PT-2018-15830 · Oracle +4 · Java Se +7

🗓️ 18 Apr 2018 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 12 Views

Unauthenticated attacker can cause denial of service in Java SE and JRockit via sandboxed apps or APIs.

Reporter	Title	Published	Views	Family All 14350
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect IBM Tivoli Netcool Configuration Manager	28 Jun 202322:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM SONAS	1 Nov 201810:40	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in IBM Java SE affects IBM Elastic Storage Server	23 Mar 202111:18	–	ibm
IBM Security Bulletins	Security Bulletin:Security Vulnerability in IBM Java SDK for Quarterly CPU - April 2017 affect IBM Rational Software Architect and Rational Software Architect for WebSphere Software (CVE-2017-3511)	10 Sep 202017:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java Runtime 1.8 affect IBM Sterling Secure Proxy	8 Jan 202123:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Jan 2020 -CVE-2020-2590 affects IBM Tivoli Composite Application Manager for Transactions-Robotic Response Time	21 Aug 202009:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Content Collector for SAP Applications	17 Jun 201812:19	–	ibm
IBM Security Bulletins	Security Bulletin: GSKit Sweet32: Birthday attacks in IBM Content Collector for Microsoft SharePoint	17 Jun 201812:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM InfoSphere Identity Insight (CVE-2020-14621, CVE-2020-14577)	13 Nov 202019:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Spectrum LSF Analytics	9 Jul 201811:21	–	ibm

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
ubuntu	www.ubuntu.com/security/CVE-2018-2783
ubuntu	www.ubuntu.com/security/CVE-2018-2800
ubuntu	www.ubuntu.com/security/CVE-2018-2790
security-tracker	www.security-tracker.debian.org/tracker/source-package/openjdk-7
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
ubuntu	www.ubuntu.com/security/CVE-2018-2815
ubuntu	www.ubuntu.com/security/CVE-2018-2798
osv	www.osv.dev/vulnerability/SUSE-SU-2018:1938-2

06 May 2025 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.15.3 - 9.8

CVSS 27.5

CVSS 38.3 - 9.6

EPSS0.95707

SSVC

java se 6u181 java se 7u171 java se 8u162 java se 10 embedded 8u161 jrockit r28.3.17 sandboxed apps apis denial of service unauthenticated attacker