rpm package

suse/java-1_7_1-ibm&distro=SUSE Linux Enterprise Server 11 SP4-LTSS

pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-LTSS

Vulnerabilities (80)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2021-35565	Med	5.3	< 1.7.1_sr5.0-26.68.1	1.7.1_sr5.0-26.68.1	Oct 20, 2021	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unau
CVE-2021-35564	Med	5.3	< 1.7.1_sr5.0-26.68.1	1.7.1_sr5.0-26.68.1	Oct 20, 2021	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allo
CVE-2021-35559	Med	5.3	< 1.7.1_sr5.0-26.68.1	1.7.1_sr5.0-26.68.1	Oct 20, 2021	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows
CVE-2021-35556	Med	5.3	< 1.7.1_sr5.0-26.68.1	1.7.1_sr5.0-26.68.1	Oct 20, 2021	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows
CVE-2021-2432	Low	3.7	< 1.7.1_sr5.0-26.68.1	1.7.1_sr5.0-26.68.1	Jul 21, 2021	Vulnerability in the Java SE product of Oracle Java SE (component: JNDI). The supported version that is affected is Java SE: 7u301. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful atta
CVE-2021-2369	Med	4.3	< 1.7.1_sr5.0-26.68.1	1.7.1_sr5.0-26.68.1	Jul 21, 2021	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Library). Supported versions that are affected are Java SE: 7u301, 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Easily exploitable vulnerability
CVE-2021-2341	Low	3.1	< 1.7.1_sr5.0-26.68.1	1.7.1_sr5.0-26.68.1	Jul 21, 2021	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u301, 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Difficult to exploit vulnerabi
CVE-2021-2163	Med	5.3	< 1.7.1_sr5.0-26.68.1	1.7.1_sr5.0-26.68.1	Apr 22, 2021	Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.
CVE-2020-27221	Cri	9.8	< 1.7.1_sr4.80-26.65.1	1.7.1_sr4.80-26.65.1	Jan 21, 2021	In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding.
CVE-2020-14803	Med	5.3	< 1.7.1_sr4.75-26.62.1	1.7.1_sr4.75-26.62.1	Oct 21, 2020	Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 11.0.8 and 15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Succe
CVE-2020-14798	Low	3.1	< 1.7.1_sr4.75-26.62.1	1.7.1_sr4.75-26.62.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14797	Low	3.7	< 1.7.1_sr4.75-26.62.1	1.7.1_sr4.75-26.62.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14796	Low	3.1	< 1.7.1_sr4.75-26.62.1	1.7.1_sr4.75-26.62.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14792	Med	4.2	< 1.7.1_sr4.75-26.62.1	1.7.1_sr4.75-26.62.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network a
CVE-2020-14782	Low	3.7	< 1.7.1_sr4.75-26.62.1	1.7.1_sr4.75-26.62.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14781	Low	3.7	< 1.7.1_sr4.75-26.62.1	1.7.1_sr4.75-26.62.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network acce
CVE-2020-14779	Low	3.7	< 1.7.1_sr4.75-26.62.1	1.7.1_sr4.75-26.62.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with net
CVE-2019-17639	Med	5.3	< 1.7.1_sr4.70-26.58.1	1.7.1_sr4.70-26.58.1	Jul 15, 2020	In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefine
CVE-2020-14621	Med	5.3	< 1.7.1_sr4.70-26.58.1	1.7.1_sr4.70-26.58.1	Jul 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network ac
CVE-2020-14593	Hig	7.4	< 1.7.1_sr4.70-26.58.1	1.7.1_sr4.70-26.58.1	Jul 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network acce

CVE-2021-35565MedOct 20, 2021
affected < 1.7.1_sr5.0-26.68.1fixed 1.7.1_sr5.0-26.68.1
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unau
CVE-2021-35564MedOct 20, 2021
affected < 1.7.1_sr5.0-26.68.1fixed 1.7.1_sr5.0-26.68.1
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allo
CVE-2021-35559MedOct 20, 2021
affected < 1.7.1_sr5.0-26.68.1fixed 1.7.1_sr5.0-26.68.1
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows
CVE-2021-35556MedOct 20, 2021
affected < 1.7.1_sr5.0-26.68.1fixed 1.7.1_sr5.0-26.68.1
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows
CVE-2021-2432LowJul 21, 2021
affected < 1.7.1_sr5.0-26.68.1fixed 1.7.1_sr5.0-26.68.1
Vulnerability in the Java SE product of Oracle Java SE (component: JNDI). The supported version that is affected is Java SE: 7u301. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful atta
CVE-2021-2369MedJul 21, 2021
affected < 1.7.1_sr5.0-26.68.1fixed 1.7.1_sr5.0-26.68.1
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Library). Supported versions that are affected are Java SE: 7u301, 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Easily exploitable vulnerability
CVE-2021-2341LowJul 21, 2021
affected < 1.7.1_sr5.0-26.68.1fixed 1.7.1_sr5.0-26.68.1
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u301, 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Difficult to exploit vulnerabi
CVE-2021-2163MedApr 22, 2021
affected < 1.7.1_sr5.0-26.68.1fixed 1.7.1_sr5.0-26.68.1
Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.
CVE-2020-27221CriJan 21, 2021
affected < 1.7.1_sr4.80-26.65.1fixed 1.7.1_sr4.80-26.65.1
In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding.
CVE-2020-14803MedOct 21, 2020
affected < 1.7.1_sr4.75-26.62.1fixed 1.7.1_sr4.75-26.62.1
Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 11.0.8 and 15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Succe
CVE-2020-14798LowOct 21, 2020
affected < 1.7.1_sr4.75-26.62.1fixed 1.7.1_sr4.75-26.62.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14797LowOct 21, 2020
affected < 1.7.1_sr4.75-26.62.1fixed 1.7.1_sr4.75-26.62.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14796LowOct 21, 2020
affected < 1.7.1_sr4.75-26.62.1fixed 1.7.1_sr4.75-26.62.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14792MedOct 21, 2020
affected < 1.7.1_sr4.75-26.62.1fixed 1.7.1_sr4.75-26.62.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network a
CVE-2020-14782LowOct 21, 2020
affected < 1.7.1_sr4.75-26.62.1fixed 1.7.1_sr4.75-26.62.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14781LowOct 21, 2020
affected < 1.7.1_sr4.75-26.62.1fixed 1.7.1_sr4.75-26.62.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network acce
CVE-2020-14779LowOct 21, 2020
affected < 1.7.1_sr4.75-26.62.1fixed 1.7.1_sr4.75-26.62.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with net
CVE-2019-17639MedJul 15, 2020
affected < 1.7.1_sr4.70-26.58.1fixed 1.7.1_sr4.70-26.58.1
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefine
CVE-2020-14621MedJul 15, 2020
affected < 1.7.1_sr4.70-26.58.1fixed 1.7.1_sr4.70-26.58.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network ac
CVE-2020-14593HigJul 15, 2020
affected < 1.7.1_sr4.70-26.58.1fixed 1.7.1_sr4.70-26.58.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network acce

Page 2 of 4