Security Bulletin: Vulnerabilities in Rational Functional Tester versions 8.x due to security vulnerabilities in IBM JRE 7.0 Service Release 4 Fix Pack 1 or earlier, and non-IBM Java 7.0

Summary

Multiple security vulnerabilities exist in the Java Runtime Environments (JREs) IBM JRE 7.0 Service Release 4 Fix Pack 1 or earlier, and non-IBM Java 7.0 or earlier, that can affect the security of Rational Functional Tester.

Vulnerability Details

| Subscribe to My Notifications to be notified of important product support alerts like this.

• Follow this link for more information (requires login with your IBM ID)
  —|—

CVEID: CVE-2013-2422

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

CVSS Base Score: 10
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83570&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-1491

Description: Remote attackers can execute arbitrary code via vectors related to 2D.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/82820&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2420

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83560&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2432

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to 2D. This vulnerability is different from CVE-2013-2394 and CVE-2013-1491.

CVSS Base Score: 10
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83559&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2425

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to Install.

CVSS Base Score: 10
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83565&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2434

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83558&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-1569

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83557&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2384

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to 2D, This vulnerability is different from CVE-2013-1569, CVE-2013-2383, and CVE-2013-2420.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83556&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2383

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to 2D. This vulnerability is different from CVE-2013-1569, CVE-2013-2384, and CVE-2013-2420.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83555&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:M/Au:N/C:C/I:C/A:C)

CVEID: CVE-2013-1557

Description: Remote attackers can affect confidentiality, integrity, and availability via vectors related to RMI.

CVSS Base Score: 10
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83572&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-1558

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to Beans.

CVSS Base Score: 10
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83561&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2440

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to Deployment. This vulnerability is different from CVE-2013-2435.

CVSS Base Score: 10
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83562&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-1518

Description: Remote attackers can affect confidentiality, integrity, and availability via vectors related to JAXP.

CVSS Base Score: 10
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83566&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-1488

Description: Remote attackers can execute arbitrary code via unspecified vectors involving reflection, Libraries, “improper toString calls,” and the JDBC driver manager.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/82861&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2421

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to HotSpot.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83573&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2426

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83574&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2436

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to Libraries. This vulnerability is different from CVE-2013-1488 and CVE-2013-2426.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83575&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2429

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to ImageIO.

CVSS Base Score: 7.6
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83578&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2430

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to ImageIO.

CVSS Base Score: 7.6
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83577&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-1563

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to Install.

CVSS Base Score: 7.6
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83579&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2394

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to 2D. This vulnerability is different from CVE-2013-2432 and CVE-2013-1491.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83576&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-0401

Description: Remote attackers can execute arbitrary code via vectors related to AWT.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/82823&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2438

Description: Remote attackers can affect integrity via unknown vectors related to JavaFX.

CVSS Base Score: 5.0
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83585&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

CVEID: CVE-2013-2424

Description: Remote attackers can affect confidentiality via vectors related to JMX.

CVSS Base Score: 5.0
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83582&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

CVEID: CVE-2013-2419

Description: Remote attackers can affect availability via unknown vectors related to 2D.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83581&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2417

Description: Remote attackers can affect availability via unknown vectors related to Networking.

CVSS Base Score: 5.0
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83586&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

CVEID: CVE-2013-2418

Description: Local users can affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS Base Score: 4.6
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83587&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

CVEID: CVE-2013-1540

Description: Remote attackers can affect integrity via unknown vectors related to Deployment. This vulnerability is different from CVE-2013-2433.

CVSS Base Score: 4.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83590&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

CVEID: CVE-2013-2423

Description: Remote attackers can affect integrity via unknown vectors related to HotSpot.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83591&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2433

Description: Remote attackers can affect integrity via unknown vectors related to Deployment. This vulnerability is different from CVE-2013-1540.

CVSS Base Score: 4.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83589&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

CVEID: CVE-2013-2416

Description: Remote attackers can affect integrity via unknown vectors related to Deployment.

CVSS Base Score: 4.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83588&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

CVEID: CVE-2013-2415

Description: Local users can affect confidentiality via vectors related to JAX-WS.

CVSS Base Score: 2.1
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83592&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

CVEID: CVE-2013-3012

Description: Remote attackers can affect confidentiality, availability, and integrity via unknown vectors. This vulnerability is different from CVE-2013-3009 and CVE-2013-3011.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/84153&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-3011

Description: Remote attackers can affect confidentiality, availability, and integrity via unknown vectors. This vulnerability is different from CVE-2013-3009 and CVE-2013-3012.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/84152&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-3010

Description: Remote attackers can affect confidentiality, availability, and integrity via unknown vectors. This vulnerability is different from CVE-2013-3007.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/84151&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-3009

Description: Remote attackers can affect confidentiality, availability, and integrity via unknown vectors. This vulnerability is different from CVE-2013-3011 and CVE-2013-3012.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/84150&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-3008

Description: Remote attackers can affect confidentiality, availability, and integrity via unknown vectors. This vulnerability is different from CVE-2013-3006.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/84149&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-3007

Description: Remote attackers to affect confidentiality, availability, and integrity via unknown vectors. This vulnerability is different from CVE-2013-3006.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/84148&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-3006

Description: Remote attackers to affect confidentiality, availability, and integrity via unknown vectors. This vulnerability is different from CVE-2013-3008.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/84147&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2455

Description: Remote attackers can affect confidentiality via unknown vectors related to Libraries. This vulnerability is different from CVE-2013-2443 and CVE-2013-2452.

CVSS Base Score: 5.0
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/84146&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

CVEID: CVE-2013-2436

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to Libraries. This vulnerability is different from CVE-2013-1488 and CVE-2013-2426.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83575&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-1571

Description: Remote attackers can affect integrity via unknown vectors related to Javadoc.

CVSS Base Score: 4.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/84715&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

CVEID: CVE-2013-2468

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to Deployment. This vulnerability is different from CVE-2013-2442 and CVE-2013-2466.

CVSS Base Score: 10
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85034&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2469

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS Base Score: 10
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85032&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2465

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS Base Score: 10
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85031&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2464

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to 2D. This vulnerability is different from CVE-2013-2463, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, and CVE-2013-2473.

CVSS Base Score: 10
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85030&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2463

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS Base Score: 10
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85029&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2473

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS Base Score: 10
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85028&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2472

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS Base Score: 10
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85027&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2471

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS Base Score: 10
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85026&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2470

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS Base Score: 10
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85025&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2459

Description: Remote attackers can affect confidentiality, integrity, and availability via vectors related to AWT.

CVSS Base Score: 10
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85033&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2466

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to Deployment. This vulnerability is different from CVE-2013-2442 and CVE-2013-2468.

CVSS Base Score: 10
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85035&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2462

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85037&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2460

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to Serviceability.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85038&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-3743

Description: Remote attackers can affect confidentiality, integrity, and availability via vectors related to AWT.

CVSS Base Score: 9.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85036&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2448

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to Sound.

CVSS Base Score: 7.6
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85040&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C

CVEID: CVE-2013-2442

Description: Remote attackers can affect confidentiality, integrity, and availability via unknown vectors related to Deployment. This vulnerability is different from CVE-2013-2466 and CVE-2013-2468.

CVSS Base Score: 7.5
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85041&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

CVEID: CVE-2013-2454

Description: Remote attackers can affect confidentiality and integrity via vectors related to JDBC.

CVSS Base Score: 5.8
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85045&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

CVEID: CVE-2013-2458

Description: Remote attackers can affect confidentiality and integrity via unknown vectors related to Libraries.

CVSS Base Score: 5.8
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85046&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

CVEID: CVE-2013-3744

Description: Remote attackers can affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2400.

CVSS Base Score: 5.0
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85051&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

CVEID: CVE-2013-2400

Description: Remote attackers can affect integrity via unknown vectors related to Deployment. This vulnerability is different from CVE-2013-3744.

CVSS Base Score: 5.0
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85050&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

CVEID: CVE-2013-2456

Description: Remote attackers can affect confidentiality via unknown vectors related to Serialization.

CVSS Base Score: 5.0
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85058&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

CVEID: CVE-2013-2453

Description: Remote attackers can affect integrity via vectors related to JMX.

CVSS Base Score: 5.0
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85053&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

CVEID: CVE-2013-2457

Description: Remote attackers can affect integrity via vectors related to JMX.

CVSS Base Score: 5.0
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85052&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

CVEID: CVE-2013-2455

Description: Remote attackers can affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2452.

CVSS Base Score: 5.0
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/84146&gt;
CVSS Environmental Score*: 3.7
CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

CVEID: CVE-2013-2412

Description: Remote attackers can affect confidentiality via unknown vectors related to Serviceability.

CVSS Base Score: 5.0
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85059&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

CVEID: CVE-2013-2443

Description: Remote attackers can affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2452 and CVE-2013-2455.

CVSS Base Score: 5.0
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85054&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

CVEID: CVE-2013-2447

Description: Remote attackers can affect confidentiality via unknown vectors related to Networking.

CVSS Base Score: 5.0
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85056&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

CVEID: CVE-2013-2437

Description: Remote attackers can affect confidentiality via unknown vectors related to Deployment.

CVSS Base Score: 5.0
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85049&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

CVEID: CVE-2013-2444

Description: Remote attackers can affect availability via vectors related to AWT.

CVSS Base Score: 5.0
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85047&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

CVEID: CVE-2013-2452

Description: Remote attackers can affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2455.

CVSS Base Score: 5.0
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85055&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

CVEID: CVE-2013-2446

Description: Remote attackers can affect confidentiality via vectors related to CORBA.

CVSS Base Score: 5.0
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85048&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

CVEID: CVE-2013-2450

Description: Remote attackers can affect availability via unknown vectors related to Serialization.

CVSS Base Score: 5.0
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities&gt;/85057
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

CVEID: CVE-2013-2449

Description: Remote attackers can affect confidentiality via unknown vectors related to Libraries.

CVSS Base Score: 4.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85060&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

CVEID: CVE-2013-2451

Description: Local users can affect confidentiality, integrity, and availability via unknown vectors related to Networking.

CVSS Base Score: 3.7
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85061&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P

CVEID: CVE-2013-1500

Description: Local users can affect confidentiality and integrity via unknown vectors related to 2D.

CVSS Base Score: 3.6
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85062&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N

CVEID: CVE-2013-4002

Description: Remote attackers can affect availability via unknown vectors.

CVSS Base Score: 7.1
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/85260&gt;
CVSS Environmental Score*: Undefined
CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C

Affected Products and Versions

Versions 8.0 through 8.5 of Rational Functional Tester are affected.

Remediation/Fixes

Fixes are available in IBM JRE 7.0 Service Release 5 and in the latest Java 7.0 patches. You can download from the IBM Java website and configure RFT to use it.

Upgrade to Rational Functional Tester 8.5.1.1 which ships with IBM Java 7.0 Service Release 6 and addresses this security issue.

Workarounds and Mitigations

None