rpm package
suse/java-1_7_1-ibm&distro=SUSE Linux Enterprise Server 12 SP5
pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5
Vulnerabilities (87)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-2781 | — | < 1.7.1_sr4.65-38.53.1 | 1.7.1_sr4.65-38.53.1 | Apr 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access | ||
| CVE-2020-2757 | — | < 1.7.1_sr4.65-38.53.1 | 1.7.1_sr4.65-38.53.1 | Apr 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with net | ||
| CVE-2020-2756 | — | < 1.7.1_sr4.65-38.53.1 | 1.7.1_sr4.65-38.53.1 | Apr 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with net | ||
| CVE-2020-2659 | — | < 1.7.1_sr4.60-38.47.1 | 1.7.1_sr4.60-38.47.1 | Jan 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via | ||
| CVE-2020-2654 | — | < 1.7.1_sr4.65-38.53.1 | 1.7.1_sr4.65-38.53.1 | Jan 15, 2020 | Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compr | ||
| CVE-2020-2604 | — | < 1.7.1_sr4.60-38.47.1 | 1.7.1_sr4.60-38.47.1 | Jan 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with | ||
| CVE-2020-2593 | — | < 1.7.1_sr4.60-38.47.1 | 1.7.1_sr4.60-38.47.1 | Jan 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with ne | ||
| CVE-2020-2583 | — | < 1.7.1_sr4.60-38.47.1 | 1.7.1_sr4.60-38.47.1 | Jan 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with | ||
| CVE-2019-2999 | — | < 1.7.1_sr4.55-38.44.1 | 1.7.1_sr4.55-38.44.1 | Oct 16, 2019 | Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise | ||
| CVE-2019-2992 | — | < 1.7.1_sr4.55-38.44.1 | 1.7.1_sr4.55-38.44.1 | Oct 16, 2019 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access | ||
| CVE-2019-2989 | — | < 1.7.1_sr4.55-38.44.1 | 1.7.1_sr4.55-38.44.1 | Oct 16, 2019 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with networ | ||
| CVE-2019-2983 | — | < 1.7.1_sr4.55-38.44.1 | 1.7.1_sr4.55-38.44.1 | Oct 16, 2019 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with net | ||
| CVE-2019-2981 | — | < 1.7.1_sr4.55-38.44.1 | 1.7.1_sr4.55-38.44.1 | Oct 16, 2019 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network acce | ||
| CVE-2019-2978 | — | < 1.7.1_sr4.55-38.44.1 | 1.7.1_sr4.55-38.44.1 | Oct 16, 2019 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with networ | ||
| CVE-2019-2973 | — | < 1.7.1_sr4.55-38.44.1 | 1.7.1_sr4.55-38.44.1 | Oct 16, 2019 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network acce | ||
| CVE-2019-2964 | — | < 1.7.1_sr4.55-38.44.1 | 1.7.1_sr4.55-38.44.1 | Oct 16, 2019 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with netwo | ||
| CVE-2019-2962 | — | < 1.7.1_sr4.55-38.44.1 | 1.7.1_sr4.55-38.44.1 | Oct 16, 2019 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access | ||
| CVE-2019-2945 | — | < 1.7.1_sr4.55-38.44.1 | 1.7.1_sr4.55-38.44.1 | Oct 16, 2019 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with networ | ||
| CVE-2019-2933 | — | < 1.7.1_sr4.55-38.44.1 | 1.7.1_sr4.55-38.44.1 | Oct 16, 2019 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network | ||
| CVE-2019-4473 | — | < 1.7.1_sr4.50-38.41.1 | 1.7.1_sr4.50-38.41.1 | Aug 5, 2019 | Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984. |
- CVE-2020-2781Apr 15, 2020affected < 1.7.1_sr4.65-38.53.1fixed 1.7.1_sr4.65-38.53.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access
- CVE-2020-2757Apr 15, 2020affected < 1.7.1_sr4.65-38.53.1fixed 1.7.1_sr4.65-38.53.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with net
- CVE-2020-2756Apr 15, 2020affected < 1.7.1_sr4.65-38.53.1fixed 1.7.1_sr4.65-38.53.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with net
- CVE-2020-2659Jan 15, 2020affected < 1.7.1_sr4.60-38.47.1fixed 1.7.1_sr4.60-38.47.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via
- CVE-2020-2654Jan 15, 2020affected < 1.7.1_sr4.65-38.53.1fixed 1.7.1_sr4.65-38.53.1
Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compr
- CVE-2020-2604Jan 15, 2020affected < 1.7.1_sr4.60-38.47.1fixed 1.7.1_sr4.60-38.47.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with
- CVE-2020-2593Jan 15, 2020affected < 1.7.1_sr4.60-38.47.1fixed 1.7.1_sr4.60-38.47.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with ne
- CVE-2020-2583Jan 15, 2020affected < 1.7.1_sr4.60-38.47.1fixed 1.7.1_sr4.60-38.47.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with
- CVE-2019-2999Oct 16, 2019affected < 1.7.1_sr4.55-38.44.1fixed 1.7.1_sr4.55-38.44.1
Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise
- CVE-2019-2992Oct 16, 2019affected < 1.7.1_sr4.55-38.44.1fixed 1.7.1_sr4.55-38.44.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access
- CVE-2019-2989Oct 16, 2019affected < 1.7.1_sr4.55-38.44.1fixed 1.7.1_sr4.55-38.44.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with networ
- CVE-2019-2983Oct 16, 2019affected < 1.7.1_sr4.55-38.44.1fixed 1.7.1_sr4.55-38.44.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with net
- CVE-2019-2981Oct 16, 2019affected < 1.7.1_sr4.55-38.44.1fixed 1.7.1_sr4.55-38.44.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network acce
- CVE-2019-2978Oct 16, 2019affected < 1.7.1_sr4.55-38.44.1fixed 1.7.1_sr4.55-38.44.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with networ
- CVE-2019-2973Oct 16, 2019affected < 1.7.1_sr4.55-38.44.1fixed 1.7.1_sr4.55-38.44.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network acce
- CVE-2019-2964Oct 16, 2019affected < 1.7.1_sr4.55-38.44.1fixed 1.7.1_sr4.55-38.44.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with netwo
- CVE-2019-2962Oct 16, 2019affected < 1.7.1_sr4.55-38.44.1fixed 1.7.1_sr4.55-38.44.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access
- CVE-2019-2945Oct 16, 2019affected < 1.7.1_sr4.55-38.44.1fixed 1.7.1_sr4.55-38.44.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with networ
- CVE-2019-2933Oct 16, 2019affected < 1.7.1_sr4.55-38.44.1fixed 1.7.1_sr4.55-38.44.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network
- CVE-2019-4473Aug 5, 2019affected < 1.7.1_sr4.50-38.41.1fixed 1.7.1_sr4.50-38.41.1
Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984.
Page 4 of 5