Red Hat Security AdvisoryRHSA-2015:1488
java-1.7.0-ibm security update
Released 2015-07-23 · Red Hat rating Critical · View on Red Hat →
Fixes 20 records
Priority CRITICAL 100KEV
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.25469 · Published 2015-07-16 · Fixed
Priority HIGH 70
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown ve…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.44632 · Published 2015-07-16 · Fixed
Priority MEDIUM 63
The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgra…
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.9986 · Published 2015-05-21 · Partial fix CWE-295
Priority MEDIUM 59
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07039 · Published 2015-07-16 · Partial fix
Priority MEDIUM 58
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06464 · Published 2015-07-16 · Fixed
Priority MEDIUM 58
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java SE Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05772 · Published 2015-07-16 · Fixed
Priority MEDIUM 57
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relat…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05639 · Published 2015-07-16 · Fixed
Priority MEDIUM 52
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05772 · Published 2015-07-16 · Fixed
Priority MEDIUM 47
Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04423 · Published 2015-07-16 · Fixed
Priority LOW 36
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33, allows remote attackers to affect confidentiality via vectors related to JMX.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03919 · Published 2015-07-16 · Fixed
Priority LOW 35
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03455 · Published 2015-07-16 · Fixed
Priority LOW 35
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03616 · Published 2015-07-16 · Fixed
Priority LOW 33
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00421 · Published 2015-07-16 · Fixed
Priority LOW 30
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04419 · Published 2015-07-16 · Partial fix
Priority LOW 29
Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, JavaFX 2.2.80, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03177 · Published 2015-07-16 · Fixed
Priority LOW 29
Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03813 · Published 2015-07-16 · Partial fix
Priority LOW 26
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect availability via vectors related to JNDI.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03319 · Published 2015-07-16 · Fixed
Priority LOW 26
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JSSE.
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.03815 · Published 2015-07-16 · Fixed
Priority LOW 24
Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment.
CVSS 2.0MEDIUM 4.0· Network · No auth · Interaction — · EPSS 0.02678 · Published 2015-07-16 · Fixed
Priority LOW 24
IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information i…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00222 · Published 2020-01-23 · Fixed CWE-312