CVE-2013-2468

Technical details about CVE-2013-2468 are not publicly provided in the supplied documents; no specific affected products, versions, impact, or remediation are present. Monitor for updates.

CVE-2012-5075

CVE-2012-5075 is an unspecified vulnerability in the Java Runtime Environment (JRE) component of Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier, related to JMX. The vulnerability allows remote attackers to affect confidentiality. Connected advisories...

CVE-2013-2418

CVE-2013-2418 affects Oracle Java SE 7 (Update 17 and earlier) and Java SE 6 (Update 43 and earlier) JRE deployments. Root cause relates to Deployment; allows local users to impact confidentiality, integrity, and availability via unknown vectors. No specific exploit details or patches are provide...

CVE-2013-5783

CVE-2013-5783: An unspecified vulnerability in Oracle Java SE Swing affecting confidentiality and integrity. IBM advisories show this CVE in IBM WebSphere Real Time 3.0 Service Refresh 5 and earlier; remediation to 3.0 Service Refresh 6 and later. Other IBM entries also enumerate multiple Java-re...

CVE-2013-5790

CVE-2013-5790 is an unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier that could allow remote attackers to affect confidentiality via vectors related to BEANS. Affected products/versions includ...

CVE-2013-5820

The CVE entry CVE-2013-5820 refers to multiple Java-related vulnerabilities disclosed in Oracle’s October 2013 CPU, affecting Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and related IBM IBM SDK/JRE bundles that ship with WebSphere products. Connected documents describe a range of C...

CVE-2013-2442

CVE-2013-2442 is an unspecified vulnerability in Oracle Java SE JRE deployments affecting Java 7u21 and earlier, and Java 6u45 and earlier. The issue is described as remote, impacting confidentiality, integrity, and availability via unknown vectors related to Deployment, and is distinct from CVE-...

CVE-2012-1711

CVE-2012-1711 is an unspecified CORBA-related vulnerability in the Oracle JRE/JDK stack up to certain older updates (Java SE 7u4-, 6u32-, 5u35-, and 1.4.2_37-). Connected advisories confirm affected OpenJDK/OpenJRE packages (e.g., MiracleLinux AXSA:2012-662; openSUSE SU-2012:0828-1; RHSA/RHELSA e...

CVE-2013-5814

CVE-2013-5814 is an Oracle Java SE vulnerability (affecting Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier) that allows remote attackers to affect confidentiality, integrity, and availability via CORBA-related vectors. The Connected IBM/EO advisories...

CVE-2013-1518

CVE-2013-1518 is an unspecified vulnerability in the Java Runtime Environment (JRE) component of Oracle Java SE (7u17 and earlier; 6u43 and earlier; 5.0u41 and earlier) and in OpenJDK 6/7. The issue allows remote attackers to affect confidentiality, integrity, and availability via vectors related...

CVE-2013-1558

CVE-2013-1558 is a vulnerability in the Java Runtime Environment (JRE) component, described as an unspecified issue that could affect confidentiality, integrity, and availability. Publicly, it is tied to Oracle Java SE 7 Update 17 and earlier and Java SE 6 Update 43 and earlier, with the attack v...

CVE-2013-2433

Technical details about CVE-2013-2433 are not publicly available in the provided Connected documents. The initial description notes an unspecified integrity-related vulnerability in JRE/Java SE but no concrete affected products, versions, vectors, or fixes are detailed here. Monitor for updates.

CVE-2013-5776

CVE-2013-5776 is documented in IBM advisories as an unspecified vulnerability within the Oracle Java Deployment context affecting IBM Java/SDK components. The IBM WebSphere Real Time product line lists it under AFFECTED PRODUCTS AND VERSIONS: IBM WebSphere Real Time 3.0 Service Refresh 5 and earl...

CVE-2013-5840

CVE-2013-5840 is an unspecified vulnerability in Oracle Java SE 7u40 and older, Java SE 6u60 and older, Java SE 5.0u51 and older, and Java SE Embedded 7u40 and older (Libraries) that may allow a remote attacker to affect confidentiality. The description notes unknown vectors and does not provide ...

CVE-2013-5849

CVE-2013-5849 (Oracle Java SE CPU) and related Java vulnerabilities are reflected across IBM product advisories. IBM WebSphere Real Time 3.0 Service Refresh 5 and earlier are affected; remediation requires upgrading to Service Refresh 6 or later. IBM SDK/JAVA in WebSphere Application Server and r...

CVE-2013-5817

CVE-2013-5817 is listed in multiple IBM Java/JRE security advisories tied to Oracle’s October 2013 CPU. IBM bulletins show affected IBM SDK/JAVA editions (5.x/6.x/7.x; WebSphere Real Time, WebSphere Application Server, ITCAM, etc.) and remediation by upgrading to later SDK/JAVA versions or to pat...

CVE-2012-4416

CVE-2012-4416 describes an unspecified vulnerability in the Java Runtime Environment (JRE) component of Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier. It could allow remote attackers to affect confidentiality and integrity via unknown vectors related to Hotspot. The related N...

CVE-2013-2435

Technical details, affected versions, exploit information, and remediation are not publicly available in the provided connected documents; monitor for updates.

CVE-2013-2437

Technical details about CVE-2013-2437 are not publicly available in the provided documents. Monitor for updates from Oracle and OSV entries for any concrete details, affected versions, and remediation.

CVE-2012-5077

CVE-2012-5077 is an unspecified vulnerability in Oracle Java Runtime Environment (JRE) components affecting multiple JREs (Java SE 7u7 and earlier, 6u35 and earlier, 5.0u36 and earlier, 1.4.2_38 and earlier) that could allow remote attackers to compromise confidentiality via unknown vectors relat...

CVE-2013-2445

CVE-2013-2445 is an unspecified vulnerability in the Java Runtime Environment (JRE)/Hotspot affecting availability via unknown vectors, with a note that it may bypass the Java sandbox through memory allocation error handling. Publicly listed affected products include Oracle Java SE 7 Update 21 an...

CVE-2013-2467

CVE-2013-2467 is a Java Runtime Environment (JRE) vulnerability listed in IBM advisories as addressed by upgrading the IBM JRE to 1.7 SR5 or later (or switching to Oracle JRE) for affected IBM products such as Host On-Demand. IBM’s bulletin groups CVE-2013-2467 among many JRE-related flaws fixed ...

CVE-2013-5819

CVE-2013-5819 is an Oracle Java SE vulnerability affecting integrity via unknown Deployment vectors in Oracle Java SE 7u40 and earlier (and Java SE Embedded 7u40 and earlier). Connected IBM advisories show CVE-2013-5819 also tracked in IBM Java SDK/JRE packages with similar Deployment-related imp...

CVE-2012-0504

Technical details for CVE-2012-0504 are not publicly provided in the supplied documents. No affected product/version or root cause is specified here. Monitor for updates in the connected sources.

CVE-2013-5782

CVE-2013-5782 is one of multiple Oracle Java/IBM SDK vulnerabilities disclosed in October 2013 CPU updates. The IBM bulletins enumerate affected IBM SDK/JAVA components (IBM SDK Java Technology Edition versions 5, 6, 7 and associated WebSphere products) and describe the root issue as an unspecifi...

CVE-2013-5789

CVE-2013-5789 is an unspecified remote vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier. It potentially affects confidentiality, integrity and availability via unknown vectors related to Deployment. Connected IBM advisories show thi...

CVE-2013-5850

CVE-2013-5850 is an Oracle Java-related vulnerability referenced across IBM advisories in October 2013 CPU updates. The initial document shows an unspecified vulnerability affecting multiple Java SE/Embedded releases that can allow remote attackers to affect confidentiality, integrity, and availa...

CVE-2013-5774

CVE-2013-5774 is an Oracle Java SE vulnerability (affecting 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, Embedded 7u40 and earlier) that could allow remote attackers to impact integrity via unknown vectors related to Libraries. Connected IBM advisories confirm multiple Java SDK/JRE vul...

CVE-2013-5801

CVE-2013-5801: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier. Affects confidentiality via unknown vectors related to 2D. Exploitation details are not provided in the given documents. IBM se...

CVE-2013-5818

CVE-2013-5818 is part of a broad set of Oracle Java SE and IBM SDK/JRE vulnerabilities disclosed in Oracle’s October 2013 CPU and mirrored in IBM advisories. The connected IBM bulletins enumerate many CVEs (including CVE-2013-5818, CVE-2013-5819, CVE-2013-5820, CVE-2013-5832, CVE-2013-5850, etc.)...

CVE-2012-5086

CVE-2012-5086 is an unspecified vulnerability in the Java Runtime Environment (JRE) component of Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier. The impact is listed as CONFIDENTIALITY, INTEGRITY, and AVAILABILITY through unknown vectors related to Beans, with a CVSS v2 base s...

CVE-2013-5784

CVE-2013-5784 is an Oracle Java SE vulnerability (SCRIPTING vectors) that IBM advisories map to multiple IBM SDK/JAVA deployments. The connected IBM pages show affected products including IBM WebSphere Real Time, IBM SDK/JAVA editions (5/6/7), and IBM Tivoli IT management components, with remedia...

CVE-2013-5824

CVE-2013-5824 is listed in IBM and Oracle-related advisories as an unspecified vulnerability in Oracle Java SE deployments that can impact confidentiality, integrity, and availability via unknown vectors. According to the IBM WebSphere Real Time advisory, affected product is IBM WebSphere Real Ti...

CVE-2013-2439

CVE-2013-2439 affects IBM WebSphere ILOG JRules (v7.1 with IBM JRE) and IBM Operational Decision Manager (v7.5, v8.0, v8.5) shipped with IBM JRE. Root cause not explicitly detailed in the sources, but remediation is available as interim fixes: for JRules V7.1 use 7.1.1.5-WS-BRMS_JDK-WIN-IF024; OD...

CVE-2012-1724

CVE-2012-1724 is described as an unspecified vulnerability in the Oracle Java SE JRE component, related to JAXP, that could allow a remote attacker to affect availability. The affected reference points to Oracle Java SE 7u4 and earlier and 6u32 and earlier. Connected advisories (MiracleLinux AXSA...

CVE-2013-5787

CVE-2013-5787 is an Oracle Java SE vulnerability affecting Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier, with unspecified attack vectors via Deployment that could impact confidentiality, integrity, and availability. Public details in the Initial descri...

CVE-2013-5832

CVE-2013-5832 is an Oracle Java SE vulnerability (Deployment, 7u40 and earlier; 6u60 and earlier; Embedded 7u40 and earlier) with high-severity impact on confidentiality, integrity, and availability. Connected IBM advisories enumerate the same set of Oracle CVEs (e.g., CVE-2013-5456/5457/5458, 40...

CVE-2013-5831

CVE-2013-5831 is part of a cluster of Java-related vulnerabilities disclosed with the Oracle October 2013 CPU. Publicly documented entries (CVE-2013-5456, 5457, 5458, 4041, 5372, 5375, 5843, 5789, 5830, 5829, 5787, 5788, 5824, 5842, 5782, 5817, 5809, 5814, 5832, 5850, 5838, 5802, 5812, 5804, 5783...

CVE-2013-5812

CVE-2013-5812 (Oracle Java 7u40 and earlier, Java 6u60 and earlier, Java Embedded 7u40 and earlier) is listed with unknown vectors affecting confidentiality and availability via Deployment. Connected IBM advisories enumerate a broad set of Oracle Java CVEs (including 5456–5851 variants) affecting...

CVE-2013-5852

CVE-2013-5852 affects Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier. It allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment. The description notes this is a separate vulnerabili...

CVE-2011-3556

CVE-2011-3556 is a remote, RMI-related vulnerability in the Java platform (Oracle Java SE JDK/JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier) that can affect confidentiality, integrity, and availability. Connected sources corrobora...

CVE-2011-3545

CVE-2011-3545 affects multiple Java runtimes: Oracle Java SE/JDK and JRE 6u27 and earlier, 5.0u31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier. The description credits an unspecified vulnerability in the Java Runtime Environment component related to Sound, allowing remote at...

CVE-2010-4476

CVE-2010-4476 concerns the Java Double.parseDouble path in JRE/JDK (Oracle Java SE, OpenJDK, and related bundles), where a crafted string like 2.2250738585072012e-308 can trigger an infinite estimation loop, causing a denial of service. Connected advisories confirm this affects Java runtimes used...

CVE-2013-2461

CVE-2013-2461 is an unspecified vulnerability in the Java Runtime Environment components (Oracle JRE 7 Update 21 and earlier; JRockit/OpenJDK 7; and OpenJDK 7) enabling remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, with a specifi...

CVE-2011-3557

CVE-2011-3557 is reflected in Chainguard entries as vulnerabilities affecting specific OpenJDK/OpenJ9 package variants: openjdk-21-openj9, openjdk-8-openj9, openjdk-11-openj9, and openjdk-17-openj9. The Chainguard data confirms affected packages but provides no details on vulnerability type, root...

CVE-2011-0862

CVE-2011-0862 affects the Java Runtime Environment (JRE) in Oracle Java SE 6 up to update 25, Java SE 5 up to update 29, and Java 1.4.2 up to 1.4.2_31, via unknown 2D-related vectors that could compromise confidentiality, integrity, and availability. The MiracleLinux AXSA:2011-485 advisory notes ...

CVE-2011-3548

CVE-2011-3548 affects Oracle Java SE JDK/JRE: 7, 6 Update 27 and earlier; 5.0 Update 31 and earlier; and 1.4.2_33 and earlier. The vulnerability is described as unspecified, but it allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity,...

CVE-2011-0865

CVE-2011-0865 is described in the provided documents as an unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier, allowing remote untrusted Java Web Start applications and untrusted ...

CVE-2011-0867

CVE-2011-0867 is documented in connected advisories as a vulnerability in the Java Runtime Environment (JRE) component of Oracle Java SE 6 Update 25 and earlier, Java 5.0 Update 29 and earlier, and 1.4.2_31 and earlier. The MiracleLinux AXSA:2011-485 advisory lists CVE-2011-0867 among fixed issue...

CVE-2011-0802

CVE-2011-0802 affects Oracle Java Runtime Environment / JRE components in Java SE 6 (up to update 25) and prior 5.0, and 1.4.2, with remote attackers potentially impacting confidentiality, integrity, and availability via unknown vectors (related to the Sound issue). Public advisories in connected...