rpm package

suse/java-1_7_1-ibm&distro=SUSE Linux Enterprise Server 12 SP1-LTSS

pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSS

Vulnerabilities (105)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2020-2659	Low	3.7	< 1.7.1_sr4.60-38.47.1	1.7.1_sr4.60-38.47.1	Jan 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via
CVE-2020-2604	Hig	8.1	< 1.7.1_sr4.60-38.47.1	1.7.1_sr4.60-38.47.1	Jan 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with
CVE-2020-2593	Med	4.8	< 1.7.1_sr4.60-38.47.1	1.7.1_sr4.60-38.47.1	Jan 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with ne
CVE-2020-2583	Low	3.7	< 1.7.1_sr4.60-38.47.1	1.7.1_sr4.60-38.47.1	Jan 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with
CVE-2019-2999	Med	4.7	< 1.7.1_sr4.55-38.44.1	1.7.1_sr4.55-38.44.1	Oct 16, 2019	Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise
CVE-2019-2992	Low	3.7	< 1.7.1_sr4.55-38.44.1	1.7.1_sr4.55-38.44.1	Oct 16, 2019	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access
CVE-2019-2989	Med	6.8	< 1.7.1_sr4.55-38.44.1	1.7.1_sr4.55-38.44.1	Oct 16, 2019	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with networ
CVE-2019-2983	Low	3.7	< 1.7.1_sr4.55-38.44.1	1.7.1_sr4.55-38.44.1	Oct 16, 2019	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with net
CVE-2019-2981	Low	3.7	< 1.7.1_sr4.55-38.44.1	1.7.1_sr4.55-38.44.1	Oct 16, 2019	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network acce
CVE-2019-2978	Low	3.7	< 1.7.1_sr4.55-38.44.1	1.7.1_sr4.55-38.44.1	Oct 16, 2019	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with networ
CVE-2019-2973	Low	3.7	< 1.7.1_sr4.55-38.44.1	1.7.1_sr4.55-38.44.1	Oct 16, 2019	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network acce
CVE-2019-2964	Low	3.7	< 1.7.1_sr4.55-38.44.1	1.7.1_sr4.55-38.44.1	Oct 16, 2019	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with netwo
CVE-2019-2962	Low	3.7	< 1.7.1_sr4.55-38.44.1	1.7.1_sr4.55-38.44.1	Oct 16, 2019	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access
CVE-2019-2945	Low	3.1	< 1.7.1_sr4.55-38.44.1	1.7.1_sr4.55-38.44.1	Oct 16, 2019	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with networ
CVE-2019-2933	Low	3.1	< 1.7.1_sr4.55-38.44.1	1.7.1_sr4.55-38.44.1	Oct 16, 2019	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2019-4473	Hig	7.8	< 1.7.1_sr4.50-38.41.1	1.7.1_sr4.50-38.41.1	Aug 5, 2019	Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984.
CVE-2019-11775	Hig	7.4	< 1.7.1_sr4.50-38.41.1	1.7.1_sr4.50-38.41.1	Jul 30, 2019	All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of th
CVE-2019-2816	Med	4.8	< 1.7.1_sr4.50-38.41.1	1.7.1_sr4.50-38.41.1	Jul 23, 2019	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker wi
CVE-2019-2769	Med	5.3	< 1.7.1_sr4.50-38.41.1	1.7.1_sr4.50-38.41.1	Jul 23, 2019	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with
CVE-2019-2766	Low	3.1	< 1.7.1_sr4.50-38.41.1	1.7.1_sr4.50-38.41.1	Jul 23, 2019	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker wi

CVE-2020-2659LowJan 15, 2020
affected < 1.7.1_sr4.60-38.47.1fixed 1.7.1_sr4.60-38.47.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via
CVE-2020-2604HigJan 15, 2020
affected < 1.7.1_sr4.60-38.47.1fixed 1.7.1_sr4.60-38.47.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with
CVE-2020-2593MedJan 15, 2020
affected < 1.7.1_sr4.60-38.47.1fixed 1.7.1_sr4.60-38.47.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with ne
CVE-2020-2583LowJan 15, 2020
affected < 1.7.1_sr4.60-38.47.1fixed 1.7.1_sr4.60-38.47.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with
CVE-2019-2999MedOct 16, 2019
affected < 1.7.1_sr4.55-38.44.1fixed 1.7.1_sr4.55-38.44.1
Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise
CVE-2019-2992LowOct 16, 2019
affected < 1.7.1_sr4.55-38.44.1fixed 1.7.1_sr4.55-38.44.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access
CVE-2019-2989MedOct 16, 2019
affected < 1.7.1_sr4.55-38.44.1fixed 1.7.1_sr4.55-38.44.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with networ
CVE-2019-2983LowOct 16, 2019
affected < 1.7.1_sr4.55-38.44.1fixed 1.7.1_sr4.55-38.44.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with net
CVE-2019-2981LowOct 16, 2019
affected < 1.7.1_sr4.55-38.44.1fixed 1.7.1_sr4.55-38.44.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network acce
CVE-2019-2978LowOct 16, 2019
affected < 1.7.1_sr4.55-38.44.1fixed 1.7.1_sr4.55-38.44.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with networ
CVE-2019-2973LowOct 16, 2019
affected < 1.7.1_sr4.55-38.44.1fixed 1.7.1_sr4.55-38.44.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network acce
CVE-2019-2964LowOct 16, 2019
affected < 1.7.1_sr4.55-38.44.1fixed 1.7.1_sr4.55-38.44.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with netwo
CVE-2019-2962LowOct 16, 2019
affected < 1.7.1_sr4.55-38.44.1fixed 1.7.1_sr4.55-38.44.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access
CVE-2019-2945LowOct 16, 2019
affected < 1.7.1_sr4.55-38.44.1fixed 1.7.1_sr4.55-38.44.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with networ
CVE-2019-2933LowOct 16, 2019
affected < 1.7.1_sr4.55-38.44.1fixed 1.7.1_sr4.55-38.44.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2019-4473HigAug 5, 2019
affected < 1.7.1_sr4.50-38.41.1fixed 1.7.1_sr4.50-38.41.1
Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984.
CVE-2019-11775HigJul 30, 2019
affected < 1.7.1_sr4.50-38.41.1fixed 1.7.1_sr4.50-38.41.1
All builds of Eclipse OpenJ9 prior to 0.15 contain a bug where the loop versioner may fail to privatize a value that is pulled out of the loop by versioning - for example if there is a condition that is moved out of the loop that reads a field we may not privatize the value of th
CVE-2019-2816MedJul 23, 2019
affected < 1.7.1_sr4.50-38.41.1fixed 1.7.1_sr4.50-38.41.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker wi
CVE-2019-2769MedJul 23, 2019
affected < 1.7.1_sr4.50-38.41.1fixed 1.7.1_sr4.50-38.41.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with
CVE-2019-2766LowJul 23, 2019
affected < 1.7.1_sr4.50-38.41.1fixed 1.7.1_sr4.50-38.41.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker wi

Page 1 of 6