rpm package

suse/java-1_8_0-ibm&distro=SUSE Enterprise Storage 5

pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Enterprise%20Storage%205

Vulnerabilities (51)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2020-14803	Med	5.3	< 1.8.0_sr6.20-30.78.1	1.8.0_sr6.20-30.78.1	Oct 21, 2020	Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 11.0.8 and 15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Succe
CVE-2020-14798	Low	3.1	< 1.8.0_sr6.20-30.78.1	1.8.0_sr6.20-30.78.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14797	Low	3.7	< 1.8.0_sr6.20-30.78.1	1.8.0_sr6.20-30.78.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14796	Low	3.1	< 1.8.0_sr6.20-30.78.1	1.8.0_sr6.20-30.78.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14792	Med	4.2	< 1.8.0_sr6.20-30.78.1	1.8.0_sr6.20-30.78.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network a
CVE-2020-14781	Low	3.7	< 1.8.0_sr6.20-30.78.1	1.8.0_sr6.20-30.78.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network acce
CVE-2020-14779	Low	3.7	< 1.8.0_sr6.20-30.78.1	1.8.0_sr6.20-30.78.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with net
CVE-2020-2830	Med	5.3	< 1.8.0_sr6.10-30.69.1	1.8.0_sr6.10-30.69.1	Apr 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network
CVE-2020-2805	Hig	8.3	< 1.8.0_sr6.10-30.69.1	1.8.0_sr6.10-30.69.1	Apr 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-2803	Hig	8.3	< 1.8.0_sr6.10-30.69.1	1.8.0_sr6.10-30.69.1	Apr 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-2800	Med	4.8	< 1.8.0_sr6.10-30.69.1	1.8.0_sr6.10-30.69.1	Apr 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacke
CVE-2020-2781	Med	5.3	< 1.8.0_sr6.10-30.69.1	1.8.0_sr6.10-30.69.1	Apr 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access
CVE-2020-2757	Low	3.7	< 1.8.0_sr6.10-30.69.1	1.8.0_sr6.10-30.69.1	Apr 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with net
CVE-2020-2756	Low	3.7	< 1.8.0_sr6.10-30.69.1	1.8.0_sr6.10-30.69.1	Apr 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with net
CVE-2020-2755	Low	3.7	< 1.8.0_sr6.10-30.69.1	1.8.0_sr6.10-30.69.1	Apr 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access
CVE-2020-2754	Low	3.7	< 1.8.0_sr6.10-30.69.1	1.8.0_sr6.10-30.69.1	Apr 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access
CVE-2019-4732	Med	6.5	< 1.8.0_sr6.5-30.63.1	1.8.0_sr6.5-30.63.1	Feb 3, 2020	IBM SDK, Java Technology Edition Version 7.0.0.0 through 7.0.10.55, 7.1.0.0 through 7.1.4.55, and 8.0.0.0 through 8.0.6.0 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability in Microsoft Windows cl
CVE-2020-2659	Low	3.7	< 1.8.0_sr6.5-30.63.1	1.8.0_sr6.5-30.63.1	Jan 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via
CVE-2020-2654	Low	3.7	< 1.8.0_sr6.10-30.69.1	1.8.0_sr6.10-30.69.1	Jan 15, 2020	Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compr
CVE-2020-2604	Hig	8.1	< 1.8.0_sr6.5-30.63.1	1.8.0_sr6.5-30.63.1	Jan 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with

CVE-2020-14803MedOct 21, 2020
affected < 1.8.0_sr6.20-30.78.1fixed 1.8.0_sr6.20-30.78.1
Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 11.0.8 and 15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Succe
CVE-2020-14798LowOct 21, 2020
affected < 1.8.0_sr6.20-30.78.1fixed 1.8.0_sr6.20-30.78.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14797LowOct 21, 2020
affected < 1.8.0_sr6.20-30.78.1fixed 1.8.0_sr6.20-30.78.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14796LowOct 21, 2020
affected < 1.8.0_sr6.20-30.78.1fixed 1.8.0_sr6.20-30.78.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14792MedOct 21, 2020
affected < 1.8.0_sr6.20-30.78.1fixed 1.8.0_sr6.20-30.78.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network a
CVE-2020-14781LowOct 21, 2020
affected < 1.8.0_sr6.20-30.78.1fixed 1.8.0_sr6.20-30.78.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network acce
CVE-2020-14779LowOct 21, 2020
affected < 1.8.0_sr6.20-30.78.1fixed 1.8.0_sr6.20-30.78.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with net
CVE-2020-2830MedApr 15, 2020
affected < 1.8.0_sr6.10-30.69.1fixed 1.8.0_sr6.10-30.69.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network
CVE-2020-2805HigApr 15, 2020
affected < 1.8.0_sr6.10-30.69.1fixed 1.8.0_sr6.10-30.69.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-2803HigApr 15, 2020
affected < 1.8.0_sr6.10-30.69.1fixed 1.8.0_sr6.10-30.69.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-2800MedApr 15, 2020
affected < 1.8.0_sr6.10-30.69.1fixed 1.8.0_sr6.10-30.69.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacke
CVE-2020-2781MedApr 15, 2020
affected < 1.8.0_sr6.10-30.69.1fixed 1.8.0_sr6.10-30.69.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access
CVE-2020-2757LowApr 15, 2020
affected < 1.8.0_sr6.10-30.69.1fixed 1.8.0_sr6.10-30.69.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with net
CVE-2020-2756LowApr 15, 2020
affected < 1.8.0_sr6.10-30.69.1fixed 1.8.0_sr6.10-30.69.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with net
CVE-2020-2755LowApr 15, 2020
affected < 1.8.0_sr6.10-30.69.1fixed 1.8.0_sr6.10-30.69.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access
CVE-2020-2754LowApr 15, 2020
affected < 1.8.0_sr6.10-30.69.1fixed 1.8.0_sr6.10-30.69.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access
CVE-2019-4732MedFeb 3, 2020
affected < 1.8.0_sr6.5-30.63.1fixed 1.8.0_sr6.5-30.63.1
IBM SDK, Java Technology Edition Version 7.0.0.0 through 7.0.10.55, 7.1.0.0 through 7.1.4.55, and 8.0.0.0 through 8.0.6.0 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability in Microsoft Windows cl
CVE-2020-2659LowJan 15, 2020
affected < 1.8.0_sr6.5-30.63.1fixed 1.8.0_sr6.5-30.63.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via
CVE-2020-2654LowJan 15, 2020
affected < 1.8.0_sr6.10-30.69.1fixed 1.8.0_sr6.10-30.69.1
Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compr
CVE-2020-2604HigJan 15, 2020
affected < 1.8.0_sr6.5-30.63.1fixed 1.8.0_sr6.5-30.63.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with

Page 1 of 3