Red Hat Security AdvisoryRHSA-2020:0046
java-1.8.0-ibm security update
Released 2020-01-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux 8 Supplementary java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1, java-1.8.0-ibm-demo-1:1.8.0.6.0-3.el8_1, java-1.8.0-ibm-devel-1:1.8.0.6.0-3.el8_1 +5
Fixes 14 records
Priority MEDIUM 43
From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a diagnostic file are permitted without any privilege checks.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.02066 · Published 2019-10-17 · Fixed CWE-285
Priority LOW 36
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking).
CVSS 3.1MEDIUM 6.8· Network · No auth · No interaction · EPSS 0.03224 · Published 2019-10-16 · Fixed
Priority LOW 28
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting).
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.03313 · Published 2019-10-16 · Fixed
Priority LOW 27
Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc).
CVSS 3.1MEDIUM 4.7· Network · No auth · User interaction · EPSS 0.02598 · Published 2019-10-16 · Fixed
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Deployment).
CVSS 3.1MEDIUM 4.2· Network · No auth · User interaction · EPSS 0.02204 · Published 2019-10-16 · Fixed
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.03452 · Published 2019-10-16 · Fixed
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.03732 · Published 2019-10-16 · Fixed
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.03732 · Published 2019-10-16 · Fixed
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.03715 · Published 2019-10-16 · Fixed
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.03517 · Published 2019-10-16 · Fixed
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.03517 · Published 2019-10-16 · Fixed
Priority LOW 23
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.03269 · Published 2019-10-16 · Fixed
Priority LOW 23
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.03269 · Published 2019-10-16 · Fixed
Priority LOW 21
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking).
CVSS 3.1LOW 3.1· Network · No auth · User interaction · EPSS 0.03271 · Published 2019-10-16 · Fixed
THREATIST.IORead the docs