Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBM537FBF496A2587F5B58310697A47B5B88D1CA65987B881585089EA2477DA806C
HistoryJun 17, 2018 - 12:19 p.m.

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Content Classification

2018-06-1712:19:16
www.ibm.com
17

9.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

JSON

Summary

There are multiple vulnerabilities in IBM® SDK Java Technology Edition, Version 6 and IBM® Runtime Environment Java Version 7 used by IBM Content Classification. These issues were disclosed as part of the IBM Java SDK updates in October 2017.

Vulnerability Details

CVEID: CVE-2017-10346**
DESCRIPTION:** An unspecified vulnerability in Oracle Java SE related to the Java SE, Java SE Embedded Hotspot component could allow an unauthenticated attacker to take control of the system.
CVSS Base Score: 9.6
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/133775&gt; for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)

Affected Products and Versions

IBM Content Classification Versions 8.8

Remediation/Fixes

Product

| VRM|Remediation
—|—|—
IBM Content Classification| 8.8| Use IBM Content Classification 8.8 Interim Fix 11

Workarounds and Mitigations

None

CPENameOperatorVersion
ibm content classificationeq8.8

Related

prion 1
redhatcve 1
veracode 1
cve 1
debiancve 1
ubuntucve 1
ibm 24
nessus 51
openvas 30
amazon 2
osv 3
redhat 9
oraclelinux 2
debian 3
ubuntu 2
centos 2
mageia 1
gentoo 2
suse 10
aix 1
kaspersky 1
photon 1
oracle 1
prion
prion
Code injection
2017-10-19 17:29:00
redhatcve
redhatcve
CVE-2017-10346
2019-11-04 04:16:46
veracode
veracode
Sandbox Restrictions Bypass
2019-05-02 06:37:52
cve
cve
CVE-2017-10346
2017-10-19 17:29:00
debiancve
debiancve
CVE-2017-10346
2017-10-19 17:29:00
ubuntucve
ubuntucve
CVE-2017-10346
2017-10-19 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections
2018-06-17 12:19:15
Security Bulletin: CICS Transaction Gateway for Multiplatforms
2018-06-15 07:08:55
Security Bulletin: Security vulnerabilities in IBM Java Runtime affect IBM RLKS Administration and Reporting Tool Admin
2018-06-17 05:26:45
nessus
nessus
EulerOS 2.0 SP2 : java-1.7.0-openjdk (EulerOS-SA-2017-1273)
2017-11-02 00:00:00
EulerOS 2.0 SP1 : java-1.7.0-openjdk (EulerOS-SA-2017-1272)
2017-11-02 00:00:00
Photon OS 1.0: Openjre PHSA-2017-0040
2019-02-07 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for java-1.7.0-openjdk (EulerOS-SA-2017-1273)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for java-1.7.0-openjdk (EulerOS-SA-2017-1272)
2020-01-23 00:00:00
Oracle Java SE Security Updates (oct2017-3236626) 02 - Linux
2017-10-18 00:00:00
amazon
amazon
Critical: java-1.8.0-openjdk
2017-10-26 19:46:00
Critical: java-1.7.0-openjdk
2017-12-20 19:02:00
osv
osv
openjdk-8 - security update
2017-11-02 00:00:00
openjdk-7 - security update
2017-11-23 00:00:00
openjdk-7 - security update
2017-11-23 00:00:00
redhat
redhat
(RHSA-2017:2998) Critical: java-1.8.0-openjdk security update
2017-10-20 10:13:17
(RHSA-2017:3268) Critical: java-1.7.1-ibm security update
2017-11-28 20:28:12
(RHSA-2017:3267) Critical: java-1.8.0-ibm security update
2017-11-28 20:27:53
oraclelinux
oraclelinux
java-1.8.0-openjdk security update
2017-10-20 00:00:00
java-1.7.0-openjdk security and bug fix update
2017-12-06 00:00:00
debian
debian
[SECURITY] [DSA 4048-1] openjdk-7 security update
2017-11-23 22:11:38
[SECURITY] [DLA 1187-1] openjdk-7 security update
2017-11-23 17:31:43
[SECURITY] [DSA 4015-1] openjdk-8 security update
2017-11-02 21:44:03
ubuntu
ubuntu
OpenJDK 7 vulnerabilities
2017-11-29 00:00:00
OpenJDK 8 vulnerabilities
2017-11-08 00:00:00
centos
centos
java security update
2017-10-20 15:50:18
java security update
2017-12-06 15:21:38
mageia
mageia
Updated java-1.8.0-openjdk packages fix security vulnerabilities
2017-12-21 21:18:18
gentoo
gentoo
IcedTea: Multiple vulnerabilities
2017-11-19 00:00:00
Oracle JDK/JRE: Multiple vulnerabilities
2017-10-29 00:00:00
suse
suse
Security update for java-1_6_0-ibm (important)
2017-12-07 21:12:27
Security update for java-1_6_0-ibm (important)
2017-12-19 12:10:10
Security update for java-1_7_0-ibm (important)
2018-01-10 12:10:02
aix
aix
There are multiple vulnerabilities in IBM SDK Java Technology Edition
2017-12-07 12:20:05
kaspersky
kaspersky
KLA11122 Multiple vulnerabilities in Oracle Java SE, Java SE Embedded and JRockit
2017-10-17 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2017-0080
2017-10-24 00:00:00
oracle
oracle
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00

9.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

JSON
Related for 537FBF496A2587F5B58310697A47B5B88D1CA65987B881585089EA2477DA806C
prion1redhatcve1veracode1cve1debiancve1ubuntucve1ibm24nessus51openvas30amazon2osv3redhat9oraclelinux2debian3ubuntu2centos2mageia1gentoo2suse10aix1kaspersky1photon1oracle1