CVE-2013-1571

CVE-2013-1571 is a frame-injection vulnerability in Javadoc-generated HTML that can enable clickjacking. It is documented across multiple IBM advisories (InfoSphere MashupHub, Prerequisite Scanner, Streams, Guardium Data Redaction, Tivoli Monitoring, etc.) and IBM notes the Java documentation may...

CVE-2012-1713

CVE-2012-1713 is described as an unspecified vulnerability in the Java Runtime Environment (JRE) component affecting Oracle Java SE 7u4 and earlier, 6u32 and earlier, 5u35 and earlier, 1.4.2_37 and earlier, and JavaFX 2.1 and earlier, enabling remote attackers to affect confidentiality, integrity...

CVE-2013-2444

CVE-2013-2444 is listed in MiracleLinux AXSA advisories as an unspecified vulnerability in the Java Runtime Environment, with the description noting an issue in the JRE related to resources handling in AWT that could affect availability (potential font processing/temporary files). The MiracleLinu...

CVE-2013-2430

CVE-2013-2430 is a Java Runtime Environment (JRE) vulnerability affecting confidentiality, integrity, and availability via unknown vectors related to ImageIO in Oracle Java SE 7u17 and earlier, 6u43 and earlier, 5.0u41 and earlier, JavaFX 2.2.7 and earlier, and OpenJDK 6/7. Connected advisories c...

CVE-2013-5797

CVE-2013-5797 is an Oracle Java SE vulnerability described as an unspecified issue in Java components (7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, JRockit, JavaFX 2.2.40 and earlier) that could allow remote authenticated users to affect integrity via unknown vectors related to Javadoc...

CVE-2013-2394

CVE-2013-2394 involves an unspecified vulnerability in the Oracle JRE/JVM components (JRE in Oracle Java SE 7u17 and earlier, Java SE 6u43 and earlier, 5.0u41 and earlier, and JavaFX 2.2.7 and earlier) that could affect confidentiality, integrity, and availability via unknown vectors related to 2...

CVE-2013-2432

CVE-2013-2432 affects the Java Runtime Environment used in IBM WebSphere products when IBM JRE is bundled with WebSphere Application Server. IBM notes this vulnerability (in the Oracle Java CPU April 2013 family) as a high-severity issue with CVSS 10, affecting 2D vectors. The recommended remedia...

CVE-2011-3561

CVE-2011-3561 details are not publicly provided in the supplied documents. Connected entries reference the CVE only in lists with no root cause, affected products, versions, or fixes. Monitor official advisories for updates.

CVE-2011-3546

CVE-2011-3546 affects Oracle Java SE JDK/JRE 7, 6 Update 27 and earlier, and JavaFX 2.0. The vulnerability allows remote execution impacting confidentiality and integrity via unknown vectors related to Deployment, exploitable by untrusted Java Web Start applications and untrusted applets. The IBM...

CVE-2013-1563

Technical details for CVE-2013-1563 are not publicly available in the provided documents; monitor for updates.

CVE-2012-1531

CVE-2012-1531 affects Oracle Java SE components: Java Runtime Environment (JRE) up to 7 Update 7, 6 Update 35, 5.0 Update 36, 1.4.2_38, and JavaFX 2.2 and earlier. The vulnerability is described as unspecified and related to 2D in the JRE, allowing remote attackers to affect confidentiality, inte...

CVE-2012-5083

CVE-2012-5083 is an unspecified vulnerability in the Java Runtime Environment (JRE) component across Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, 1.4.2_38 and earlier, and JavaFX 2.2 and earlier, allowing remote attackers to affect confidentiality, in...

CVE-2013-1564

Technical details for CVE-2013-1564 are not publicly provided in the supplied connected documents. Please monitor for updates from the referenced advisories and OSV entries.

CVE-2013-2434

CVE-2013-2434 is an unspecified vulnerability in the JRE component of Oracle Java SE 7 (Update 17 and earlier) and JavaFX 2.2.7 and earlier. It is described as affecting confidentiality, integrity, and availability via unknown vectors related to 2D. The CVE is listed with high impact (CVSS 2.0/10...

CVE-2013-1561

The IBM Security Bulletin RHSA-2013:0757 and related IBM JRE advisories include CVE-2013-1561 as part of a set of Java vulnerabilities addressed by IBM updates. Affected products are IBM WebSphere ILOG JRules (V7.1) on Windows with IBM JRE, and IBM Operational Decision Manager (V7.5, V8.0, V8.5) ...

CVE-2013-2414

Technical details for CVE-2013-2414 are not publicly available in the provided documents. Monitor for updates in trusted sources to obtain affected products, impact, and remediation.

CVE-2013-5777

Technical details for CVE-2013-5777 are not publicly available in the provided documents. Monitor for updates from official advisories and vendor notices.

CVE-2013-5848

CVE-2013-5848 is referenced in IBM advisories for IBM WebSphere Real Time and IBM Java SDK products. The IBM WebSphere Real Time bulletin states affected product: Version 3 Service Refresh 5 and earlier, with remediation to Version 3 Service Refresh 6 and later. The ARX Management GUI is cited as...

CVE-2013-2439

CVE-2013-2439 affects IBM WebSphere ILOG JRules (v7.1 with IBM JRE) and IBM Operational Decision Manager (v7.5, v8.0, v8.5) shipped with IBM JRE. Root cause not explicitly detailed in the sources, but remediation is available as interim fixes: for JRules V7.1 use 7.1.1.5-WS-BRMS_JDK-WIN-IF024; OD...

CVE-2013-5775

CVE-2013-5775 is an unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier that could affect confidentiality, integrity, and availability via unknown vectors. The connected material confirms the affected components (Java SE and JavaFX) and the affected versions...

CVE-2013-5810

CVE-2013-5810 is corroborated by connected records as an unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier, with remote exploitation affecting confidentiality, integrity, and availability via unknown vectors. Affected software explicitly cited in OpenVAS/N...

CVE-2013-2427

Technical details about CVE-2013-2427 are not publicly provided in the supplied documents; no specific affected products, versions, or remediation are stated beyond the initial description. Monitor for updates.

CVE-2013-5844

CVE-2013-5844 is listed across multiple sources as an unspecified vulnerability in the Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier, allowing remote attackers to compromise confidentiality, integrity, and availability via unknown vectors related to JavaFX. Public references (Open...

CVE-2013-5846

CVE-2013-5846 : Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier. Unknown vectors related to JavaFX could affect confidentiality, integrity, and availability. Public sources corroborate that this family of Java vulnerabilities existed and that remediation...

CVE-2013-5854

CVE-2013-5854 affects Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier. Description: an unspecified vulnerability allows remote attackers to affect confidentiality via unknown vectors. The connected documents confirm the issue but do not provide concrete exploitation details, affecte...

CVE-2013-2428

Technical details for CVE-2013-2428 are not publicly provided in the supplied documents; monitor for updates.

CVE-2012-0499

CVE-2012-0499 is described as an unspecified vulnerability in the Oracle Java SE JRE components (including JRE 6 Update 30 and earlier; JRE 7 Update 2 and earlier; and JavaFX 2.0.2 and earlier) with impact to confidentiality, integrity, and availability due to an unknown vector related to 2D. The...

CVE-2012-0500

CVE-2012-0500 is described as an unspecified vulnerability in the Java Runtime Environment (JRE) affecting Oracle Java SE up to certain updates (JRE 7 Update 2 and earlier; JRE 6 Update 30 and earlier; JavaFX 2.0.2 and earlier). The impact is to confidentiality, integrity, and availability via un...

CVE-2013-5870

Oracle Java SE 7u45 and JavaFX 2.2.45 are affected by an unspecified vulnerability (CVE-2013-5870) that allows remote attackers to impact confidentiality, integrity, and availability via unknown vectors related to JavaFX. The issue is listed among multiple CVEs in Red Hat/RHSA advisories and Gent...

CVE-2015-2638

CVE-2015-2638 is an unspecified vulnerability in Oracle Java SE components (Java 6u95, 7u80, 8u45; JavaFX 2.2.80; Java SE Embedded 7u75/8u33) related to the 2D component. It enables remote attackers to affect confidentiality, integrity, and availability via unknown vectors; CVSS base 10.0 (AV:N/A...

CVE-2014-2398

CVE-2014-2398 concerns an unspecified Javadoc-related vulnerability in Oracle Java SE (affecting 5.0u61, 6u71, 7u51, 8; JavaFX 2.2.51; JRockit R27.8.1/R28.3.1) with no confidentiality impact, partial integrity impact, and no availability impact (CVSS 3.5). IBM security bulletins note impact acros...

CVE-2015-0491

CVE-2015-0491 is an unspecified vulnerability in IBM SDK for Java Technology Edition affecting IBM AIX environments. IBM’s 2015 Java bulletin maps CVE-2015-0491 to a 2D component issue with complete confidentiality, integrity, and availability impact. Affected AIX filesets/VRMF levels are: Java5:...

CVE-2014-2401

CVE-2014-2401 affects Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51. The issue is described as an unspecified vulnerability in the 2D component that could lead to partial confidentiality impact via unknown vectors. No exploitation or specific impact details ar...

CVE-2015-2619

CVE-2015-2619 is referenced in IBM advisories as an IBM Java SDK vulnerability affecting IBM products that use IBM Java SDK 7 (including MegaRAID and FSM contexts). The available connected documents describe the issue as an unspecified vulnerability in the 2D component that could allow a remote a...

CVE-2013-0437

CVE-2013-0437 affects Oracle Java SE 7 up to Update 11 and JavaFX 2.2.4 and earlier. The vulnerability is described as unspecified with remote attackers potentially impacting confidentiality, integrity, and availability via unknown vectors related to 2D. The NVD entry assigns a CVSS v2 base score...

CVE-2015-0459

CVE-2015-0459 affects Oracle Java SE components: 2D in Java 5.0u81, 6u91, 7u76, 8u40 and JavaFX 2.2.76. Described as an unspecified vulnerability in the 2D subcomponent with complete confidentiality, integrity, and availability impact. Root cause details are not disclosed in the provided document...

CVE-2014-0417

CVE-2014-0417: An unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JavaFX 2.2.45; and Java SE Embedded 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. IBM lists this CVE among Java vulnerabilities and notes ...

CVE-2015-2637

CVE-2015-2637 is an unspecified vulnerability in the Oracle Java SE 2D component that could allow a remote attacker to obtain sensitive information. Public details in connected docs show impact tied to Java SE / 2D and Java SX usage, with multiple IBM and SUSE advisories listing Bar Mitzvah fixes...

CVE-2013-5843

CVE-2013-5843 is an Oracle Java/JavaFX vulnerability affecting multiple Java runtimes (Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, JavaFX 2.2.40 and earlier, and Java SE Embedded 7u40 and earlier) that can be exploited remotely to impact confidentiality, integrity, and availab...

CVE-2013-0402

CVE-2013-0402 is a heap-based buffer overflow in the Oracle Java JRE/J2SE components that can enable remote code execution. Public‑facing vectors are not detailed in the provided records, but IBM and Red Hat advisories tie the issue to the IBM JRE shipped with IBM ODM/ILOG Domino (and IBM Domino ...

CVE-2015-0484

CVE-2015-0484 affects Oracle Java SE 7u76, 8u40 and JavaFX 2.2.76. The Initial Description notes an unspecified vulnerability with unknown vectors impacting confidentiality, integrity, and availability. Connected documents confirm this CVE is bundled with multiple Java vulnerabilities and show se...

CVE-2013-1479

CVE-2013-1479 describes an unspecified vulnerability in the Oracle JRE component within Oracle Java SE 7 up to Update 11, Java SE 6 up to Update 38, and JavaFX 2.2.4 and earlier that could allow remote attackers to affect confidentiality, integrity, and availability via unknown vectors. The conne...

CVE-2015-0492

CVE-2015-0492 is an unspecified vulnerability in Oracle Java SE 7u76, 8u40, and JavaFX 2.2.76 that could affect confidentiality, integrity, and availability via unknown vectors. Connected sources confirm this CVE was addressed by OpenJDK/OpenJRE/JDK security updates in openSUSE/SUSE advisories (e...

CVE-2015-4916

CVE-2015-4916 affects Oracle Java SE 8u60 and JavaFX 2.2.85. Affects confidentiality via unknown vectors; impact per NVD is Partial confidentiality with network access and no integrity/availability impact reported. Root cause and specific exploit vectors are not publicly detailed in the provided ...

CVE-2015-4908

Technical details for CVE-2015-4908 are not provided in the connected documents; no product/version/root-cause/impact/fix information is present. Monitor for updates.

CVE-2014-0382

CVE-2014-0382 affects Oracle Java SE 7u45 and JavaFX 2.2.45, with an unspecified vulnerability that could affect availability via unknown JavaFX-related vectors. The NVD notes a MEDIUM severity (CVSS v2 base 4.3; AV:N/AC:M/Au:N/C:N/I:N/A:P). Public connected documents corroborate the same product...

CVE-2013-5895

CVE-2013-5895 is described as an unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 that could affect confidentiality via unknown JavaFX-related vectors. The initial description does not specify exploit details, impact scope beyond confidentiality, or concrete CVE root cause. Publ...

CVE-2014-2422

CVE-2014-2422 corresponds to an unspecified vulnerability affecting Oracle Java SE 7u51, Oracle Java SE 8, and JavaFX 2.2.51, with remote impact to confidentiality, integrity, and availability via unknown vectors. The Connected documents corroborate multiple Java 7/8 vulnerabilities (e.g., CVEs l...

CVE-2015-4906

CVE-2015-4906 affects Oracle Java SE 8u60 and JavaFX 2.2.85. The connected advisory notes an unspecified vulnerability that allows remote attackers to affect confidentiality via unknown vectors related to JavaFX, and it is distinguished from CVE-2015-4908 and CVE-2015-4916. No concrete exploit/ve...

CVE-2012-1543

CVE-2012-1543 is described in Oracle/JAVA context as an unspecified vulnerability in the JavaFX component of Oracle Java SE (JavaFX 2.2.4 and earlier) that could affect confidentiality, integrity, and availability via unknown vectors; notes indicate a possible invalid type cast in JSObject. Conne...