rpm package

suse/java-1_8_0-ibm&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3

pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3

Vulnerabilities (182)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2018-2579	Low	3.7	< 1.8.0_sr5.10-30.16.1	1.8.0_sr5.10-30.16.1	Jan 18, 2018	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows un
CVE-2017-3736	Med	6.5	< 1.8.0_sr5.20-30.36.1	1.8.0_sr5.20-30.36.1	Nov 2, 2017	There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are n
CVE-2017-10388	Hig	7.5	< 1.8.0_sr5.5-30.13.1	1.8.0_sr5.5-30.13.1	Oct 19, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Difficult to exploit vulnerability allows unauthenticated attacker with netw
CVE-2017-10357	Med	5.3	< 1.8.0_sr5.5-30.13.1	1.8.0_sr5.5-30.13.1	Oct 19, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with ne
CVE-2017-10356	Med	6.2	< 1.8.0_sr5.5-30.13.1	1.8.0_sr5.5-30.13.1	Oct 19, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthent
CVE-2017-10355	Med	5.3	< 1.8.0_sr5.5-30.13.1	1.8.0_sr5.5-30.13.1	Oct 19, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthe
CVE-2017-10350	Med	5.3	< 1.8.0_sr5.5-30.13.1	1.8.0_sr5.5-30.13.1	Oct 19, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access v
CVE-2017-10349	Med	5.3	< 1.8.0_sr5.5-30.13.1	1.8.0_sr5.5-30.13.1	Oct 19, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network acc
CVE-2017-10348	Med	5.3	< 1.8.0_sr5.5-30.13.1	1.8.0_sr5.5-30.13.1	Oct 19, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with networ
CVE-2017-10347	Med	5.3	< 1.8.0_sr5.5-30.13.1	1.8.0_sr5.5-30.13.1	Oct 19, 2017	Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network acc
CVE-2017-10346	Cri	9.6	< 1.8.0_sr5.5-30.13.1	1.8.0_sr5.5-30.13.1	Oct 19, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network
CVE-2017-10345	Low	3.1	< 1.8.0_sr5.5-30.13.1	1.8.0_sr5.5-30.13.1	Oct 19, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows un
CVE-2017-10309	Hig	7.1	< 1.8.0_sr5.5-30.13.1	1.8.0_sr5.5-30.13.1	Oct 19, 2017	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. S
CVE-2017-10295	Med	4.0	< 1.8.0_sr5.5-30.13.1	1.8.0_sr5.5-30.13.1	Oct 19, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unaut
CVE-2017-10293	Med	6.1	< 1.8.0_sr5.5-30.13.1	1.8.0_sr5.5-30.13.1	Oct 19, 2017	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE. Succ
CVE-2017-10285	Cri	9.6	< 1.8.0_sr5.5-30.13.1	1.8.0_sr5.5-30.13.1	Oct 19, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network acce
CVE-2017-10281	Med	5.3	< 1.8.0_sr5.5-30.13.1	1.8.0_sr5.5-30.13.1	Oct 19, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unau
CVE-2017-10243	Med	6.5	< 1.8.0_sr4.10-30.5.1	1.8.0_sr4.10-30.5.1	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticate
CVE-2017-10125	Hig	7.1	< 1.8.0_sr4.10-30.5.1	1.8.0_sr4.10-30.5.1	Aug 8, 2017	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows physical access to compromise Java SE. While the vulnerability is in Java SE, attacks
CVE-2017-10116	Hig	8.3	< 1.8.0_sr4.10-30.5.1	1.8.0_sr4.10-30.5.1	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenti

CVE-2018-2579LowJan 18, 2018
affected < 1.8.0_sr5.10-30.16.1fixed 1.8.0_sr5.10-30.16.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows un
CVE-2017-3736MedNov 2, 2017
affected < 1.8.0_sr5.20-30.36.1fixed 1.8.0_sr5.20-30.36.1
There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are n
CVE-2017-10388HigOct 19, 2017
affected < 1.8.0_sr5.5-30.13.1fixed 1.8.0_sr5.5-30.13.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Difficult to exploit vulnerability allows unauthenticated attacker with netw
CVE-2017-10357MedOct 19, 2017
affected < 1.8.0_sr5.5-30.13.1fixed 1.8.0_sr5.5-30.13.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with ne
CVE-2017-10356MedOct 19, 2017
affected < 1.8.0_sr5.5-30.13.1fixed 1.8.0_sr5.5-30.13.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthent
CVE-2017-10355MedOct 19, 2017
affected < 1.8.0_sr5.5-30.13.1fixed 1.8.0_sr5.5-30.13.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthe
CVE-2017-10350MedOct 19, 2017
affected < 1.8.0_sr5.5-30.13.1fixed 1.8.0_sr5.5-30.13.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access v
CVE-2017-10349MedOct 19, 2017
affected < 1.8.0_sr5.5-30.13.1fixed 1.8.0_sr5.5-30.13.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network acc
CVE-2017-10348MedOct 19, 2017
affected < 1.8.0_sr5.5-30.13.1fixed 1.8.0_sr5.5-30.13.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with networ
CVE-2017-10347MedOct 19, 2017
affected < 1.8.0_sr5.5-30.13.1fixed 1.8.0_sr5.5-30.13.1
Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network acc
CVE-2017-10346CriOct 19, 2017
affected < 1.8.0_sr5.5-30.13.1fixed 1.8.0_sr5.5-30.13.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network
CVE-2017-10345LowOct 19, 2017
affected < 1.8.0_sr5.5-30.13.1fixed 1.8.0_sr5.5-30.13.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows un
CVE-2017-10309HigOct 19, 2017
affected < 1.8.0_sr5.5-30.13.1fixed 1.8.0_sr5.5-30.13.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. S
CVE-2017-10295MedOct 19, 2017
affected < 1.8.0_sr5.5-30.13.1fixed 1.8.0_sr5.5-30.13.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unaut
CVE-2017-10293MedOct 19, 2017
affected < 1.8.0_sr5.5-30.13.1fixed 1.8.0_sr5.5-30.13.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE. Succ
CVE-2017-10285CriOct 19, 2017
affected < 1.8.0_sr5.5-30.13.1fixed 1.8.0_sr5.5-30.13.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network acce
CVE-2017-10281MedOct 19, 2017
affected < 1.8.0_sr5.5-30.13.1fixed 1.8.0_sr5.5-30.13.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unau
CVE-2017-10243MedAug 8, 2017
affected < 1.8.0_sr4.10-30.5.1fixed 1.8.0_sr4.10-30.5.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticate
CVE-2017-10125HigAug 8, 2017
affected < 1.8.0_sr4.10-30.5.1fixed 1.8.0_sr4.10-30.5.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows physical access to compromise Java SE. While the vulnerability is in Java SE, attacks
CVE-2017-10116HigAug 8, 2017
affected < 1.8.0_sr4.10-30.5.1fixed 1.8.0_sr4.10-30.5.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenti

Page 8 of 10