Red Hat Security AdvisoryRHSA-2018:1463
java-1.8.0-ibm security update
Released 2018-05-15 · Red Hat rating Moderate · View on Red Hat →
Fixes 21 records
Priority MEDIUM 47
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI).
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.0565 · Published 2018-01-18 · Partial fix
Priority MEDIUM 44
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment).
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.03328 · Published 2018-01-18 · Fixed
Priority MEDIUM 43
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment).
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.02943 · Published 2018-01-18 · Fixed
Priority MEDIUM 42
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX).
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.04618 · Published 2018-01-18 · Partial fix
Priority MEDIUM 40
Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization).
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.07525 · Published 2018-01-18 · Partial fix
Priority MEDIUM 40
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.06905 · Published 2018-01-18 · Partial fix
Priority LOW 39
Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code running under a security manager to elevate its privileges.
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.02145 · Published 2018-02-22 · Partial fix CWE-732
Priority LOW 37
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JGSS).
CVSS 3.1MEDIUM 6.8· Network · No auth · No interaction · EPSS 0.04532 · Published 2018-01-18 · Fixed
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot).
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.04736 · Published 2018-01-18 · Partial fix
Priority LOW 35
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT).
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.05107 · Published 2018-01-18 · Partial fix
Priority LOW 35
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer).
CVSS 3.1HIGH 7.5· Local · Low privileges · User interaction · EPSS 0.00491 · Published 2018-01-18 · Fixed
Priority LOW 34
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE).
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.04721 · Published 2018-01-18 · Partial fix
Priority LOW 32
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JGSS).
CVSS 3.1MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.04829 · Published 2018-01-18 · Fixed
Priority LOW 29
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI).
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.04162 · Published 2018-01-18 · Partial fix
Priority LOW 28
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI).
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.04675 · Published 2018-01-18 · Partial fix
Priority LOW 28
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT).
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.04675 · Published 2018-01-18 · Partial fix
Priority LOW 28
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.04675 · Published 2018-01-18 · Partial fix
Priority LOW 26
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: LDAP).
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.03435 · Published 2018-01-18 · Partial fix
Priority LOW 26
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX).
CVSS 3.1MEDIUM 4.7· Network · No auth · User interaction · EPSS 0.02541 · Published 2018-01-18 · Fixed
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.04078 · Published 2018-01-18 · Partial fix
Priority LOW 22
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n).
CVSS 3.1MEDIUM 4.5· Local · No auth · User interaction · EPSS 0.00631 · Published 2018-01-18 · Partial fix
THREATIST.IORead the docs