Red Hat Security Advisory

RHSA-2020:2238

java-1.7.1-ibm security update

Released 2020-05-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7, java-1.7.1-ibm-demo-1:1.7.1.4.65-1jpp.1.el7, java-1.7.1-ibm-devel-1:1.7.1.4.65-1jpp.1.el7 +3
Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7, java-1.7.1-ibm-demo-1:1.7.1.4.65-1jpp.1.el7, java-1.7.1-ibm-devel-1:1.7.1.4.65-1jpp.1.el7 +1
Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7, java-1.7.1-ibm-demo-1:1.7.1.4.65-1jpp.1.el7, java-1.7.1-ibm-devel-1:1.7.1.4.65-1jpp.1.el7 +3
Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7, java-1.7.1-ibm-demo-1:1.7.1.4.65-1jpp.1.el7, java-1.7.1-ibm-devel-1:1.7.1.4.65-1jpp.1.el7 +3

TI-2020-02502 CVE-2020-2803 · GHSA-7q6q-6j5w-jcg9

MEDIUM 47

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.0623 Published 2020-04-15 Partial fix

TI-2020-02504 CVE-2020-2805 · GHSA-rjrq-hcmw-c76j

MEDIUM 45

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.04051 Published 2020-04-15 Partial fix

TI-2020-02529 CVE-2020-2830 · GHSA-94wm-9j29-vhm4

LOW 38

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.04948 Published 2020-04-15 Partial fix

TI-2020-02482 CVE-2020-2781 · GHSA-8p3r-9538-fcv4

LOW 38

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.04948 Published 2020-04-15 Partial fix

TI-2020-02499 CVE-2020-2800 · GHSA-359p-jmhp-cvrp

LOW 27

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server).

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.02879 Published 2020-04-15 Partial fix

TI-2020-02458 CVE-2020-2757 · GHSA-8wwq-46j2-7394

LOW 25

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.04246 Published 2020-04-15 Partial fix CWE-502

TI-2020-02457 CVE-2020-2756 · GHSA-9q47-jm86-2c5r

LOW 25

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.04246 Published 2020-04-15 Partial fix CWE-502

TI-2020-02357 CVE-2020-2654 · GHSA-wx3r-hh3w-28wg

LOW 24

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.0396 Published 2020-01-15 Partial fix