rpm package

suse/java-1_8_0-ibm&distro=SUSE Linux Enterprise Software Development Kit 12 SP3

pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3

Vulnerabilities (94)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2017-10348	Med	5.3	< 1.8.0_sr5.5-30.13.1	1.8.0_sr5.5-30.13.1	Oct 19, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with networ
CVE-2017-10347	Med	5.3	< 1.8.0_sr5.5-30.13.1	1.8.0_sr5.5-30.13.1	Oct 19, 2017	Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network acc
CVE-2017-10346	Cri	9.6	< 1.8.0_sr5.5-30.13.1	1.8.0_sr5.5-30.13.1	Oct 19, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network
CVE-2017-10345	Low	3.1	< 1.8.0_sr5.5-30.13.1	1.8.0_sr5.5-30.13.1	Oct 19, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows un
CVE-2017-10309	Hig	7.1	< 1.8.0_sr5.5-30.13.1	1.8.0_sr5.5-30.13.1	Oct 19, 2017	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. S
CVE-2017-10295	Med	4.0	< 1.8.0_sr5.5-30.13.1	1.8.0_sr5.5-30.13.1	Oct 19, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unaut
CVE-2017-10293	Med	6.1	< 1.8.0_sr5.5-30.13.1	1.8.0_sr5.5-30.13.1	Oct 19, 2017	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE. Succ
CVE-2017-10285	Cri	9.6	< 1.8.0_sr5.5-30.13.1	1.8.0_sr5.5-30.13.1	Oct 19, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network acce
CVE-2017-10281	Med	5.3	< 1.8.0_sr5.5-30.13.1	1.8.0_sr5.5-30.13.1	Oct 19, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unau
CVE-2017-10243	Med	6.5	< 1.8.0_sr4.10-30.5.1	1.8.0_sr4.10-30.5.1	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticate
CVE-2017-10125	Hig	7.1	< 1.8.0_sr4.10-30.5.1	1.8.0_sr4.10-30.5.1	Aug 8, 2017	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows physical access to compromise Java SE. While the vulnerability is in Java SE, attacks
CVE-2017-10116	Hig	8.3	< 1.8.0_sr4.10-30.5.1	1.8.0_sr4.10-30.5.1	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenti
CVE-2017-10115	Hig	7.5	< 1.8.0_sr4.10-30.5.1	1.8.0_sr4.10-30.5.1	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated a
CVE-2017-10111	Cri	9.6	< 1.8.0_sr4.10-30.5.1	1.8.0_sr4.10-30.5.1	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multip
CVE-2017-10110	Cri	9.6	< 1.8.0_sr4.10-30.5.1	1.8.0_sr4.10-30.5.1	Aug 8, 2017	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java S
CVE-2017-10109	Med	5.3	< 1.8.0_sr4.10-30.5.1	1.8.0_sr4.10-30.5.1	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthe
CVE-2017-10108	Med	5.3	< 1.8.0_sr4.10-30.5.1	1.8.0_sr4.10-30.5.1	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthe
CVE-2017-10107	Cri	9.6	< 1.8.0_sr4.10-30.5.1	1.8.0_sr4.10-30.5.1	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access
CVE-2017-10105	Med	4.3	< 1.8.0_sr4.10-30.5.1	1.8.0_sr4.10-30.5.1	Aug 8, 2017	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise
CVE-2017-10102	Cri	9.0	< 1.8.0_sr4.10-30.5.1	1.8.0_sr4.10-30.5.1	Aug 8, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network acces

CVE-2017-10348MedOct 19, 2017
affected < 1.8.0_sr5.5-30.13.1fixed 1.8.0_sr5.5-30.13.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with networ
CVE-2017-10347MedOct 19, 2017
affected < 1.8.0_sr5.5-30.13.1fixed 1.8.0_sr5.5-30.13.1
Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network acc
CVE-2017-10346CriOct 19, 2017
affected < 1.8.0_sr5.5-30.13.1fixed 1.8.0_sr5.5-30.13.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network
CVE-2017-10345LowOct 19, 2017
affected < 1.8.0_sr5.5-30.13.1fixed 1.8.0_sr5.5-30.13.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows un
CVE-2017-10309HigOct 19, 2017
affected < 1.8.0_sr5.5-30.13.1fixed 1.8.0_sr5.5-30.13.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. S
CVE-2017-10295MedOct 19, 2017
affected < 1.8.0_sr5.5-30.13.1fixed 1.8.0_sr5.5-30.13.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unaut
CVE-2017-10293MedOct 19, 2017
affected < 1.8.0_sr5.5-30.13.1fixed 1.8.0_sr5.5-30.13.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE. Succ
CVE-2017-10285CriOct 19, 2017
affected < 1.8.0_sr5.5-30.13.1fixed 1.8.0_sr5.5-30.13.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network acce
CVE-2017-10281MedOct 19, 2017
affected < 1.8.0_sr5.5-30.13.1fixed 1.8.0_sr5.5-30.13.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unau
CVE-2017-10243MedAug 8, 2017
affected < 1.8.0_sr4.10-30.5.1fixed 1.8.0_sr4.10-30.5.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticate
CVE-2017-10125HigAug 8, 2017
affected < 1.8.0_sr4.10-30.5.1fixed 1.8.0_sr4.10-30.5.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows physical access to compromise Java SE. While the vulnerability is in Java SE, attacks
CVE-2017-10116HigAug 8, 2017
affected < 1.8.0_sr4.10-30.5.1fixed 1.8.0_sr4.10-30.5.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenti
CVE-2017-10115HigAug 8, 2017
affected < 1.8.0_sr4.10-30.5.1fixed 1.8.0_sr4.10-30.5.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated a
CVE-2017-10111CriAug 8, 2017
affected < 1.8.0_sr4.10-30.5.1fixed 1.8.0_sr4.10-30.5.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multip
CVE-2017-10110CriAug 8, 2017
affected < 1.8.0_sr4.10-30.5.1fixed 1.8.0_sr4.10-30.5.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java S
CVE-2017-10109MedAug 8, 2017
affected < 1.8.0_sr4.10-30.5.1fixed 1.8.0_sr4.10-30.5.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthe
CVE-2017-10108MedAug 8, 2017
affected < 1.8.0_sr4.10-30.5.1fixed 1.8.0_sr4.10-30.5.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthe
CVE-2017-10107CriAug 8, 2017
affected < 1.8.0_sr4.10-30.5.1fixed 1.8.0_sr4.10-30.5.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access
CVE-2017-10105MedAug 8, 2017
affected < 1.8.0_sr4.10-30.5.1fixed 1.8.0_sr4.10-30.5.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise
CVE-2017-10102CriAug 8, 2017
affected < 1.8.0_sr4.10-30.5.1fixed 1.8.0_sr4.10-30.5.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network acces

Page 4 of 5