Lucene search

IBM112A710E906892B1E3FAB2E77F234DF79EB706E07FF23EE585B0E194F4BDAD6D

HistorySep 28, 2023 - 4:18 p.m.

Security Bulletin: Vulnerabilities in IBM Semeru Runtime affects Host On-Demand

2023-09-2816:18:34

www.ibm.com

ibm semeru runtime

host on-demand

cve-2023-21930

oracle java se

cvss 7.4

hod v15

vulnerability fixes

0.001 Low

EPSS

Percentile

43.0%

JSON

Summary

There is a vulnerability in IBM Semeru Runtime used by Host On-Demand. Host On-Demand has provided a fix for the applicable CVE. These issues were disclosed as part of the IBM Semeru Runtime Quarterly CPU - Apr 2023 - Includes OpenJDK April 2023 CPU.

Vulnerability Details

CVEID:CVE-2023-21930
**DESCRIPTION:**An unspecified vulnerability in Oracle Java SE, Oracle GraalVM Enterprise Edition related to the JSSE component could allow an unauthenticated attacker to cause high confidentiality impact and high integrity impact.
CVSS Base score: 7.4
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/253115 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)

Affected Products and Versions

Affected Product(s)	Version(s)
HOD	V15

Remediation/Fixes

Product	VRMF	APAR	Remediation / First Fix
Host On-Demand	15	None
https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7ERational&product=ibm/Rational/IBM+Host+On-Demand&release=15.0.1&platform=All&function=all

Workarounds and Mitigations

None

CPENameOperatorVersion
host access client packageeq15

CPE	Name	Operator	Version
	host access client package	eq	15

0.001 Low

EPSS

Percentile

43.0%

JSON

Related for 112A710E906892B1E3FAB2E77F234DF79EB706E07FF23EE585B0E194F4BDAD6D