Privilege Escalation

Oracle Java SE is vulnerable to privilege escalation vulnerability. The vulnerability exists in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE due to some unknown processing of the component JNDI. An unauthenticated attacker with network access via multiple protocols could...

Improper Access Control

Oracle Java SE is vulnerable to improper access control. A local attacker could exploit a flaw in Java SE Installer component to gain elevated privileges...

Denial Of Service (DoS)

Oracle Java SE is vulnerable to denial of service DoS attacks. The vulnerability exists in an unknown functionality of the subcomponent AWT. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, Java SE Embedded, JRockit causing a partial DoS condition...

Denial Of Service (DoS)

Oracle Java SE is vulnerable to denial of service DoS attacks. The vulnerability exists in an unknown functionality of the component Serialization. An unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit causing a partial denial of...

Privilege Escalation

Oracle Java SE is vulnerable to privilege escalation attacks. The vulnerability exists in an unknown functionality of the component RMI. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, JRockit resulting in unauthorized update, insert or delete acce...

Denial Of Service (DoS)

Oracle Java SE is vulnerable to denial of service DoS attacks. The vulnerability exists in an unknown code block of the component JAXP. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, Java SE Embedded, JRockit causing a partial DoS condition...

Denial Of Service (DoS)

Oracle Java SE is vulnerable to denial of service DoS attacks. The vulnerability exists in an unknown function of the component Security. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, Java SE Embedded, JRockit causing a parital denial of service...

Privilege Escalation

Oracle Java SE is vulnerable to privilege escalation vulnerability. An unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes could compromise Java SE, JRockit with the aid of human interaction from a person other than the attacker...

Denial Of Service (DoS)

Oracle Java SE is vulnerable to denial of service attacks. A remote, unauthenticated attacker could exploit the flawed Serialization component to partially access data and cause partial denial of service conditions...

Improper Access Control

Oracle Java SE is vulnerable to improper access control vulnerability. A remote user could exploit a flaw in the Java SE, Java SE Embedded AWT component to modify data...

Improper Access Control

Oracle Java SE is vulnerable to improper access control vulnerability. This is because the JMX component of OpenJDK failed to properly set the deserialization filter for the SingleEntryRegistry in certain cases. A remote attacker could possibly use this flaw to bypass intended deserialization...

Improper Access Control

Oracle Java SE is vulnerable to improper access control vulnerability. This occurs in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: AWT. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, Java SE Embedded with the help of...

Improper Access Control

Oracle Java SE is vulnerable to Improper access control vulnerability. This occurs in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, Java SE Embedded, JRockit with the help of...

Improper Access Control

Oracle Java SE is vulnerable to improper access control vulnerability. This exists in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Libraries. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, Java SE Embedded,...

Improper Access Control

Oracle Java SE is vulnerable to improper access control vulnerability. This is because the DNS client implementation in the JNDI component of OpenJDK does not use random source ports when sending out DNS queries. A remote attacker coud spoof responses to those queries resulting in unauthorized...

Information Disclosure

Oracle Java SE is vulnerable to information disclosure . This is because the LDAP component of OpenJDK fails to properly encode special characters in user names when adding them to an LDAP search query. Remote attackers could possibly use this flaw to manipulate LDAP queries performed by the...

Improper Access Control

Oracle Java SE is vulnerable to Improper Access Control vulnerability. This is because the Libraries component of OpenJDK failed to sufficiently limit the amount of memory allocated when reading DER encoded input. A remote attacker could possibly use this flaw to make a Java application use an...

Improper Access Control

Oracle Java SE is vulnerable to Improper Access Control vulnerability. This is because GSS component of OpenJDK failed to properly handle GSS context in the native GSS library wrapper in certain cases. A local attacker could possibly use this flaw to cause unauthorized creation, deletion or...

Improper Access Control

Oracle Java SE is vulnerable to improper access control vulnerability. This is because the I18n component of OpenJDK could use an untrusted search path when loading resource bundle classes. A local attacker could possibly use this flaw to execute arbitrary code as another local user by making the...

Improper Access Control

Oracle Java SE is vulnerable to improper access control vulnerability. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, Java SE Embedded with the help of a human interaction other than the attacker resulting in unauthorized creation, deletion or...