CVE-2019-2894

🗓️ 16 Oct 2019 17:40:53Reported by oracleType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 375 Views

Vulnerability in Oracle Java SE allows unauthorized read acces

Reporter	Title	Published	Views	Family All 139
IBM Security Bulletins	Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Oct 2019 - Includes Oracle Oct 2019 CPU affects IBM Tivoli Composite Application Manager for Transactions-Robotic Response Time	28 Jul 202015:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect IBM StoredIQ	10 Jul 202014:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Security Guardium	7 Oct 202016:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in middleware software affect IBM Cloud Pak for Automation	27 Jun 202009:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in WebSphere Application Server Liberty in IBM Cloud Private VM Quickstarter	14 Feb 202013:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	13 Aug 202122:15	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities in IBM® Java SDK Oct 2019 and Jan 2020 CPU affect multiple IBM Continuous Engineering products based on IBM Jazz Technology	4 Aug 202016:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Engineering Requirements Quality Assistant On-Premises	7 Jan 202120:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affects WebSphere Application Server October 2019 CPU that is bundled with IBM WebSphere Application Server Patterns	20 Dec 201908:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the IBM SDK, Java Technology Edition affects IBM Performance Management products	20 Mar 202004:56	–	ibm

NVD

Vulners

Node

oracle jdkMatch1.7.0update231

oracle jdkMatch1.8.0update221

oracle jdkMatch11.0.4

oracle jdkMatch13.0.0

oracle jreMatch1.7.0update231

oracle jreMatch1.8.0update221

oracle jreMatch11.0.4

oracle jreMatch13.0.0

Node

debian debian_linuxMatch8.0

debian debian_linuxMatch9.0

Node

opensuse leapMatch15.0

opensuse leapMatch15.1

Node

mcafee epolicy_orchestratorMatch5.9.0

mcafee epolicy_orchestratorMatch5.9.1

mcafee epolicy_orchestratorMatch5.10.0-

mcafee epolicy_orchestratorMatch5.10.0update_1

mcafee epolicy_orchestratorMatch5.10.0update_2

mcafee epolicy_orchestratorMatch5.10.0update_3

mcafee epolicy_orchestratorMatch5.10.0update_4

mcafee epolicy_orchestratorMatch5.10.0update_5

mcafee epolicy_orchestratorMatch5.10.0update_6

Node

canonical ubuntu_linuxMatch16.04esm

canonical ubuntu_linuxMatch18.04lts

canonical ubuntu_linuxMatch19.04

canonical ubuntu_linuxMatch19.10

[
  {
    "product": "Java",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Java SE: 7u231, 8u221, 11.0.4, 13"
      },
      {
        "status": "affected",
        "version": "Java SE Embedded: 8u221"
      }
    ]
  }
]

Source	Link
kc	www.kc.mcafee.com/corporate/index
seclists	www.seclists.org/bugtraq/2019/Oct/27
usn	www.usn.ubuntu.com/4223-1/
lists	www.lists.debian.org/debian-lts-announce/2019/12/msg00005.html
lists	www.lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
lists	www.lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html
debian	www.debian.org/security/2019/dsa-4546
security	www.security.netapp.com/advisory/ntap-20191017-0001/
debian	www.debian.org/security/2019/dsa-4548

21 Nov 2024 04:41Current

3.4Low risk

Vulners AI Score3.4

CVSS 3.13.7

CVSS 24.3

EPSS0.0058

SSVC