Read the docs
TI-2013-03496 Aliases CVE-2013-4002GHSA-7j4h-8wpf-rqfh

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime…

Priority MEDIUM 52CWE-112Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
None · None · Complete
Fix status
Partial Red Hat: 40 fixed, 13 without a fix

Attack profile from CVSS 2.0 · NVD. Fix status from CNA, GitHub and Red Hat.

Summary

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, Java SE Embedded 7u40 and earlier, and possibly other products allows remote attackers to cause a denial of service via vectors related to XML attribute names.

Why it matters now

EPSS 0.24738 97th percentileScored 2026-11-07
Fix Partial xerces:xercesImpl (Maven): 2.12.0Red Hat: 20 advisoriesRed Hat: 40 fixed, 13 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
—xerces:xercesImpl (Maven)before 2.12.02.12.0Patch availableGHSA-7j4h-8wpf-rqfh
  • — Vendor— Affected all versions Fixed in — No fix listed CNA
  • xerces:xercesImpl (Maven) Vendor— Affected before 2.12.0 Fixed in 2.12.0 Patch available GHSA-7j4h-8wpf-rqfh

CPE configurations NVD · 95

CPEVersionsRoleVendor
cpe:2.3:a:ibm:java:5.0.0.0:*:*:*:*:*:*:*5.0.0.0VulnerableIBM
cpe:2.3:a:ibm:java:5.0.11.0:*:*:*:*:*:*:*5.0.11.0VulnerableIBM
cpe:2.3:a:ibm:java:5.0.11.1:*:*:*:*:*:*:*5.0.11.1VulnerableIBM
cpe:2.3:a:ibm:java:5.0.11.2:*:*:*:*:*:*:*5.0.11.2VulnerableIBM
cpe:2.3:a:ibm:java:5.0.12.0:*:*:*:*:*:*:*5.0.12.0VulnerableIBM
cpe:2.3:a:ibm:java:5.0.12.1:*:*:*:*:*:*:*5.0.12.1VulnerableIBM
cpe:2.3:a:ibm:java:5.0.12.2:*:*:*:*:*:*:*5.0.12.2VulnerableIBM
cpe:2.3:a:ibm:java:5.0.12.3:*:*:*:*:*:*:*5.0.12.3VulnerableIBM
cpe:2.3:a:ibm:java:5.0.12.4:*:*:*:*:*:*:*5.0.12.4VulnerableIBM
cpe:2.3:a:ibm:java:5.0.12.5:*:*:*:*:*:*:*5.0.12.5VulnerableIBM
  • cpe:2.3:a:ibm:java:5.0.0.0:*:*:*:*:*:*:* Versions 5.0.0.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:5.0.11.0:*:*:*:*:*:*:* Versions 5.0.11.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:5.0.11.1:*:*:*:*:*:*:* Versions 5.0.11.1 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:5.0.11.2:*:*:*:*:*:*:* Versions 5.0.11.2 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:5.0.12.0:*:*:*:*:*:*:* Versions 5.0.12.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:5.0.12.1:*:*:*:*:*:*:* Versions 5.0.12.1 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:5.0.12.2:*:*:*:*:*:*:* Versions 5.0.12.2 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:5.0.12.3:*:*:*:*:*:*:* Versions 5.0.12.3 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:5.0.12.4:*:*:*:*:*:*:* Versions 5.0.12.4 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:5.0.12.5:*:*:*:*:*:*:* Versions 5.0.12.5 Vulnerable ·IBM
Show 85 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:ibm:java:5.0.13.0:*:*:*:*:*:*:*5.0.13.0VulnerableIBM
cpe:2.3:a:ibm:java:5.0.14.0:*:*:*:*:*:*:*5.0.14.0VulnerableIBM
cpe:2.3:a:ibm:java:5.0.15.0:*:*:*:*:*:*:*5.0.15.0VulnerableIBM
cpe:2.3:a:ibm:java:5.0.16.0:*:*:*:*:*:*:*5.0.16.0VulnerableIBM
cpe:2.3:a:ibm:java:5.0.16.1:*:*:*:*:*:*:*5.0.16.1VulnerableIBM
cpe:2.3:a:ibm:java:5.0.16.2:*:*:*:*:*:*:*5.0.16.2VulnerableIBM
cpe:2.3:a:ibm:java:6.0.0.0:*:*:*:*:*:*:*6.0.0.0VulnerableIBM
cpe:2.3:a:ibm:java:6.0.1.0:*:*:*:*:*:*:*6.0.1.0VulnerableIBM
cpe:2.3:a:ibm:java:6.0.2.0:*:*:*:*:*:*:*6.0.2.0VulnerableIBM
cpe:2.3:a:ibm:java:6.0.3.0:*:*:*:*:*:*:*6.0.3.0VulnerableIBM
cpe:2.3:a:ibm:java:6.0.4.0:*:*:*:*:*:*:*6.0.4.0VulnerableIBM
cpe:2.3:a:ibm:java:6.0.5.0:*:*:*:*:*:*:*6.0.5.0VulnerableIBM
cpe:2.3:a:ibm:java:6.0.6.0:*:*:*:*:*:*:*6.0.6.0VulnerableIBM
cpe:2.3:a:ibm:java:6.0.7.0:*:*:*:*:*:*:*6.0.7.0VulnerableIBM
cpe:2.3:a:ibm:java:6.0.8.0:*:*:*:*:*:*:*6.0.8.0VulnerableIBM
cpe:2.3:a:ibm:java:6.0.8.1:*:*:*:*:*:*:*6.0.8.1VulnerableIBM
cpe:2.3:a:ibm:java:6.0.9.0:*:*:*:*:*:*:*6.0.9.0VulnerableIBM
cpe:2.3:a:ibm:java:6.0.9.1:*:*:*:*:*:*:*6.0.9.1VulnerableIBM
cpe:2.3:a:ibm:java:6.0.9.2:*:*:*:*:*:*:*6.0.9.2VulnerableIBM
cpe:2.3:a:ibm:java:6.0.10.0:*:*:*:*:*:*:*6.0.10.0VulnerableIBM
cpe:2.3:a:ibm:java:6.0.10.1:*:*:*:*:*:*:*6.0.10.1VulnerableIBM
cpe:2.3:a:ibm:java:6.0.11.0:*:*:*:*:*:*:*6.0.11.0VulnerableIBM
cpe:2.3:a:ibm:java:6.0.12.0:*:*:*:*:*:*:*6.0.12.0VulnerableIBM
cpe:2.3:a:ibm:java:6.0.13.0:*:*:*:*:*:*:*6.0.13.0VulnerableIBM
cpe:2.3:a:ibm:java:6.0.13.1:*:*:*:*:*:*:*6.0.13.1VulnerableIBM
cpe:2.3:a:ibm:java:6.0.13.2:*:*:*:*:*:*:*6.0.13.2VulnerableIBM
cpe:2.3:a:ibm:java:7.0.0.0:*:*:*:*:*:*:*7.0.0.0VulnerableIBM
cpe:2.3:a:ibm:java:7.0.1.0:*:*:*:*:*:*:*7.0.1.0VulnerableIBM
cpe:2.3:a:ibm:java:7.0.2.0:*:*:*:*:*:*:*7.0.2.0VulnerableIBM
cpe:2.3:a:ibm:java:7.0.3.0:*:*:*:*:*:*:*7.0.3.0VulnerableIBM
cpe:2.3:a:ibm:java:7.0.4.0:*:*:*:*:*:*:*7.0.4.0VulnerableIBM
cpe:2.3:a:ibm:java:7.0.4.1:*:*:*:*:*:*:*7.0.4.1VulnerableIBM
cpe:2.3:a:ibm:java:7.0.4.2:*:*:*:*:*:*:*7.0.4.2VulnerableIBM
cpe:2.3:a:oracle:jdk:1.5.0:update51:*:*:*:*:*:*1.5.0 update51VulnerableOracle
cpe:2.3:a:oracle:jdk:1.6.0:update60:*:*:*:*:*:*1.6.0 update60VulnerableOracle
cpe:2.3:a:oracle:jdk:1.7.0:update40:*:*:*:*:*:*1.7.0 update40VulnerableOracle
cpe:2.3:a:oracle:jre:1.5.0:update51:*:*:*:*:*:*1.5.0 update51VulnerableOracle
cpe:2.3:a:oracle:jre:1.6.0:update60:*:*:*:*:*:*1.6.0 update60VulnerableOracle
cpe:2.3:a:oracle:jre:1.7.0:update40:*:*:*:*:*:*1.7.0 update40VulnerableOracle
cpe:2.3:a:oracle:jrockit:*:*:*:*:*:*:*:*r27.7.0 – r27.7.6; r28.0.0 – r28.2.8VulnerableOracle
cpe:2.3:a:ibm:sterling_b2b_integrator:5.2.4:*:*:*:*:*:*:*5.2.4VulnerableIBM
cpe:2.3:a:ibm:host_on-demand:11.0:*:*:*:*:*:*:*11.0VulnerableIBM
cpe:2.3:a:ibm:host_on-demand:11.0.1:*:*:*:*:*:*:*11.0.1VulnerableIBM
cpe:2.3:a:ibm:host_on-demand:11.0.2:*:*:*:*:*:*:*11.0.2VulnerableIBM
cpe:2.3:a:ibm:host_on-demand:11.0.3:*:*:*:*:*:*:*11.0.3VulnerableIBM
cpe:2.3:a:ibm:host_on-demand:11.0.4:*:*:*:*:*:*:*11.0.4VulnerableIBM
cpe:2.3:a:ibm:host_on-demand:11.0.5:*:*:*:*:*:*:*11.0.5VulnerableIBM
cpe:2.3:a:ibm:host_on-demand:11.0.5.1:*:*:*:*:*:*:*11.0.5.1VulnerableIBM
cpe:2.3:a:ibm:host_on-demand:11.0.6:*:*:*:*:*:*:*11.0.6VulnerableIBM
cpe:2.3:a:ibm:host_on-demand:11.0.6.1:*:*:*:*:*:*:*11.0.6.1VulnerableIBM
cpe:2.3:a:ibm:host_on-demand:11.0.7:*:*:*:*:*:*:*11.0.7VulnerableIBM
cpe:2.3:a:ibm:host_on-demand:11.0.8:*:*:*:*:*:*:*11.0.8VulnerableIBM
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*not specified by NVDRunning onMicrosoft
cpe:2.3:a:ibm:tivoli_application_dependency_discovery_manager:7.2.2:*:*:*:*:*:*:*7.2.2VulnerableIBM
cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*not specified by NVDRunning onIBM
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*not specified by NVDRunning onLinux
cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:-:*not specified by NVDRunning onOracle
cpe:2.3:a:ibm:sterling_b2b_integrator:5.1:*:*:*:*:*:*:*5.1VulnerableIBM
cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*5.2VulnerableIBM
cpe:2.3:a:ibm:sterling_file_gateway:2.1:*:*:*:*:*:*:*2.1VulnerableIBM
cpe:2.3:a:ibm:sterling_file_gateway:2.2:*:*:*:*:*:*:*2.2VulnerableIBM
cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*not specified by NVDRunning onHewlett Packard Enterprise
cpe:2.3:o:ibm:i:-:*:*:*:*:*:*:*not specified by NVDRunning onIBM
cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*12.2VulnerableopenSUSE
cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*12.3VulnerableopenSUSE
cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:-:*:*:*10 sp4VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*11 sp3VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_java:10:sp4:*:*:*:*:*:*10 sp4VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_java:11:sp2:*:*:*:*:*:*11 sp2VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_java:11:sp3:*:*:*:*:*:*11 sp3VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_sdk:11:sp2:*:*:*:*:*:*11 sp2VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_sdk:11:sp3:*:*:*:*:*:*11 sp3VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*9VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:ltss:*:*:*10 sp3VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:-:*:*:*10 sp4VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:-:*:*11 sp2VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:vmware:*:*11 sp2VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:*11 sp3VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:vmware:*:*11 sp3VulnerableSUSE
cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*10.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*12.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*12.10VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*13.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*13.10VulnerableCanonical
cpe:2.3:a:apache:xerces2_java:*:*:*:*:*:*:*:*2.4.0 to before 2.12.0VulnerableApache
  • cpe:2.3:a:ibm:java:5.0.13.0:*:*:*:*:*:*:* Versions 5.0.13.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:5.0.14.0:*:*:*:*:*:*:* Versions 5.0.14.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:5.0.15.0:*:*:*:*:*:*:* Versions 5.0.15.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:5.0.16.0:*:*:*:*:*:*:* Versions 5.0.16.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:5.0.16.1:*:*:*:*:*:*:* Versions 5.0.16.1 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:5.0.16.2:*:*:*:*:*:*:* Versions 5.0.16.2 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:6.0.0.0:*:*:*:*:*:*:* Versions 6.0.0.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:6.0.1.0:*:*:*:*:*:*:* Versions 6.0.1.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:6.0.2.0:*:*:*:*:*:*:* Versions 6.0.2.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:6.0.3.0:*:*:*:*:*:*:* Versions 6.0.3.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:6.0.4.0:*:*:*:*:*:*:* Versions 6.0.4.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:6.0.5.0:*:*:*:*:*:*:* Versions 6.0.5.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:6.0.6.0:*:*:*:*:*:*:* Versions 6.0.6.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:6.0.7.0:*:*:*:*:*:*:* Versions 6.0.7.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:6.0.8.0:*:*:*:*:*:*:* Versions 6.0.8.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:6.0.8.1:*:*:*:*:*:*:* Versions 6.0.8.1 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:6.0.9.0:*:*:*:*:*:*:* Versions 6.0.9.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:6.0.9.1:*:*:*:*:*:*:* Versions 6.0.9.1 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:6.0.9.2:*:*:*:*:*:*:* Versions 6.0.9.2 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:6.0.10.0:*:*:*:*:*:*:* Versions 6.0.10.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:6.0.10.1:*:*:*:*:*:*:* Versions 6.0.10.1 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:6.0.11.0:*:*:*:*:*:*:* Versions 6.0.11.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:6.0.12.0:*:*:*:*:*:*:* Versions 6.0.12.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:6.0.13.0:*:*:*:*:*:*:* Versions 6.0.13.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:6.0.13.1:*:*:*:*:*:*:* Versions 6.0.13.1 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:6.0.13.2:*:*:*:*:*:*:* Versions 6.0.13.2 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:7.0.0.0:*:*:*:*:*:*:* Versions 7.0.0.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:7.0.1.0:*:*:*:*:*:*:* Versions 7.0.1.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:7.0.2.0:*:*:*:*:*:*:* Versions 7.0.2.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:7.0.3.0:*:*:*:*:*:*:* Versions 7.0.3.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:7.0.4.0:*:*:*:*:*:*:* Versions 7.0.4.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:7.0.4.1:*:*:*:*:*:*:* Versions 7.0.4.1 Vulnerable ·IBM
  • cpe:2.3:a:ibm:java:7.0.4.2:*:*:*:*:*:*:* Versions 7.0.4.2 Vulnerable ·IBM
  • cpe:2.3:a:oracle:jdk:1.5.0:update51:*:*:*:*:*:* Versions 1.5.0 update51 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jdk:1.6.0:update60:*:*:*:*:*:* Versions 1.6.0 update60 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jdk:1.7.0:update40:*:*:*:*:*:* Versions 1.7.0 update40 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jre:1.5.0:update51:*:*:*:*:*:* Versions 1.5.0 update51 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jre:1.6.0:update60:*:*:*:*:*:* Versions 1.6.0 update60 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jre:1.7.0:update40:*:*:*:*:*:* Versions 1.7.0 update40 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jrockit:*:*:*:*:*:*:*:* Versions r27.7.0 – r27.7.6; r28.0.0 – r28.2.8 Vulnerable ·Oracle
  • cpe:2.3:a:ibm:sterling_b2b_integrator:5.2.4:*:*:*:*:*:*:* Versions 5.2.4 Vulnerable ·IBM
  • cpe:2.3:a:ibm:host_on-demand:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:host_on-demand:11.0.1:*:*:*:*:*:*:* Versions 11.0.1 Vulnerable ·IBM
  • cpe:2.3:a:ibm:host_on-demand:11.0.2:*:*:*:*:*:*:* Versions 11.0.2 Vulnerable ·IBM
  • cpe:2.3:a:ibm:host_on-demand:11.0.3:*:*:*:*:*:*:* Versions 11.0.3 Vulnerable ·IBM
  • cpe:2.3:a:ibm:host_on-demand:11.0.4:*:*:*:*:*:*:* Versions 11.0.4 Vulnerable ·IBM
  • cpe:2.3:a:ibm:host_on-demand:11.0.5:*:*:*:*:*:*:* Versions 11.0.5 Vulnerable ·IBM
  • cpe:2.3:a:ibm:host_on-demand:11.0.5.1:*:*:*:*:*:*:* Versions 11.0.5.1 Vulnerable ·IBM
  • cpe:2.3:a:ibm:host_on-demand:11.0.6:*:*:*:*:*:*:* Versions 11.0.6 Vulnerable ·IBM
  • cpe:2.3:a:ibm:host_on-demand:11.0.6.1:*:*:*:*:*:*:* Versions 11.0.6.1 Vulnerable ·IBM
  • cpe:2.3:a:ibm:host_on-demand:11.0.7:*:*:*:*:*:*:* Versions 11.0.7 Vulnerable ·IBM
  • cpe:2.3:a:ibm:host_on-demand:11.0.8:*:*:*:*:*:*:* Versions 11.0.8 Vulnerable ·IBM
  • cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
  • cpe:2.3:a:ibm:tivoli_application_dependency_discovery_manager:7.2.2:*:*:*:*:*:*:* Versions 7.2.2 Vulnerable ·IBM
  • cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IBM
  • cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Linux
  • cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:-:* Versions not specified by NVD Running on ·Oracle
  • cpe:2.3:a:ibm:sterling_b2b_integrator:5.1:*:*:*:*:*:*:* Versions 5.1 Vulnerable ·IBM
  • cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:* Versions 5.2 Vulnerable ·IBM
  • cpe:2.3:a:ibm:sterling_file_gateway:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·IBM
  • cpe:2.3:a:ibm:sterling_file_gateway:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·IBM
  • cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
  • cpe:2.3:o:ibm:i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·IBM
  • cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:* Versions 12.2 Vulnerable ·openSUSE
  • cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:* Versions 12.3 Vulnerable ·openSUSE
  • cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:-:*:*:* Versions 10 sp4 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:* Versions 11 sp3 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_java:10:sp4:*:*:*:*:*:* Versions 10 sp4 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_java:11:sp2:*:*:*:*:*:* Versions 11 sp2 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_java:11:sp3:*:*:*:*:*:* Versions 11 sp3 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_sdk:11:sp2:*:*:*:*:*:* Versions 11 sp2 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_sdk:11:sp3:*:*:*:*:*:* Versions 11 sp3 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:* Versions 9 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:ltss:*:*:* Versions 10 sp3 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:-:*:*:* Versions 10 sp4 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:-:*:* Versions 11 sp2 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:vmware:*:* Versions 11 sp2 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:* Versions 11 sp3 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:vmware:*:* Versions 11 sp3 Vulnerable ·SUSE
  • cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:* Versions 10.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:* Versions 12.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:* Versions 12.10 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:* Versions 13.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:* Versions 13.10 Vulnerable ·Canonical
  • cpe:2.3:a:apache:xerces2_java:*:*:*:*:*:*:*:* Versions 2.4.0 to before 2.12.0 Vulnerable ·Apache

Remediation

  • Fix · GHSA-7j4h-8wpf-rqfh xerces:xercesImpl (Maven) Fixed in 2.12.0 Advisory →

Red Hat 20 advisories

  • RHSA-2015:0773 Released 2015-04-01 · Red Hat rating Important
    Red Hat JBoss Data Grid 6.4.1 update
    • Red Hat JBoss Data Grid 6.4
  • RHSA-2015:0765 Released 2015-03-31 · Red Hat rating Important
    Red Hat JBoss Data Virtualization 6.0.0 security update
    • Red Hat JBoss Data Virtualization 6.0
  • RHSA-2015:0720 Released 2015-03-24 · Red Hat rating Important
    Red Hat JBoss Fuse Service Works 6.0.0 security update
    • Red Hat JBoss Fuse Service Works 6.0
Show 17 more Red Hat advisories
  • RHSA-2015:0675 Released 2015-03-11 · Red Hat rating Important
    Red Hat JBoss Data Virtualization 6.1.0 update
    • Red Hat JBoss Data Virtualization 6.1
  • RHSA-2015:0269 Released 2015-02-25 · Red Hat rating Moderate
    Red Hat JBoss Operations Network 3.3.1 update
    • Red Hat JBoss Operations Network 3.3
  • RHSA-2015:0234 Released 2015-02-17 · Red Hat rating Important
    Red Hat JBoss BPM Suite 6.0.3 security update
    • Red Hat JBoss BPMS 6.0
  • RHSA-2015:0235 Released 2015-02-17 · Red Hat rating Important
    Red Hat JBoss BRMS 6.0.3 security update
    • Red Hat JBoss BRMS 6.0
  • RHSA-2014:1822 Released 2014-11-06 · Red Hat rating Moderate
    Red Hat JBoss Enterprise Application Platform 6.3.2 update
    • Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 Server apache-cxf-2.7.12-1.SP1_redhat_1.1.ep6.el7, apache-cxf-xjc-utils-2.6.2-3.redhat_1.1.ep6.el7, cxf-xjc-boolean-2.6.2-3.redhat_1.1.ep6.el7 +47
  • RHSA-2014:1818 Released 2014-11-06 · Red Hat rating Moderate
    Red Hat JBoss Enterprise Application Platform 6.3.2 update
    • Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 Server apache-cxf-2.7.12-1.SP1_redhat_1.1.ep6.el6, apache-cxf-xjc-utils-2.6.2-3.redhat_1.1.ep6.el6, cxf-xjc-boolean-2.6.2-3.redhat_1.1.ep6.el6 +47
  • RHSA-2014:1821 Released 2014-11-06 · Red Hat rating Moderate
    Red Hat JBoss Enterprise Application Platform 6.3.2 update
    • Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 Server apache-cxf-2.7.12-1.SP1_redhat_1.1.ep6.el5, apache-cxf-xjc-utils-2.6.2-3.redhat_1.1.ep6.el5, cxf-xjc-boolean-2.6.2-3.redhat_1.1.ep6.el5 +47
  • RHSA-2014:1823 Released 2014-11-06 · Red Hat rating Moderate
    Red Hat JBoss Enterprise Application Platform 6.3.2 update
    • Red Hat JBoss Enterprise Application Platform 6.3
  • RHSA-2014:1319 Released 2014-09-29 · Red Hat rating Moderate
    xerces-j2 security update
    • Red Hat Enterprise Linux Client (v. 7) xerces-j2-2.11.0-17.el7_0
    • Red Hat Enterprise Linux Client Optional (v. 7) xerces-j2-demo-2.11.0-17.el7_0, xerces-j2-javadoc-2.11.0-17.el7_0
    • Red Hat Enterprise Linux ComputeNode (v. 7) xerces-j2-2.11.0-17.el7_0
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) xerces-j2-demo-2.11.0-17.el7_0, xerces-j2-javadoc-2.11.0-17.el7_0
    • Red Hat Enterprise Linux Desktop Optional (v. 6) xerces-j2-2.7.1-12.7.el6_5, xerces-j2-demo-2.7.1-12.7.el6_5, xerces-j2-javadoc-apis-2.7.1-12.7.el6_5 +4
    • Red Hat Enterprise Linux HPC Node (v. 6) xerces-j2-2.7.1-12.7.el6_5
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) xerces-j2-2.7.1-12.7.el6_5, xerces-j2-demo-2.7.1-12.7.el6_5, xerces-j2-javadoc-apis-2.7.1-12.7.el6_5 +4
    • Red Hat Enterprise Linux Server (v. 6) xerces-j2-2.7.1-12.7.el6_5
    • Red Hat Enterprise Linux Server (v. 7) xerces-j2-2.11.0-17.el7_0
    • Red Hat Enterprise Linux Server Optional (v. 6) xerces-j2-2.7.1-12.7.el6_5, xerces-j2-demo-2.7.1-12.7.el6_5, xerces-j2-javadoc-apis-2.7.1-12.7.el6_5 +4
    • Red Hat Enterprise Linux Server Optional (v. 7) xerces-j2-demo-2.11.0-17.el7_0, xerces-j2-javadoc-2.11.0-17.el7_0
    • Red Hat Enterprise Linux Workstation (v. 6) xerces-j2-2.7.1-12.7.el6_5
    • Red Hat Enterprise Linux Workstation (v. 7) xerces-j2-2.11.0-17.el7_0
    • Red Hat Enterprise Linux Workstation Optional (v. 6) xerces-j2-2.7.1-12.7.el6_5, xerces-j2-demo-2.7.1-12.7.el6_5, xerces-j2-javadoc-apis-2.7.1-12.7.el6_5 +4
    • Red Hat Enterprise Linux Workstation Optional (v. 7) xerces-j2-demo-2.11.0-17.el7_0, xerces-j2-javadoc-2.11.0-17.el7_0
  • RHSA-2014:0414 Released 2014-04-17 · Red Hat rating Important
    java-1.6.0-sun security update
    • Oracle Java for Red Hat Enterprise Linux Desktop 5 java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10, java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10.i586, java-1.6.0-sun-demo-1:1.6.0.75-1jpp.3.el5_10 +9
    • Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5, java-1.6.0-sun-demo-1:1.6.0.75-1jpp.1.el6_5, java-1.6.0-sun-devel-1:1.6.0.75-1jpp.1.el6_5 +3
    • Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5, java-1.6.0-sun-demo-1:1.6.0.75-1jpp.1.el6_5, java-1.6.0-sun-devel-1:1.6.0.75-1jpp.1.el6_5 +1
    • Oracle Java for Red Hat Enterprise Linux Server 5 java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10, java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10.i586, java-1.6.0-sun-demo-1:1.6.0.75-1jpp.3.el5_10 +9
    • Oracle Java for Red Hat Enterprise Linux Server 6 java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5, java-1.6.0-sun-demo-1:1.6.0.75-1jpp.1.el6_5, java-1.6.0-sun-devel-1:1.6.0.75-1jpp.1.el6_5 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation 6 java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5, java-1.6.0-sun-demo-1:1.6.0.75-1jpp.1.el6_5, java-1.6.0-sun-devel-1:1.6.0.75-1jpp.1.el6_5 +3
  • RHSA-2013:1505 Released 2013-11-05 · Red Hat rating Important
    java-1.6.0-openjdk security update
    • Red Hat Enterprise Linux (v. 5 server) java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10, java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10.i386, java-1.6.0-openjdk-demo-1:1.6.0.0-1.42.1.11.14.el5_10 +7
    • Red Hat Enterprise Linux Desktop (v. 5 client) java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10, java-1.6.0-openjdk-1:1.6.0.0-1.42.1.11.14.el5_10.i386, java-1.6.0-openjdk-demo-1:1.6.0.0-1.42.1.11.14.el5_10 +7
    • Red Hat Enterprise Linux Desktop (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4
    • Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4, java-1.6.0-openjdk-demo-1:1.6.0.0-1.65.1.11.14.el6_4, java-1.6.0-openjdk-devel-1:1.6.0.0-1.65.1.11.14.el6_4 +2
    • Red Hat Enterprise Linux HPC Node (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4, java-1.6.0-openjdk-demo-1:1.6.0.0-1.65.1.11.14.el6_4, java-1.6.0-openjdk-devel-1:1.6.0.0-1.65.1.11.14.el6_4 +2
    • Red Hat Enterprise Linux Server (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4, java-1.6.0-openjdk-devel-1:1.6.0.0-1.65.1.11.14.el6_4, java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.65.1.11.14.el6_4
    • Red Hat Enterprise Linux Server Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4, java-1.6.0-openjdk-demo-1:1.6.0.0-1.65.1.11.14.el6_4, java-1.6.0-openjdk-src-1:1.6.0.0-1.65.1.11.14.el6_4
    • Red Hat Enterprise Linux Workstation (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4, java-1.6.0-openjdk-devel-1:1.6.0.0-1.65.1.11.14.el6_4, java-1.6.0-openjdk-javadoc-1:1.6.0.0-1.65.1.11.14.el6_4
    • Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.6.0-openjdk-1:1.6.0.0-1.65.1.11.14.el6_4, java-1.6.0-openjdk-demo-1:1.6.0.0-1.65.1.11.14.el6_4, java-1.6.0-openjdk-src-1:1.6.0.0-1.65.1.11.14.el6_4
  • RHSA-2013:1451 Released 2013-10-22 · Red Hat rating Critical
    java-1.7.0-openjdk security update
    • Red Hat Enterprise Linux Desktop (v. 6) java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4
    • Red Hat Enterprise Linux Desktop Optional (v. 6) java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4, java-1.7.0-openjdk-demo-1:1.7.0.45-2.4.3.2.el6_4, java-1.7.0-openjdk-devel-1:1.7.0.45-2.4.3.2.el6_4 +2
    • Red Hat Enterprise Linux HPC Node (v. 6) java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4, java-1.7.0-openjdk-demo-1:1.7.0.45-2.4.3.2.el6_4, java-1.7.0-openjdk-devel-1:1.7.0.45-2.4.3.2.el6_4 +2
    • Red Hat Enterprise Linux Server (v. 6) java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4, java-1.7.0-openjdk-devel-1:1.7.0.45-2.4.3.2.el6_4
    • Red Hat Enterprise Linux Server Optional (v. 6) java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4, java-1.7.0-openjdk-demo-1:1.7.0.45-2.4.3.2.el6_4, java-1.7.0-openjdk-javadoc-1:1.7.0.45-2.4.3.2.el6_4 +1
    • Red Hat Enterprise Linux Workstation (v. 6) java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4, java-1.7.0-openjdk-devel-1:1.7.0.45-2.4.3.2.el6_4
    • Red Hat Enterprise Linux Workstation Optional (v. 6) java-1.7.0-openjdk-1:1.7.0.45-2.4.3.2.el6_4, java-1.7.0-openjdk-demo-1:1.7.0.45-2.4.3.2.el6_4, java-1.7.0-openjdk-javadoc-1:1.7.0.45-2.4.3.2.el6_4 +1
  • RHSA-2013:1447 Released 2013-10-21 · Red Hat rating Important
    java-1.7.0-openjdk security update
    • Red Hat Enterprise Linux (v. 5 server) java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10, java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10.i386, java-1.7.0-openjdk-demo-1:1.7.0.45-2.4.3.1.el5_10 +7
    • Red Hat Enterprise Linux Desktop (v. 5 client) java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10, java-1.7.0-openjdk-1:1.7.0.45-2.4.3.1.el5_10.i386, java-1.7.0-openjdk-demo-1:1.7.0.45-2.4.3.1.el5_10 +7
  • RHSA-2013:1440 Released 2013-10-17 · Red Hat rating Critical
    java-1.7.0-oracle security update
    • Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4, java-1.7.0-oracle-devel-1:1.7.0.45-1jpp.2.el6_4, java-1.7.0-oracle-javafx-1:1.7.0.45-1jpp.2.el6_4 +3
    • Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4, java-1.7.0-oracle-devel-1:1.7.0.45-1jpp.2.el6_4, java-1.7.0-oracle-javafx-1:1.7.0.45-1jpp.2.el6_4 +1
    • Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.7.0-oracle-1:1.7.0.45-1jpp.1.el5_10, java-1.7.0-oracle-1:1.7.0.45-1jpp.1.el5_10.i386, java-1.7.0-oracle-devel-1:1.7.0.45-1jpp.1.el5_10 +9
    • Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4, java-1.7.0-oracle-devel-1:1.7.0.45-1jpp.2.el6_4, java-1.7.0-oracle-javafx-1:1.7.0.45-1jpp.2.el6_4 +3
    • Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4, java-1.7.0-oracle-devel-1:1.7.0.45-1jpp.2.el6_4, java-1.7.0-oracle-javafx-1:1.7.0.45-1jpp.2.el6_4 +3
  • RHSA-2013:1081 Released 2013-07-16 · Red Hat rating Important
    java-1.5.0-ibm security update
    • Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4, java-1.5.0-ibm-demo-1:1.5.0.16.3-1jpp.1.el6_4, java-1.5.0-ibm-devel-1:1.5.0.16.3-1jpp.1.el6_4 +4
    • Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4, java-1.5.0-ibm-demo-1:1.5.0.16.3-1jpp.1.el6_4, java-1.5.0-ibm-devel-1:1.5.0.16.3-1jpp.1.el6_4 +2
    • Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el5_9, java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el5_9.i386, java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el5_9.ppc +20
    • Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4, java-1.5.0-ibm-demo-1:1.5.0.16.3-1jpp.1.el6_4, java-1.5.0-ibm-devel-1:1.5.0.16.3-1jpp.1.el6_4 +7
    • Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.16.3-1jpp.1.el6_4, java-1.5.0-ibm-demo-1:1.5.0.16.3-1jpp.1.el6_4, java-1.5.0-ibm-devel-1:1.5.0.16.3-1jpp.1.el6_4 +4
  • RHSA-2013:1060 Released 2013-07-15 · Red Hat rating Critical
    java-1.7.0-ibm security update
    • Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4, java-1.7.0-ibm-demo-1:1.7.0.5.0-1jpp.2.el6_4, java-1.7.0-ibm-devel-1:1.7.0.5.0-1jpp.2.el6_4 +3
    • Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4, java-1.7.0-ibm-demo-1:1.7.0.5.0-1jpp.2.el6_4, java-1.7.0-ibm-devel-1:1.7.0.5.0-1jpp.2.el6_4 +1
    • Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el5_9, java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el5_9.i386, java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el5_9.ppc +15
    • Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4, java-1.7.0-ibm-demo-1:1.7.0.5.0-1jpp.2.el6_4, java-1.7.0-ibm-devel-1:1.7.0.5.0-1jpp.2.el6_4 +3
    • Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.7.0-ibm-1:1.7.0.5.0-1jpp.2.el6_4, java-1.7.0-ibm-demo-1:1.7.0.5.0-1jpp.2.el6_4, java-1.7.0-ibm-devel-1:1.7.0.5.0-1jpp.2.el6_4 +3
  • RHSA-2013:1059 Released 2013-07-15 · Red Hat rating Critical
    java-1.6.0-ibm security update
    • Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4, java-1.6.0-ibm-demo-1:1.6.0.14.0-1jpp.1.el6_4, java-1.6.0-ibm-devel-1:1.6.0.14.0-1jpp.1.el6_4 +4
    • Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4, java-1.6.0-ibm-demo-1:1.6.0.14.0-1jpp.1.el6_4, java-1.6.0-ibm-devel-1:1.6.0.14.0-1jpp.1.el6_4 +2
    • Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9, java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9.i386, java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el5_9.ppc +21
    • Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4, java-1.6.0-ibm-demo-1:1.6.0.14.0-1jpp.1.el6_4, java-1.6.0-ibm-devel-1:1.6.0.14.0-1jpp.1.el6_4 +5
    • Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.14.0-1jpp.1.el6_4, java-1.6.0-ibm-demo-1:1.6.0.14.0-1jpp.1.el6_4, java-1.6.0-ibm-devel-1:1.6.0.14.0-1jpp.1.el6_4 +4

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 5AffectedNo fix planned: Will not fix
Red Hat Enterprise Virtualization 3AffectedNo fix yet
Red Hat JBoss BRMS 5AffectedNo fix planned: Will not fix
Red Hat JBoss Enterprise Application Platform 4AffectedNo fix planned: Will not fix
Red Hat JBoss Enterprise Application Platform 5AffectedNo fix planned: Will not fix
Red Hat JBoss Enterprise Web Server 1AffectedNo fix planned: Will not fix
Red Hat JBoss Operations Network 3AffectedNo fix yet
Red Hat JBoss Portal 5AffectedNo fix planned: Will not fix
Red Hat JBoss Portal 6AffectedNo fix yet
Red Hat JBoss SOA Platform 4AffectedNo fix planned: Will not fix
Red Hat JBoss SOA Platform 5AffectedNo fix planned: Will not fix
Red Hat Satellite 5AffectedNo fix planned: Will not fix
Red Hat Software CollectionsAffectedNo fix yet
Oracle Java for Red Hat Enterprise Linux Desktop 5Fixed RHSA-2014:0414
Oracle Java for Red Hat Enterprise Linux Desktop 6Fixed RHSA-2014:0414
Oracle Java for Red Hat Enterprise Linux HPC Node 6Fixed RHSA-2014:0414
Oracle Java for Red Hat Enterprise Linux Server 5Fixed RHSA-2014:0414
Oracle Java for Red Hat Enterprise Linux Server 6Fixed RHSA-2014:0414
Oracle Java for Red Hat Enterprise Linux Workstation 6Fixed RHSA-2014:0414
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2013:1447, RHSA-2013:1505
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2014:1319
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2014:1319
Red Hat Enterprise Linux ComputeNode (v. 7)Fixed RHSA-2014:1319
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2014:1319
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2013:1447, RHSA-2013:1505
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2013:1451, RHSA-2013:1505
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2013:1451, RHSA-2013:1505, RHSA-2014:1319
Red Hat Enterprise Linux Desktop Supplementary (v. 6)Fixed RHSA-2013:1059, RHSA-2013:1060, RHSA-2013:1081, RHSA-2013:1440
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2013:1451, RHSA-2013:1505, RHSA-2014:1319
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2013:1451, RHSA-2013:1505, RHSA-2014:1319
Red Hat Enterprise Linux HPC Node Supplementary (v. 6)Fixed RHSA-2013:1059, RHSA-2013:1060, RHSA-2013:1081, RHSA-2013:1440
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2013:1451, RHSA-2013:1505, RHSA-2014:1319
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2014:1319
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2013:1451, RHSA-2013:1505, RHSA-2014:1319
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2014:1319
Red Hat Enterprise Linux Server Supplementary (v. 5)Fixed RHSA-2013:1059, RHSA-2013:1060, RHSA-2013:1081, RHSA-2013:1440
Red Hat Enterprise Linux Server Supplementary (v. 6)Fixed RHSA-2013:1059, RHSA-2013:1060, RHSA-2013:1081, RHSA-2013:1440
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2013:1451, RHSA-2013:1505, RHSA-2014:1319
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2014:1319
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2013:1451, RHSA-2013:1505, RHSA-2014:1319
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2014:1319
Red Hat Enterprise Linux Workstation Supplementary (v. 6)Fixed RHSA-2013:1059, RHSA-2013:1060, RHSA-2013:1081, RHSA-2013:1440
Red Hat JBoss BPMS 6.0Fixed RHSA-2015:0234
Red Hat JBoss BRMS 6.0Fixed RHSA-2015:0235
Red Hat JBoss Data Grid 6.4Fixed RHSA-2015:0773
Red Hat JBoss Data Virtualization 6.0Fixed RHSA-2015:0765
Red Hat JBoss Data Virtualization 6.1Fixed RHSA-2015:0675
Red Hat JBoss Enterprise Application Platform 6.3Fixed RHSA-2014:1823
Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 5 ServerFixed RHSA-2014:1821
Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 6 ServerFixed RHSA-2014:1818
Red Hat JBoss Enterprise Application Platform 6.3 for RHEL 7 ServerFixed RHSA-2014:1822
Red Hat JBoss Fuse Service Works 6.0Fixed RHSA-2015:0720
Red Hat JBoss Operations Network 3.3Fixed RHSA-2015:0269
Not affected: 3 products
  • OpenShift Enterprise 1
  • Red Hat JBoss Enterprise Application Platform 7
  • Red Hat OpenShift Enterprise 2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-4002
  2. 2026-10-03 Alias added: GHSA-7j4h-8wpf-rqfh

References

Patch 1

Advisory 41

Other 10

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences