PT-2019-3676

🗓️ 15 Oct 2019 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 5 Views

Unauthenticated attacker with network access can compromise Java SE Scripting component.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Netcool Agile Service Manager	25 Nov 202109:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Platform Cluster Manager Standard Edition, IBM Platform Cluster Manager Advanced Edition, Platform HPC, and Spectrum Cluster Foundation.	22 Mar 201910:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Netcool Agile Service Manager	3 Jul 201905:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime affect IBM Cognos Command Center (CVE-2018-3139, CVE-2018-3180, CVE-2018-12457, CVE-2019-2426)	2 Apr 201920:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - January 2019 through July 2022 affects AIX LPARs in IBM PureData System for Operational Analytics	4 Nov 202220:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Operations Analytics Predictive Insights January 2019 CPU	16 Mar 201905:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM® Runtime Environment Java™ Version affect IBM Cloud Manager with OpenStack	6 May 201911:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Content Collector for SAP Applications	17 Feb 202008:47	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in IBM Java Runtime Affect IBM Tealeaf Customer Experience	23 Jun 201803:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MessageSight is affected by the following four IBM Java vulnerabilities	8 May 201921:05	–	ibm

Source	Link
linux	www.linux.oracle.com/errata/ELSA-2019-3128.html
suse	www.suse.com/security/cve/CVE-2018-2588
access	www.access.redhat.com/errata/RHSA-2020:0006
suse	www.suse.com/security/cve/CVE-2020-2590
ubuntu	www.ubuntu.com/security/CVE-2019-2949
suse	www.suse.com/security/cve/CVE-2017-3252
suse	www.suse.com/security/cve/CVE-2020-14593
suse	www.suse.com/security/cve/CVE-2017-10388
suse	www.suse.com/security/cve/CVE-2020-2659
lists	www.lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html

14 Oct 2026 00:00Current

CVSS 25.8 - 6.8

CVSS 3.13.7 - 9

EPSS0.16181

SSVC

Java SE Java SE Embedded Scripting component unauthorized data access partial denial of service network access