Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…
Priority LOW 29Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Partial · None · None
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.
Summary
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 26 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to SAAJ.
Why it matters now
EPSS 0.03246 88th percentileScored 2026-11-07
Fix Fixed Red Hat: 5 advisories
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 50
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:sun:jdk:*:update_26:*:*:*:*:*:* | up to 1.6.0 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:* | 1.6.0 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:* | 1.6.0 update_10 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:* | 1.6.0 update_11 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:* | 1.6.0 update_12 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:* | 1.6.0 update_13 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:* | 1.6.0 update_14 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:* | 1.6.0 update_15 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:* | 1.6.0 update_16 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:* | 1.6.0 update_17 | Vulnerable | Sun |
- cpe:2.3:a:sun:jdk:*:update_26:*:*:*:*:*:* Versions up to 1.6.0 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:* Versions 1.6.0 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:* Versions 1.6.0 update_10 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:* Versions 1.6.0 update_11 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:* Versions 1.6.0 update_12 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:* Versions 1.6.0 update_13 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:* Versions 1.6.0 update_14 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:* Versions 1.6.0 update_15 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:* Versions 1.6.0 update_16 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:* Versions 1.6.0 update_17 Vulnerable ·Sun
Show 40 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:* | 1.6.0 update_18 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:* | 1.6.0 update_19 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:* | 1.6.0 update_20 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:* | 1.6.0 update_21 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_22:*:*:*:*:*:* | 1.6.0 update_22 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_23:*:*:*:*:*:* | 1.6.0 update_23 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_24:*:*:*:*:*:* | 1.6.0 update_24 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_25:*:*:*:*:*:* | 1.6.0 update_25 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:* | 1.6.0 update_3 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:* | 1.6.0 update_4 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:* | 1.6.0 update_5 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:* | 1.6.0 update_6 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:* | 1.6.0 update_7 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:* | 1.6.0 update1 | Vulnerable | Sun |
| cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:* | 1.6.0 update2 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:*:update_26:*:*:*:*:*:* | up to 1.6.0 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:* | 1.6.0 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:* | 1.6.0 update_1 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:* | 1.6.0 update_10 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:* | 1.6.0 update_11 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:* | 1.6.0 update_12 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:* | 1.6.0 update_13 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:* | 1.6.0 update_14 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:* | 1.6.0 update_15 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:* | 1.6.0 update_16 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:* | 1.6.0 update_17 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:* | 1.6.0 update_18 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:* | 1.6.0 update_19 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:* | 1.6.0 update_2 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:* | 1.6.0 update_20 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:* | 1.6.0 update_21 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_22:*:*:*:*:*:* | 1.6.0 update_22 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_23:*:*:*:*:*:* | 1.6.0 update_23 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_24:*:*:*:*:*:* | 1.6.0 update_24 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_25:*:*:*:*:*:* | 1.6.0 update_25 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:* | 1.6.0 update_3 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:* | 1.6.0 update_4 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:* | 1.6.0 update_5 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:* | 1.6.0 update_6 | Vulnerable | Sun |
| cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:* | 1.6.0 update_7 | Vulnerable | Sun |
- cpe:2.3:a:sun:jdk:1.6.0:update_18:*:*:*:*:*:* Versions 1.6.0 update_18 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_19:*:*:*:*:*:* Versions 1.6.0 update_19 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_20:*:*:*:*:*:* Versions 1.6.0 update_20 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_21:*:*:*:*:*:* Versions 1.6.0 update_21 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_22:*:*:*:*:*:* Versions 1.6.0 update_22 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_23:*:*:*:*:*:* Versions 1.6.0 update_23 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_24:*:*:*:*:*:* Versions 1.6.0 update_24 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_25:*:*:*:*:*:* Versions 1.6.0 update_25 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:* Versions 1.6.0 update_3 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:* Versions 1.6.0 update_4 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:* Versions 1.6.0 update_5 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:* Versions 1.6.0 update_6 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:* Versions 1.6.0 update_7 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:* Versions 1.6.0 update1 Vulnerable ·Sun
- cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:* Versions 1.6.0 update2 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:*:update_26:*:*:*:*:*:* Versions up to 1.6.0 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:* Versions 1.6.0 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:* Versions 1.6.0 update_1 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:* Versions 1.6.0 update_10 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:* Versions 1.6.0 update_11 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:* Versions 1.6.0 update_12 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:* Versions 1.6.0 update_13 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:* Versions 1.6.0 update_14 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:* Versions 1.6.0 update_15 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:* Versions 1.6.0 update_16 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:* Versions 1.6.0 update_17 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:* Versions 1.6.0 update_18 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:* Versions 1.6.0 update_19 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:* Versions 1.6.0 update_2 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:* Versions 1.6.0 update_20 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:* Versions 1.6.0 update_21 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_22:*:*:*:*:*:* Versions 1.6.0 update_22 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_23:*:*:*:*:*:* Versions 1.6.0 update_23 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_24:*:*:*:*:*:* Versions 1.6.0 update_24 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_25:*:*:*:*:*:* Versions 1.6.0 update_25 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:* Versions 1.6.0 update_3 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:* Versions 1.6.0 update_4 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:* Versions 1.6.0 update_5 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:* Versions 1.6.0 update_6 Vulnerable ·Sun
- cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:* Versions 1.6.0 update_7 Vulnerable ·Sun
Remediation
Red Hat 5 advisories
- RHSA-2013:1455 Released 2013-10-23 · Red Hat rating LowRed Hat Network Satellite server IBM Java Runtime security update
- Red Hat Satellite 5.4 (RHEL v.5) java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9, java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9.i386, java-1.6.0-ibm-devel-1:1.6.0.14.0-1jpp.1.el5_9 +1
- Red Hat Satellite 5.4 (RHEL v.6) java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4, java-1.6.0-ibm-devel-1:1.6.0.14.0-1jpp.1.el6_4
- RHSA-2011:0938 Released 2011-07-15 · Red Hat rating Criticaljava-1.6.0-ibm security update
- Red Hat Desktop version 4 Extras java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el4, java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el4.i386, java-1.6.0-ibm-demo-1:1.6.0.9.2-1jpp.2.el4 +11
- Red Hat Enterprise Linux AS version 4 Extras java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el4, java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el4.i386, java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el4.ppc +18
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el5, java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el5.i386, java-1.6.0-ibm-accessibility-1:1.6.0.9.2-1jpp.2.el5 +13
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el6, java-1.6.0-ibm-demo-1:1.6.0.9.2-1jpp.2.el6, java-1.6.0-ibm-devel-1:1.6.0.9.2-1jpp.2.el6 +4
- Red Hat Enterprise Linux ES version 4 Extras java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el4, java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el4.i386, java-1.6.0-ibm-demo-1:1.6.0.9.2-1jpp.2.el4 +11
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el6, java-1.6.0-ibm-demo-1:1.6.0.9.2-1jpp.2.el6, java-1.6.0-ibm-devel-1:1.6.0.9.2-1jpp.2.el6 +2
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el5, java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el5.i386, java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el5.ppc +21
- Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el6, java-1.6.0-ibm-demo-1:1.6.0.9.2-1jpp.2.el6, java-1.6.0-ibm-devel-1:1.6.0.9.2-1jpp.2.el6 +5
- Red Hat Enterprise Linux WS version 4 Extras java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el4, java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el4.i386, java-1.6.0-ibm-demo-1:1.6.0.9.2-1jpp.2.el4 +11
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.9.2-1jpp.2.el6, java-1.6.0-ibm-demo-1:1.6.0.9.2-1jpp.2.el6, java-1.6.0-ibm-devel-1:1.6.0.9.2-1jpp.2.el6 +4
- RHSA-2011:0860 Released 2011-06-08 · Red Hat rating Criticaljava-1.6.0-sun security update
- Red Hat Desktop version 4 Extras java-1.6.0-sun-1:1.6.0.26-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.26-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.26-1jpp.1.el4 +9
- Red Hat Enterprise Linux AS version 4 Extras java-1.6.0-sun-1:1.6.0.26-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.26-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.26-1jpp.1.el4 +9
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-sun-1:1.6.0.26-1jpp.1.el5, java-1.6.0-sun-1:1.6.0.26-1jpp.1.el5.i586, java-1.6.0-sun-demo-1:1.6.0.26-1jpp.1.el5 +9
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.6.0-sun-1:1.6.0.26-1jpp.1.el6, java-1.6.0-sun-demo-1:1.6.0.26-1jpp.1.el6, java-1.6.0-sun-devel-1:1.6.0.26-1jpp.1.el6 +3
- Red Hat Enterprise Linux ES version 4 Extras java-1.6.0-sun-1:1.6.0.26-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.26-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.26-1jpp.1.el4 +9
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.6.0-sun-1:1.6.0.26-1jpp.1.el6, java-1.6.0-sun-demo-1:1.6.0.26-1jpp.1.el6, java-1.6.0-sun-devel-1:1.6.0.26-1jpp.1.el6 +1
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-sun-1:1.6.0.26-1jpp.1.el5, java-1.6.0-sun-1:1.6.0.26-1jpp.1.el5.i586, java-1.6.0-sun-demo-1:1.6.0.26-1jpp.1.el5 +9
- Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.6.0-sun-1:1.6.0.26-1jpp.1.el6, java-1.6.0-sun-demo-1:1.6.0.26-1jpp.1.el6, java-1.6.0-sun-devel-1:1.6.0.26-1jpp.1.el6 +3
- Red Hat Enterprise Linux WS version 4 Extras java-1.6.0-sun-1:1.6.0.26-1jpp.1.el4, java-1.6.0-sun-1:1.6.0.26-1jpp.1.el4.i586, java-1.6.0-sun-demo-1:1.6.0.26-1jpp.1.el4 +9
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.6.0-sun-1:1.6.0.26-1jpp.1.el6, java-1.6.0-sun-demo-1:1.6.0.26-1jpp.1.el6, java-1.6.0-sun-devel-1:1.6.0.26-1jpp.1.el6 +3
Show 2 more Red Hat advisories
- RHSA-2011:0857 Released 2011-06-08 · Red Hat rating Importantjava-1.6.0-openjdk security update
- Red Hat Enterprise Linux (v. 5.6.z server) java-1.6.0-openjdk-1:1.6.0.0-1.22.1.9.8.el5_6, java-1.6.0-openjdk-1:1.6.0.0-1.22.1.9.8.el5_6.i386, java-1.6.0-openjdk-demo-1:1.6.0.0-1.22.1.9.8.el5_6 +7
- RHSA-2011:0856 Released 2011-06-08 · Red Hat rating Criticaljava-1.6.0-openjdk security update
- Red Hat Enterprise Linux Server (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.39.1.9.8.el6_1, java-1.6.0-openjdk-devel-1:1.6.0.0-1.39.1.9.8.el6_1, java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.39.1.9.8.el6_1
- Red Hat Enterprise Linux Server Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.39.1.9.8.el6_1, java-1.6.0-openjdk-demo-1:1.6.0.0-1.39.1.9.8.el6_1, java-1.6.0-openjdk-src-1:1.6.0.0-1.39.1.9.8.el6_1
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Desktop version 4 Extras | Fixed | RHSA-2011:0860, RHSA-2011:0938 |
| Red Hat Enterprise Linux (v. 5.6.z server) | Fixed | RHSA-2011:0857 |
| Red Hat Enterprise Linux AS version 4 Extras | Fixed | RHSA-2011:0860, RHSA-2011:0938 |
| Red Hat Enterprise Linux Desktop Supplementary (v. 5) | Fixed | RHSA-2011:0860, RHSA-2011:0938 |
| Red Hat Enterprise Linux Desktop Supplementary (v. 6) | Fixed | RHSA-2011:0860, RHSA-2011:0938 |
| Red Hat Enterprise Linux ES version 4 Extras | Fixed | RHSA-2011:0860, RHSA-2011:0938 |
| Red Hat Enterprise Linux HPC Node Supplementary (v. 6) | Fixed | RHSA-2011:0860, RHSA-2011:0938 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2011:0856 |
| Red Hat Enterprise Linux Server Optional (v. 6) | Fixed | RHSA-2011:0856 |
| Red Hat Enterprise Linux Server Supplementary (v. 5) | Fixed | RHSA-2011:0860, RHSA-2011:0938 |
| Red Hat Enterprise Linux Server Supplementary (v. 6) | Fixed | RHSA-2011:0860, RHSA-2011:0938 |
| Red Hat Enterprise Linux WS version 4 Extras | Fixed | RHSA-2011:0860, RHSA-2011:0938 |
| Red Hat Enterprise Linux Workstation Supplementary (v. 6) | Fixed | RHSA-2011:0860, RHSA-2011:0938 |
| Red Hat Satellite 5.4 (RHEL v.5) | Fixed | RHSA-2013:1455 |
| Red Hat Satellite 5.4 (RHEL v.6) | Fixed | RHSA-2013:1455 |
Not affected: 3 products
- Red Hat Enterprise Linux 4
- Red Hat Enterprise Linux 5
- Red Hat Enterprise Linux 6
Timeline
- 2026-10-02 Threatist record created from CVE-2011-0869
- 2026-10-03 Alias added: GHSA-x765-chv2-8q2p
References
Advisory 15
Other 6
- http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-015/index.html
- http://support.avaya.com/css/P8/documents/100144512
- oval:org.mitre.oval:def:14644
- http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html
- oval:org.mitre.oval:def:14338
- http://www.ibm.com/developerworks/java/jdk/alerts/
More Sun Jdk vulnerabilities
- TI-2013-01300 The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update… CVSS 2.0HIGH 10.0
- TI-2008-05098 The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and… CVSS 2.0HIGH 10.0
- TI-2010-04185 Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE)… CVSS 2.0HIGH 10.0
- TI-2010-03392 Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for… CVSS 2.0HIGH 10.0
- TI-2010-03381 Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java… CVSS 2.0HIGH 10.0
- TI-2012-01342 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java… CVSS 2.0HIGH 10.0
Sources
- CVE-2011-0869 · CVE Program
- CVE-2011-0869 · NVD
- FIRST EPSS
- GHSA-x765-chv2-8q2p · GitHub Advisory Database · CC BY 4.0
- CVE-2011-0869 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences