5887 · GHSA-hcc6-h77r-jqhr

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to…

LOW 30

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect availability via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04174 Published 2014-01-15 Fixed

TI-2013-04976 CVE-2013-5840 · GHSA-8m45-r9p3-wv24

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 30

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vect…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03961 Published 2013-10-16 Fixed

TI-2013-04961 CVE-2013-5825 · GHSA-wx46-7528-f884

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 30

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows r…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04464 Published 2013-10-16 Fixed

TI-2013-04959 CVE-2013-5823 · GHSA-8gwc-x7mg-7p7p

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 30

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect av…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04732 Published 2013-10-16 Fixed in 1.4.8, 1.5.3

TI-2013-04956 CVE-2013-5820 · GHSA-7phw-hfv6-72h3

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 30

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via vectors related to JAX-WS.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04169 Published 2013-10-16 Fixed

TI-2013-04914 CVE-2013-5778 · GHSA-mwvj-gmfv-48xf

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51…

LOW 30

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03961 Published 2013-10-16 Fixed

TI-2013-04910 CVE-2013-5774 · GHSA-7vx4-68w6-mm4p

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51…

LOW 30

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03932 Published 2013-10-16 Fixed

TI-2013-02204 CVE-2013-2457 · GHSA-m3ch-223f-43c6

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04507 Published 2013-06-18 Fixed

TI-2013-02203 CVE-2013-2456 · GHSA-r2jw-6w2w-mv45

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04512 Published 2013-06-18 Fixed

TI-2013-02202 CVE-2013-2455 · GHSA-w6fp-3665-fq2r

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04326 Published 2013-06-18 Fixed

TI-2013-02200 CVE-2013-2453 · GHSA-6v99-2p53-chqj

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect integrity via vectors related to JMX.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04552 Published 2013-06-18 Fixed

TI-2013-02199 CVE-2013-2452 · GHSA-mj6j-2m32-x38f

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04326 Published 2013-06-18 Fixed

TI-2013-02194 CVE-2013-2447 · GHSA-6q4g-vp2w-v6q7

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04326 Published 2013-06-18 Fixed

TI-2013-02193 CVE-2013-2446 · GHSA-j2x7-qpr3-72q2

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04446 Published 2013-06-18 Fixed

TI-2013-02190 CVE-2013-2443 · GHSA-x452-rm6w-q6xw

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 30

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04586 Published 2013-06-18 Partial fix

TI-2014-01911 CVE-2014-2401 · GHSA-c277-m7f2-cgrx

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and…

LOW 29

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03611 Published 2014-04-16 Fixed

TI-2014-00428 CVE-2014-0449 · GHSA-83jm-4m95-wg4p

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51…

LOW 29

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03155 Published 2014-04-15 Fixed

TI-2014-00356 CVE-2014-0376 · GHSA-vw24-mx3m-5g44

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded…

LOW 29

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAXP.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03826 Published 2014-01-15 Fixed

TI-2014-00348 CVE-2014-0368 · GHSA-q4xg-x575-6r33

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and Java SE Embedded…

LOW 29

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and Java SE Embedded 7u45, allows remote attackers to affect confidentiality via unknown vectors related to Networking.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03854 Published 2014-01-15 Fixed

TI-2013-05045 CVE-2013-5910 · GHSA-7rr9-w99c-9r9h

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and…

LOW 29

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Security.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03826 Published 2014-01-15 Fixed

TI-2013-05020 CVE-2013-5884 · GHSA-3q7r-xm4q-jhg9

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded…

LOW 29

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality via vectors related to CORBA.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03854 Published 2014-01-15 Fixed

TI-2013-04984 CVE-2013-5848 · GHSA-7vj6-73x7-37g5

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 29

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and JavaFX 2.2.40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03195 Published 2013-10-16 Fixed

TI-2013-04967 CVE-2013-5831 · GHSA-wprp-gm7q-m73f

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 29

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a diffe…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03388 Published 2013-10-16 Fixed

TI-2013-04955 CVE-2013-5819 · GHSA-hp9f-rp8m-298x

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 29

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a diffe…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03388 Published 2013-10-16 Fixed

TI-2013-04954 CVE-2013-5818 · GHSA-79hw-f3v3-g5qw

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 29

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a diffe…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03388 Published 2013-10-16 Fixed

TI-2013-04937 CVE-2013-5801 · GHSA-gp97-hfp2-qjf7

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 29

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vect…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03219 Published 2013-10-16 Fixed

TI-2013-04912 CVE-2013-5776 · GHSA-h7mm-rm52-m4cv

Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java…

LOW 29

Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integ…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03388 Published 2013-10-16 Fixed

TI-2013-04023 CVE-2013-4578 · GHSA-6xg2-jpwh-hh9f

jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a…

LOW 29

jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper file validation.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.025 Published 2017-12-29 Fixed CWE-74

TI-2014-00432 CVE-2014-0453 · GHSA-356h-vwf2-6hvf

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1…

LOW 27

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.04993 Published 2014-04-16 Fixed

TI-2013-04985 CVE-2013-5849 · GHSA-c7x8-r349-5mjp

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 26

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors rela…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03433 Published 2013-10-16 Fixed

TI-2013-04926 CVE-2013-5790 · GHSA-p8r5-x7pf-3mx8

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 26

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors rela…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0364 Published 2013-10-16 Fixed

TI-2013-04920 CVE-2013-5784 · GHSA-m45v-56wf-mp49

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 26

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via vectors related to SCRIPTING.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0364 Published 2013-10-16 Fixed

TI-2013-04916 CVE-2013-5780 · GHSA-894f-5c3c-5r7v

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 26

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows r…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03433 Published 2013-10-16 Fixed

TI-2013-05034 CVE-2013-5898 · GHSA-xw76-9x56-hp8j

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to…

LOW 25

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-0375 and CVE-20…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.03512 Published 2014-01-15 Fixed

TI-2014-00390 CVE-2014-0411 · GHSA-mqjj-vv82-vh6r

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and…

LOW 23

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality and integrity via vectors related to…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.02348 Published 2014-01-15 Fixed

TI-2014-01908 CVE-2014-2398 · GHSA-m5wr-fv5w-98p4

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and…

LOW 22

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02566 Published 2014-04-16 Fixed

TI-2013-05024 CVE-2013-5888 · GHSA-j9h6-v4h6-47g9

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, when running with GNOME…

LOW 22

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, when running with GNOME, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00456 Published 2014-01-15 Fixed

TI-2013-04933 CVE-2013-5797 · GHSA-cxh8-c38w-rhhm

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 22

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and JavaFX 2.2.40 and earlier allows remote au…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.02633 Published 2013-10-16 Fixed

TI-2014-01461 CVE-2014-1876 · GHSA-97jm-5rh5-84f8

The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8…

LOW 21

The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary…

CVSS 2.0MEDIUM 4.4 Local No auth Interaction — EPSS 0.00456 Published 2014-02-10 Partial fix CWE-59

TI-2014-01930 CVE-2014-2420 · GHSA-588q-6fgf-m99h

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51…

LOW 20

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Deployment.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.03611 Published 2014-04-16 Fixed

TI-2013-04939 CVE-2013-5803 · GHSA-xg6x-r7hq-2gx8

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…

LOW 20

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows r…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.03864 Published 2013-10-16 Fixed

TI-2013-04908 CVE-2013-5772 · GHSA-vqmc-crhg-7qrp

Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u40 and…

LOW 20

Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u40 and earlier and Java SE 6u60 and earlier allows remote attackers to affect integrity via unknown vectors related to jhat.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.03756 Published 2013-10-16 Fixed

TI-2013-02198 CVE-2013-2451 · GHSA-prv5-6hqp-prj9

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 18

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality, integrity, and…

CVSS 2.0LOW 3.7 Local No auth Interaction — EPSS 0.00445 Published 2013-06-18 Fixed

TI-2013-01307 CVE-2013-1500 · GHSA-w6m9-3g8m-hgf4

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

LOW 18

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect con…

CVSS 2.0LOW 3.6 Local No auth Interaction — EPSS 0.00506 Published 2013-06-18 Fixed

RHSA-2014:0414

Fixed in

Fixes 127 records