CVE-2013-2469

CVE-2013-2469 is a Java Runtime Environment (JRE) vulnerability reported across IBM advisories related to IBM Java SDK shipped with Tivoli/TPC, WebSphere Real Time, and ITM components. The issue affects JREs included in Oracle Java SE 7u21 and earlier, 6u45 and earlier, 5.0u45 and earlier, and Op...

CVE-2013-2430

CVE-2013-2430 is a Java Runtime Environment (JRE) vulnerability affecting confidentiality, integrity, and availability via unknown vectors related to ImageIO in Oracle Java SE 7u17 and earlier, 6u43 and earlier, 5.0u41 and earlier, JavaFX 2.2.7 and earlier, and OpenJDK 6/7. Connected advisories c...

CVE-2013-2448

CVE-2013-2448 is documented in MiracleLinux AXSA-2013-553:03 as an unspecified vulnerability in the JRE Sound component of OpenJDK/OpenJDK-derived runtimes shipped with MiracleLinux 3. The advisory indicates a remote-confidentiality/integrity/availability impact via sound-related vectors and note...

CVE-2013-2471

CVE-2013-2471 is a remote-code-execution type vulnerability in the Java 2D/awt stack affecting Oracle JRE/JDK and OpenJDK (across 6 and 7 lines) identified by multiple advisories. The issue is described as memory corruption in the 2D component related to IntegerComponentRaster size checks, with p...

CVE-2013-2472

CVE-2013-2472 is an unspecified vulnerability in the JRE component of Oracle Java SE up to 7u21, 6u45, 5.0u45 and OpenJDK 7, with unknown vectors related to 2D. It is described as potentially bypassing the Java sandbox, impacting confidentiality, integrity, and availability. No public remediation...

CVE-2013-2451

CVE-2013-2451 is one of the Oracle June 2013 Java CPU vulnerabilities addressed by IBM Java SDK/JRE. The IBM-issued bulletins indicate an unspecified vulnerability in the JRE Networking component that could affect confidentiality, integrity, and availability via unknown vectors. IBM remediation p...

CVE-2013-5797

CVE-2013-5797 is an Oracle Java SE vulnerability described as an unspecified issue in Java components (7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, JRockit, JavaFX 2.2.40 and earlier) that could allow remote authenticated users to affect integrity via unknown vectors related to Javadoc...

CVE-2013-5803

CVE-2013-5803 involves an unspecified vulnerability in Oracle Java SE 7u40 and earlier (also Java 6u60, 5.0u51, JRockit, and Java SE Embedded 7u40 and earlier) that could affect availability via vectors related to JGSS. Public disclosures in IBM advisories map this to the IBM SDK for Java, which ...

CVE-2013-2446

CVE-2013-2446 is present in Oracle/OpenJDK JRE components as part of the June 2013 CPU, with CORBA output streams access restrictions. MiracleLinux advisories AXSA:2013-553:03 (MiracleLinux 3) and AXSA:2013-486:05 (MiracleLinux 4) enumerate this CVE among several OpenJDK/JRE issues and provide re...

CVE-2013-5823

CVE-2013-5823 is an unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier that could allow remote attackers to affect availability via unknown vectors related to Secur...

CVE-2011-3561

CVE-2011-3561 details are not publicly provided in the supplied documents. Connected entries reference the CVE only in lists with no root cause, affected products, versions, or fixes. Monitor official advisories for updates.

CVE-2012-3159

CVE-2012-3159 is an unspecified vulnerability in the Java Runtime Environment (JRE) affecting Oracle Java SE 7 Update 7 and earlier, and Java SE 6 Update 35 and earlier, with exploitation via Deployment vectors. The issue can impact confidentiality, integrity, and availability. Public references ...

CVE-2013-1537

CVE-2013-1537 is a remote code execution/vulnerability in the Java Runtime Environment via RMI. Affected components include Oracle Java SE 7u17 and earlier, Java SE 6/5 series, and OpenJDK 6/7; exploitation can affect confidentiality, integrity, and availability. The issue is described as unspeci...

CVE-2013-5809

CVE-2013-5809 is an unspecified vulnerability in the IBM JRE/JAVA components used with IBM products (e.g., SiteProtector System, WebSphere-related bundles) affecting Java 2D and allowing remote impact to confidentiality, integrity, and availability. IBM advisories aggregate multiple CVEs from Ora...

CVE-2013-2452

CVE-2013-2452 is referenced in IBM WebSphere Real Time advisories as an unspecified vulnerability in the JRE Libraries component that could allow a remote attacker to obtain sensitive information. Affected products/versions: IBM WebSphere Real Time v2 and v3 SR4-FP2 and earlier. Remediation: upgr...

CVE-2013-3829

CVE-2013-3829 is listed among multiple vulnerabilities in the IBM SDK/Java offerings shipped with IBM products (e.g., WebSphere Application Server, Tivoli/Maximo suites, ITCAM, ODM/JRules). The IBM advisories indicate these issues stem from the Oracle October 2013 Java SE CPU fixes and require up...

CVE-2013-2455

CVE-2013-2455 is an Oracle Java/JRE vulnerability (June 2013 CPU era) described as an unspecified issue in the JRE Libraries component that could allow a remote attacker to obtain sensitive information. Public IBM advisories (and the NVD entry) indicate the issue affects Oracle Java SE 7 up to up...

CVE-2012-5068

CVE-2012-5068 is a Java Runtime Environment (JRE) vulnerability in Oracle Java SE 7u7 and earlier, and Java SE 6u35 and earlier. It is described as unspecified, allowing remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. The connected...

CVE-2013-0426

CVE-2013-0426 is present in IBM Tivoli System Automation for Integrated Operations Management (TADDM) 7.2.x family where the IBM JRE is embedded. The vulnerability concerns Logging Level objects with non-final methods that could enable code execution across applets; IBM’s remediation is to upgrad...

CVE-2013-2422

CVE-2013-2422 is an unspecified vulnerability in the Java Runtime Environment (JRE) component that Oracle and related advisories group with the April 2013 CPU. It affects Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and OpenJDK 6/7, allowing remote attackers to affect confiden...

CVE-2013-2457

MiracleLinux AXSA:2013-553:03 advisory lists CVE-2013-2457 as an in-JRE vulnerability in the JMX area affecting OpenJDK 7 and Oracle Java SE 7-era JREs. The description indicates an unspecified vulnerability in the Java Runtime Environment component that allows remote attackers to affect integrit...

CVE-2013-1476

CVE-2013-1476 is an Oracle JRE/OpenJDK-related vulnerability described as unspecified, involving CORBA-related vectors. The IBM/TADDM and IBM JRE security entries confirm this CVE, noting that IBM patched the issue by restricting access to constructors in sensitive CORBA-related classes (and appl...

CVE-2012-5084

CVE-2012-5084 is an unspecified JRE Swing vulnerability affecting Oracle Java SE 7u7 and earlier (also 6u35 and earlier, 5.0u36 and earlier, 1.4.2_38 and earlier). Connected documents confirm advisories tying this CVE to JRE components with potential confidentiality, integrity, and availability i...

CVE-2013-2394

CVE-2013-2394 involves an unspecified vulnerability in the Oracle JRE/JVM components (JRE in Oracle Java SE 7u17 and earlier, Java SE 6u43 and earlier, 5.0u41 and earlier, and JavaFX 2.2.7 and earlier) that could affect confidentiality, integrity, and availability via unknown vectors related to 2...

CVE-2013-2456

CVE-2013-2456 is an Oracle/OpenJDK JRE/OpenJDK vulnerability described as an unspecified issue in the JRE component related to Serialization, with a note that it may involve improper access checks for subclasses in ObjectOutputStream. Connected documentation from MiracleLinux AXSA-2013-553:03 con...

CVE-2013-5802

CVE-2013-5802 : Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier. Existence of vulnerability in the JAXP pathway could affect confiden...

CVE-2012-5073

CVE-2012-5073 is an unspecified vulnerability in the Java Runtime Environment (JRE) component affecting Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier, with impact on integrity via libraries. The linked MiracleLinux AXSA:2012-96...

CVE-2013-2432

CVE-2013-2432 affects the Java Runtime Environment used in IBM WebSphere products when IBM JRE is bundled with WebSphere Application Server. IBM notes this vulnerability (in the Oracle Java CPU April 2013 family) as a high-severity issue with CVSS 10, affecting 2D vectors. The recommended remedia...

CVE-2013-3743

Technical details about CVE-2013-3743 are not publicly available in the provided documents; please monitor for updates.

CVE-2013-2454

CVE-2013-2454 is reported in MiracleLinux 4 via the AXSA:2013-486:05 advisory. OpenJDK/OpenJRE 1.7.0-openjdk-1.7.0.25-2.3.10.3.AXS4 is affected, with an unspecified vulnerability in the JRE component’s JDBC path that can affect confidentiality and integrity (vector not detailed). The Nessus entry...

CVE-2013-5772

CVE-2013-5772 is an unspecified vulnerability in the Java SE component affecting Oracle Java SE 7u40 and earlier and Java SE 6u60 and earlier, with impact to integrity via unknown vectors related to jhat. The Connected IBM/IBM WebSphere/WebSphere Real Time advisories list CVE-2013-5772 among many...

CVE-2012-3143

MiracleLinux AXSA:2012-967:03 indicates CVE-2012-3143 (Unspecified vulnerability in Oracle JRE/JMX) affects MiracleLinux 4 OpenJDK/OpenJDK 1.7.0 runtime via JRE component with impacts to confidentiality, integrity, and availability. The advisory groups CVE-2012-3143 with other JRE-related CVEs as...

CVE-2012-5069

CVE-2012-5069 is an unspecified concurrency-related vulnerability in the Java Runtime Environment (JRE) that affects confidentiality and integrity. It impacts Oracle Java SE 7 Update 7 and earlier, Java SE 6 Update 35 and earlier, and Java SE 5.0 Update 36 and earlier. Exploitation details are no...

CVE-2012-5085

CVE-2012-5085 affects the Java Runtime Environment (JRE) in Oracle Java SE 7u7 and earlier, 6u35 and earlier, 5.0u36 and earlier, and 1.4.2_38 and earlier. It is described as an unspecified remote impact via networking vectors when authenticated, but the Oracle CPU states a 0.0 CVSS score, and th...

CVE-2013-2466

CVE-2013-2466 concerns Oracle Java SE JRE, affecting Java Runtime Environment (JRE) 7 Update 21 and earlier and 6 Update 45 and earlier. The vulnerability is described as unspecified and resides in the Deployment component, enabling remote attackers to affect confidentiality, integrity, and avail...

CVE-2013-5825

CVE-2013-5825 is an unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier. It allows remote attackers to affect availability via vectors re...

CVE-2011-3546

CVE-2011-3546 affects Oracle Java SE JDK/JRE 7, 6 Update 27 and earlier, and JavaFX 2.0. The vulnerability allows remote execution impacting confidentiality and integrity via unknown vectors related to Deployment, exploitable by untrusted Java Web Start applications and untrusted applets. The IBM...

CVE-2012-5071

CVE-2012-5071 is an unspecified vulnerability in the Java Runtime Environment (JRE) related to the JMX subsystem. It affects Oracle Java SE 7 Update 7 and earlier, Java 6 Update 35 and earlier, and 5.0 Update 36 and earlier, including OpenJDK equivalents, with remote attackers able to impact conf...

CVE-2012-5089

Concrete details exist in the connected MiracleLinux advisory: MiracleLinux 4 with java-1.7.0-openjdk-1.7.0.9-2.3.3.AXS4.1 is affected by multiple JRE-related unspecified vulnerabilities, including CVE-2012-5089 (and related CVEs listed by AXSA:2012-967:03). The issues pertain to the Java Runtime...

CVE-2013-5804

CVE-2013-5804 is described as an unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, and JRockit R27.7.6 and earlier, enabling remote attackers to affect confidentiality and integrity via unknown vectors ...

CVE-2012-1720

CVE-2012-1720 is an unspecified local vulnerability in the Java Runtime Environment (JRE) used by Oracle Java SE on Solaris, affecting confidentiality, integrity, and availability via unknown networking-related vectors. The initial entry lists affected Java updates (7u4 and earlier, 6u32 and earl...

CVE-2012-5079

CVE-2012-5079 is an unspecified vulnerability in the Java Runtime Environment (JRE) component of Oracle Java SE 7 Update 7 and earlier (also affected in older 6/5/1.4.2 builds) that could allow remote attackers to affect integrity via unknown vectors related to Libraries. The MiracleLinux AXSA ad...

CVE-2013-2450

CVE-2013-2450 is an unspecified vulnerability in the Java Runtime Environment (JRE) Serialization path reported in MiracleLinux AXSA-2013-553:03. The MiracleLinux advisory indicates affected: MiracleLinux 3 with java-1.6.0-openjdk (OpenJDK 7/6 family as referenced) and lists CVE-2013-1500 through...

CVE-2012-5083

CVE-2012-5083 is an unspecified vulnerability in the Java Runtime Environment (JRE) component across Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, 1.4.2_38 and earlier, and JavaFX 2.2 and earlier, allowing remote attackers to affect confidentiality, in...

CVE-2013-1540

Technical details for CVE-2013-1540 are not provided in the connected documents; no specifics on affected products, root cause, or fixes are available here. Monitor for updates.

CVE-2013-2440

Technical details about CVE-2013-2440 are not provided in the connected documents. The initial description notes JRE deployment issue but lacks affected products, versions, root cause, or fixes.

CVE-2012-1531

CVE-2012-1531 affects Oracle Java SE components: Java Runtime Environment (JRE) up to 7 Update 7, 6 Update 35, 5.0 Update 36, 1.4.2_38, and JavaFX 2.2 and earlier. The vulnerability is described as unspecified and related to 2D in the JRE, allowing remote attackers to affect confidentiality, inte...

CVE-2012-5075

CVE-2012-5075 is an unspecified vulnerability in the Java Runtime Environment (JRE) component of Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier, related to JMX. The vulnerability allows remote attackers to affect confidentiality. Connected advisories...

CVE-2013-1563

Technical details for CVE-2013-1563 are not publicly available in the provided documents; monitor for updates.

CVE-2013-2418

CVE-2013-2418 affects Oracle Java SE 7 (Update 17 and earlier) and Java SE 6 (Update 43 and earlier) JRE deployments. Root cause relates to Deployment; allows local users to impact confidentiality, integrity, and availability via unknown vectors. No specific exploit details or patches are provide...