rpm package
suse/java-1_7_0-ibm&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP3
pkg:rpm/suse/java-1_7_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP3
Vulnerabilities (50)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2015-1931 | — | < 1.7.0_sr9.10-9.1 | 1.7.0_sr9.10-9.1 | Jan 23, 2020 | IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive | ||
| CVE-2015-5006 | — | < 1.7.0_sr9.20-42.1 | 1.7.0_sr9.20-42.1 | Dec 7, 2015 | IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16 FP15 allow physically proximate attackers to obtain sensitive information by reading the Kerberos Credential Cache. | ||
| CVE-2015-4911 | — | < 1.7.0_sr9.20-42.1 | 1.7.0_sr9.20-42.1 | Oct 22, 2015 | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4893. | ||
| CVE-2015-4903 | — | < 1.7.0_sr9.20-42.1 | 1.7.0_sr9.20-42.1 | Oct 22, 2015 | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to RMI. | ||
| CVE-2015-4902 | Med | 5.3 | KEV | < 1.7.0_sr9.20-42.1 | 1.7.0_sr9.20-42.1 | Oct 22, 2015 | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment. |
| CVE-2015-4893 | — | < 1.7.0_sr9.20-42.1 | 1.7.0_sr9.20-42.1 | Oct 21, 2015 | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911. | ||
| CVE-2015-4883 | — | < 1.7.0_sr9.20-42.1 | 1.7.0_sr9.20-42.1 | Oct 21, 2015 | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4860. | ||
| CVE-2015-4882 | — | < 1.7.0_sr9.20-42.1 | 1.7.0_sr9.20-42.1 | Oct 21, 2015 | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect availability via vectors related to CORBA. | ||
| CVE-2015-4872 | — | < 1.7.0_sr9.20-42.1 | 1.7.0_sr9.20-42.1 | Oct 21, 2015 | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect integrity via unknown vectors related to Security. | ||
| CVE-2015-4871 | — | < 1.7.0_sr9.20-42.1 | 1.7.0_sr9.20-42.1 | Oct 21, 2015 | Unspecified vulnerability in Oracle Java SE 7u85 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries. | ||
| CVE-2015-4860 | — | < 1.7.0_sr9.20-42.1 | 1.7.0_sr9.20-42.1 | Oct 21, 2015 | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883. | ||
| CVE-2015-4844 | — | < 1.7.0_sr9.20-42.1 | 1.7.0_sr9.20-42.1 | Oct 21, 2015 | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. | ||
| CVE-2015-4843 | — | < 1.7.0_sr9.20-42.1 | 1.7.0_sr9.20-42.1 | Oct 21, 2015 | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. | ||
| CVE-2015-4842 | — | < 1.7.0_sr9.20-42.1 | 1.7.0_sr9.20-42.1 | Oct 21, 2015 | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JAXP. | ||
| CVE-2015-4840 | — | < 1.7.0_sr9.20-42.1 | 1.7.0_sr9.20-42.1 | Oct 21, 2015 | Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via unknown vectors related to 2D. | ||
| CVE-2015-4835 | — | < 1.7.0_sr9.20-42.1 | 1.7.0_sr9.20-42.1 | Oct 21, 2015 | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4881. | ||
| CVE-2015-4810 | — | < 1.7.0_sr9.20-42.1 | 1.7.0_sr9.20-42.1 | Oct 21, 2015 | Unspecified vulnerability in Oracle Java SE 7u85 and 8u60 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment. | ||
| CVE-2015-4806 | — | < 1.7.0_sr9.20-42.1 | 1.7.0_sr9.20-42.1 | Oct 21, 2015 | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries. | ||
| CVE-2015-4805 | — | < 1.7.0_sr9.20-42.1 | 1.7.0_sr9.20-42.1 | Oct 21, 2015 | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serialization. | ||
| CVE-2015-4803 | — | < 1.7.0_sr9.20-42.1 | 1.7.0_sr9.20-42.1 | Oct 21, 2015 | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4893 and CVE-2015-4911. |
- CVE-2015-1931Jan 23, 2020affected < 1.7.0_sr9.10-9.1fixed 1.7.0_sr9.10-9.1
IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive
- CVE-2015-5006Dec 7, 2015affected < 1.7.0_sr9.20-42.1fixed 1.7.0_sr9.20-42.1
IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16 FP15 allow physically proximate attackers to obtain sensitive information by reading the Kerberos Credential Cache.
- CVE-2015-4911Oct 22, 2015affected < 1.7.0_sr9.20-42.1fixed 1.7.0_sr9.20-42.1
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4893.
- CVE-2015-4903Oct 22, 2015affected < 1.7.0_sr9.20-42.1fixed 1.7.0_sr9.20-42.1
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to RMI.
- affected < 1.7.0_sr9.20-42.1fixed 1.7.0_sr9.20-42.1
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.
- CVE-2015-4893Oct 21, 2015affected < 1.7.0_sr9.20-42.1fixed 1.7.0_sr9.20-42.1
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911.
- CVE-2015-4883Oct 21, 2015affected < 1.7.0_sr9.20-42.1fixed 1.7.0_sr9.20-42.1
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4860.
- CVE-2015-4882Oct 21, 2015affected < 1.7.0_sr9.20-42.1fixed 1.7.0_sr9.20-42.1
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect availability via vectors related to CORBA.
- CVE-2015-4872Oct 21, 2015affected < 1.7.0_sr9.20-42.1fixed 1.7.0_sr9.20-42.1
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect integrity via unknown vectors related to Security.
- CVE-2015-4871Oct 21, 2015affected < 1.7.0_sr9.20-42.1fixed 1.7.0_sr9.20-42.1
Unspecified vulnerability in Oracle Java SE 7u85 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.
- CVE-2015-4860Oct 21, 2015affected < 1.7.0_sr9.20-42.1fixed 1.7.0_sr9.20-42.1
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883.
- CVE-2015-4844Oct 21, 2015affected < 1.7.0_sr9.20-42.1fixed 1.7.0_sr9.20-42.1
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
- CVE-2015-4843Oct 21, 2015affected < 1.7.0_sr9.20-42.1fixed 1.7.0_sr9.20-42.1
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
- CVE-2015-4842Oct 21, 2015affected < 1.7.0_sr9.20-42.1fixed 1.7.0_sr9.20-42.1
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JAXP.
- CVE-2015-4840Oct 21, 2015affected < 1.7.0_sr9.20-42.1fixed 1.7.0_sr9.20-42.1
Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via unknown vectors related to 2D.
- CVE-2015-4835Oct 21, 2015affected < 1.7.0_sr9.20-42.1fixed 1.7.0_sr9.20-42.1
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4881.
- CVE-2015-4810Oct 21, 2015affected < 1.7.0_sr9.20-42.1fixed 1.7.0_sr9.20-42.1
Unspecified vulnerability in Oracle Java SE 7u85 and 8u60 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
- CVE-2015-4806Oct 21, 2015affected < 1.7.0_sr9.20-42.1fixed 1.7.0_sr9.20-42.1
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.
- CVE-2015-4805Oct 21, 2015affected < 1.7.0_sr9.20-42.1fixed 1.7.0_sr9.20-42.1
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serialization.
- CVE-2015-4803Oct 21, 2015affected < 1.7.0_sr9.20-42.1fixed 1.7.0_sr9.20-42.1
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4893 and CVE-2015-4911.
Page 1 of 3