rpm package

suse/java-1_7_1-ibm&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2

pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2

Vulnerabilities (145)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2020-27221	Cri	9.8	< 1.7.1_sr4.80-38.62.1	1.7.1_sr4.80-38.62.1	Jan 21, 2021	In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding.
CVE-2020-14803	Med	5.3	< 1.7.1_sr4.75-38.59.1	1.7.1_sr4.75-38.59.1	Oct 21, 2020	Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 11.0.8 and 15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Succe
CVE-2020-14798	Low	3.1	< 1.7.1_sr4.75-38.59.1	1.7.1_sr4.75-38.59.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14797	Low	3.7	< 1.7.1_sr4.75-38.59.1	1.7.1_sr4.75-38.59.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14796	Low	3.1	< 1.7.1_sr4.75-38.59.1	1.7.1_sr4.75-38.59.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14792	Med	4.2	< 1.7.1_sr4.75-38.59.1	1.7.1_sr4.75-38.59.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network a
CVE-2020-14782	Low	3.7	< 1.7.1_sr4.75-38.59.1	1.7.1_sr4.75-38.59.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14781	Low	3.7	< 1.7.1_sr4.75-38.59.1	1.7.1_sr4.75-38.59.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network acce
CVE-2020-14779	Low	3.7	< 1.7.1_sr4.75-38.59.1	1.7.1_sr4.75-38.59.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with net
CVE-2019-17639	Med	5.3	< 1.7.1_sr4.70-38.56.1	1.7.1_sr4.70-38.56.1	Jul 15, 2020	In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefine
CVE-2020-14621	Med	5.3	< 1.7.1_sr4.70-38.56.1	1.7.1_sr4.70-38.56.1	Jul 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network ac
CVE-2020-14593	Hig	7.4	< 1.7.1_sr4.70-38.56.1	1.7.1_sr4.70-38.56.1	Jul 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network acce
CVE-2020-14583	Hig	8.3	< 1.7.1_sr4.70-38.56.1	1.7.1_sr4.70-38.56.1	Jul 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with net
CVE-2020-14579	Low	3.7	< 1.7.1_sr4.70-38.56.1	1.7.1_sr4.70-38.56.1	Jul 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via
CVE-2020-14578	Low	3.7	< 1.7.1_sr4.70-38.56.1	1.7.1_sr4.70-38.56.1	Jul 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via
CVE-2020-14577	Low	3.7	< 1.7.1_sr4.70-38.56.1	1.7.1_sr4.70-38.56.1	Jul 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-2830	Med	5.3	< 1.7.1_sr4.65-38.53.1	1.7.1_sr4.65-38.53.1	Apr 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network
CVE-2020-2805	Hig	8.3	< 1.7.1_sr4.65-38.53.1	1.7.1_sr4.65-38.53.1	Apr 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-2803	Hig	8.3	< 1.7.1_sr4.65-38.53.1	1.7.1_sr4.65-38.53.1	Apr 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-2800	Med	4.8	< 1.7.1_sr4.65-38.53.1	1.7.1_sr4.65-38.53.1	Apr 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacke

CVE-2020-27221CriJan 21, 2021
affected < 1.7.1_sr4.80-38.62.1fixed 1.7.1_sr4.80-38.62.1
In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding.
CVE-2020-14803MedOct 21, 2020
affected < 1.7.1_sr4.75-38.59.1fixed 1.7.1_sr4.75-38.59.1
Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 11.0.8 and 15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Succe
CVE-2020-14798LowOct 21, 2020
affected < 1.7.1_sr4.75-38.59.1fixed 1.7.1_sr4.75-38.59.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14797LowOct 21, 2020
affected < 1.7.1_sr4.75-38.59.1fixed 1.7.1_sr4.75-38.59.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14796LowOct 21, 2020
affected < 1.7.1_sr4.75-38.59.1fixed 1.7.1_sr4.75-38.59.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14792MedOct 21, 2020
affected < 1.7.1_sr4.75-38.59.1fixed 1.7.1_sr4.75-38.59.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network a
CVE-2020-14782LowOct 21, 2020
affected < 1.7.1_sr4.75-38.59.1fixed 1.7.1_sr4.75-38.59.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14781LowOct 21, 2020
affected < 1.7.1_sr4.75-38.59.1fixed 1.7.1_sr4.75-38.59.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network acce
CVE-2020-14779LowOct 21, 2020
affected < 1.7.1_sr4.75-38.59.1fixed 1.7.1_sr4.75-38.59.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with net
CVE-2019-17639MedJul 15, 2020
affected < 1.7.1_sr4.70-38.56.1fixed 1.7.1_sr4.70-38.56.1
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefine
CVE-2020-14621MedJul 15, 2020
affected < 1.7.1_sr4.70-38.56.1fixed 1.7.1_sr4.70-38.56.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network ac
CVE-2020-14593HigJul 15, 2020
affected < 1.7.1_sr4.70-38.56.1fixed 1.7.1_sr4.70-38.56.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network acce
CVE-2020-14583HigJul 15, 2020
affected < 1.7.1_sr4.70-38.56.1fixed 1.7.1_sr4.70-38.56.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with net
CVE-2020-14579LowJul 15, 2020
affected < 1.7.1_sr4.70-38.56.1fixed 1.7.1_sr4.70-38.56.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via
CVE-2020-14578LowJul 15, 2020
affected < 1.7.1_sr4.70-38.56.1fixed 1.7.1_sr4.70-38.56.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via
CVE-2020-14577LowJul 15, 2020
affected < 1.7.1_sr4.70-38.56.1fixed 1.7.1_sr4.70-38.56.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-2830MedApr 15, 2020
affected < 1.7.1_sr4.65-38.53.1fixed 1.7.1_sr4.65-38.53.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network
CVE-2020-2805HigApr 15, 2020
affected < 1.7.1_sr4.65-38.53.1fixed 1.7.1_sr4.65-38.53.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-2803HigApr 15, 2020
affected < 1.7.1_sr4.65-38.53.1fixed 1.7.1_sr4.65-38.53.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-2800MedApr 15, 2020
affected < 1.7.1_sr4.65-38.53.1fixed 1.7.1_sr4.65-38.53.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacke

Page 1 of 8