rpm package

suse/java-1_7_1-ibm&distro=SUSE Linux Enterprise Server for SAP Applications 12

pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012

Vulnerabilities (115)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2015-1931	Med	5.5	< 1.7.1_sr3.10-14.1	1.7.1_sr3.10-14.1	Sep 29, 2022	IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive
CVE-2017-10243	Med	6.5	< 1.7.1_sr4.10-38.5.1	1.7.1_sr4.10-38.5.1	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticate
CVE-2017-10125	Hig	7.1	< 1.7.1_sr4.10-38.5.1	1.7.1_sr4.10-38.5.1	Aug 8, 2017	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows physical access to compromise Java SE. While the vulnerability is in Java SE, attacks
CVE-2017-10116	Hig	8.3	< 1.7.1_sr4.10-38.5.1	1.7.1_sr4.10-38.5.1	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenti
CVE-2017-10115	Hig	7.5	< 1.7.1_sr4.10-38.5.1	1.7.1_sr4.10-38.5.1	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated a
CVE-2017-10111	Cri	9.6	< 1.7.1_sr4.10-38.5.1	1.7.1_sr4.10-38.5.1	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multip
CVE-2017-10110	Cri	9.6	< 1.7.1_sr4.10-38.5.1	1.7.1_sr4.10-38.5.1	Aug 8, 2017	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java S
CVE-2017-10109	Med	5.3	< 1.7.1_sr4.10-38.5.1	1.7.1_sr4.10-38.5.1	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthe
CVE-2017-10108	Med	5.3	< 1.7.1_sr4.10-38.5.1	1.7.1_sr4.10-38.5.1	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthe
CVE-2017-10107	Cri	9.6	< 1.7.1_sr4.10-38.5.1	1.7.1_sr4.10-38.5.1	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access
CVE-2017-10105	Med	4.3	< 1.7.1_sr4.10-38.5.1	1.7.1_sr4.10-38.5.1	Aug 8, 2017	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise
CVE-2017-10102	Cri	9.0	< 1.7.1_sr4.10-38.5.1	1.7.1_sr4.10-38.5.1	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network acces
CVE-2017-10101	Cri	9.6	< 1.7.1_sr4.10-38.5.1	1.7.1_sr4.10-38.5.1	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access
CVE-2017-10096	Cri	9.6	< 1.7.1_sr4.10-38.5.1	1.7.1_sr4.10-38.5.1	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access
CVE-2017-10090	Cri	9.6	< 1.7.1_sr4.10-38.5.1	1.7.1_sr4.10-38.5.1	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access v
CVE-2017-10089	Cri	9.6	< 1.7.1_sr4.10-38.5.1	1.7.1_sr4.10-38.5.1	Aug 8, 2017	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Ja
CVE-2017-10087	Cri	9.6	< 1.7.1_sr4.10-38.5.1	1.7.1_sr4.10-38.5.1	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network a
CVE-2017-10081	Med	4.3	< 1.7.1_sr4.10-38.5.1	1.7.1_sr4.10-38.5.1	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network acc
CVE-2017-10074	Hig	8.3	< 1.7.1_sr4.10-38.5.1	1.7.1_sr4.10-38.5.1	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network a
CVE-2017-10067	Hig	7.5	< 1.7.1_sr4.10-38.5.1	1.7.1_sr4.10-38.5.1	Aug 8, 2017	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise

CVE-2015-1931MedSep 29, 2022
affected < 1.7.1_sr3.10-14.1fixed 1.7.1_sr3.10-14.1
IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive
CVE-2017-10243MedAug 8, 2017
affected < 1.7.1_sr4.10-38.5.1fixed 1.7.1_sr4.10-38.5.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticate
CVE-2017-10125HigAug 8, 2017
affected < 1.7.1_sr4.10-38.5.1fixed 1.7.1_sr4.10-38.5.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows physical access to compromise Java SE. While the vulnerability is in Java SE, attacks
CVE-2017-10116HigAug 8, 2017
affected < 1.7.1_sr4.10-38.5.1fixed 1.7.1_sr4.10-38.5.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenti
CVE-2017-10115HigAug 8, 2017
affected < 1.7.1_sr4.10-38.5.1fixed 1.7.1_sr4.10-38.5.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated a
CVE-2017-10111CriAug 8, 2017
affected < 1.7.1_sr4.10-38.5.1fixed 1.7.1_sr4.10-38.5.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multip
CVE-2017-10110CriAug 8, 2017
affected < 1.7.1_sr4.10-38.5.1fixed 1.7.1_sr4.10-38.5.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java S
CVE-2017-10109MedAug 8, 2017
affected < 1.7.1_sr4.10-38.5.1fixed 1.7.1_sr4.10-38.5.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthe
CVE-2017-10108MedAug 8, 2017
affected < 1.7.1_sr4.10-38.5.1fixed 1.7.1_sr4.10-38.5.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthe
CVE-2017-10107CriAug 8, 2017
affected < 1.7.1_sr4.10-38.5.1fixed 1.7.1_sr4.10-38.5.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access
CVE-2017-10105MedAug 8, 2017
affected < 1.7.1_sr4.10-38.5.1fixed 1.7.1_sr4.10-38.5.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise
CVE-2017-10102CriAug 8, 2017
affected < 1.7.1_sr4.10-38.5.1fixed 1.7.1_sr4.10-38.5.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network acces
CVE-2017-10101CriAug 8, 2017
affected < 1.7.1_sr4.10-38.5.1fixed 1.7.1_sr4.10-38.5.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access
CVE-2017-10096CriAug 8, 2017
affected < 1.7.1_sr4.10-38.5.1fixed 1.7.1_sr4.10-38.5.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access
CVE-2017-10090CriAug 8, 2017
affected < 1.7.1_sr4.10-38.5.1fixed 1.7.1_sr4.10-38.5.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access v
CVE-2017-10089CriAug 8, 2017
affected < 1.7.1_sr4.10-38.5.1fixed 1.7.1_sr4.10-38.5.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Ja
CVE-2017-10087CriAug 8, 2017
affected < 1.7.1_sr4.10-38.5.1fixed 1.7.1_sr4.10-38.5.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network a
CVE-2017-10081MedAug 8, 2017
affected < 1.7.1_sr4.10-38.5.1fixed 1.7.1_sr4.10-38.5.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network acc
CVE-2017-10074HigAug 8, 2017
affected < 1.7.1_sr4.10-38.5.1fixed 1.7.1_sr4.10-38.5.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network a
CVE-2017-10067HigAug 8, 2017
affected < 1.7.1_sr4.10-38.5.1fixed 1.7.1_sr4.10-38.5.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise

Page 1 of 6