CVE-2014-0878
The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM...
CVE-2014-0878 is a medium vulnerability (CVSS 5.8) in Ibm Java Sdk, published November 14, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.09%, the 81st percentile. Fixed in java-1.7.0-ibm 1:1.7.0.7.0-1jpp.1.el5_10.
The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the random number generator's output.
Exploit likelihood
What each source reports
NVD Score used
5.8
The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the random number generator's output.
- Record
CVE-2014-0878- CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:N - Weakness
- CWE-310
- Updated
- 2026-11-02
CVE List No score
The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the random number generator's output.
- Record
CVE-2014-0878- Updated
- 2026-11-02
EUVDEUVD-2014-0908 No score
The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the random number generator's output.
- Record
EUVD-2014-0908- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v5qx-wfhq-jh75 No score
The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM...
The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7 before Service Refresh 7, and 7R1 before Service Refresh 1 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the random number generator's output.
- Record
GHSA-v5qx-wfhq-jh75- Updated
- 2026-11-02
OSVSUSE-SU-2015:0343-1 No score
Security update for IBM Java
java-1_7_0-ibm has been updated to version 1.7.0_sr7.2 to fix 21 security issues.
These security issues have been fixed:
* Unspecified vulnerability (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
products, uses nondeterministic CBC padding, which makes it easier
for man-in-the-middle attackers to obtain cleartext data via a
padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via vectors related to
AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
remote attackers to affect confidentiality, integrity, and
availability via unknown vectors (CVE-2014-6456).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
(CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
(CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Firefox, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows local users to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment
(CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Internet Explorer, allows local users to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
remote attackers to affect integrity via unknown vectors related to
Deployment, a different vulnerability than CVE-2014-6527
(CVE-2014-6476).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect integrity via unknown vectors
related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20 allows remote attackers to affect confidentiality via unknown
vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality via unknown vectors related to Libraries
(CVE-2014-6531).
* Unspecified…
- Record
SUSE-SU-2015:0343-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0343-2 No score
Security update for IBM Java
java-1_6_0-ibm has been updated to version 1.6.0_sr16.2 to fix 18 security issues.
These security issues have been fixed:
* Unspecified vulnerability in Oracle Java SE 6u81 (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
products, uses nondeterministic CBC padding, which makes it easier
for man-in-the-middle attackers to obtain cleartext data via a
padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via vectors related to
AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
(CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
(CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Firefox, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows local users to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment
(CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Internet Explorer, allows local users to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect integrity via unknown vectors
related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20 allows remote attackers to affect confidentiality via unknown
vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality via unknown vectors related to Libraries
(CVE-2014-6531).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows
remote attackers to affect integrity via unknown vectors related to
Libraries (CVE-2014-6512).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows
remote…
- Record
SUSE-SU-2015:0343-2- Updated
- 2026-11-02
Show 6 moreShow less
OSVSUSE-SU-2015:0344-1 No score
Security update for IBM Java 7
IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.
More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/
Security Issue references:
* CVE-2013-5458
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
…
- Record
SUSE-SU-2015:0344-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0392-1 No score
Security update for IBM Java 6
IBM Java 6 SR15 has been released and fixes lots of bugs and security issues.
More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/
Security Issue references:
* CVE-2013-5458
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
…
- Record
SUSE-SU-2015:0392-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1086-1 No score
Security update for IBM Java 6
IBM Java 6 SR15 has been released and fixes lots of bugs and security issues.
More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/
Security Issue references:
* CVE-2013-5458
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
…
- Record
SUSE-SU-2015:1086-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1086-2 No score
Security update for IBM Java
java-1_6_0-ibm has been updated to version 1.6.0_sr16.2 to fix 18 security issues.
These security issues has been fixed:
* Unspecified vulnerability in Oracle Java SE 6u81 (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
products, uses nondeterministic CBC padding, which makes it easier
for man-in-the-middle attackers to obtain cleartext data via a
padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via vectors related to
AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
(CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
(CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Firefox, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows local users to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment
(CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Internet Explorer, allows local users to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect integrity via unknown vectors
related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20 allows remote attackers to affect confidentiality via unknown
vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality via unknown vectors related to Libraries
(CVE-2014-6531).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows
remote attackers to affect integrity via unknown vectors related to
Libraries (CVE-2014-6512).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows
remote…
- Record
SUSE-SU-2015:1086-2- Updated
- 2026-11-02
OSVSUSE-SU-2015:1086-3 No score
Security update for IBM Java 7
IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.
More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/
Security Issue references:
* CVE-2013-5458
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
…
- Record
SUSE-SU-2015:1086-3- Updated
- 2026-11-02
OSVSUSE-SU-2015:1086-4 No score
Security update for IBM Java
java-1_7_0-ibm has been updated to version 1.7.0_sr7.2 to fix 21 security issues.
These security issues have been fixed:
* Unspecified vulnerability (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
products, uses nondeterministic CBC padding, which makes it easier
for man-in-the-middle attackers to obtain cleartext data via a
padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via vectors related to
AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
remote attackers to affect confidentiality, integrity, and
availability via unknown vectors (CVE-2014-6456).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
(CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
(CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Firefox, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows local users to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment
(CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Internet Explorer, allows local users to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
remote attackers to affect integrity via unknown vectors related to
Deployment, a different vulnerability than CVE-2014-6527
(CVE-2014-6476).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect integrity via unknown vectors
related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20 allows remote attackers to affect confidentiality via unknown
vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality via unknown vectors related to Libraries
(CVE-2014-6531).
* Unspecified…
- Record
SUSE-SU-2015:1086-4- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.7.0.7.0-1jpp.1.el5_10 | 1:1.7.0.7.0-1jpp.1.el5_10 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.7.0.7.0-1jpp.1.el5_10 | 1:1.7.0.7.0-1jpp.1.el5_10 |
java-1.7.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.7.0.7.0-1jpp.1.el5_10 | 1:1.7.0.7.0-1jpp.1.el5_10 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.7.0.7.0-1jpp.1.el5_10 | 1:1.7.0.7.0-1jpp.1.el5_10 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.7.0.7.0-1jpp.1.el5_10 | 1:1.7.0.7.0-1jpp.1.el5_10 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.7.0.7.0-1jpp.1.el5_10 | 1:1.7.0.7.0-1jpp.1.el5_10 |
java-1.7.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.7.0.7.0-1jpp.1.el5_10 | 1:1.7.0.7.0-1jpp.1.el5_10 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.7.0.7.0-1jpp.1.el5_10 | 1:1.7.0.7.0-1jpp.1.el5_10 |
java-1.7.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.7.0.7.0-1jpp.1.el5_10 | 1:1.7.0.7.0-1jpp.1.el5_10 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.7.0.7.0-1jpp.1.el5_10 | 1:1.7.0.7.0-1jpp.1.el5_10 |
Show 72 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.7.0.7.0-1jpp.1.el5_10 | 1:1.7.0.7.0-1jpp.1.el5_10 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.7.0.7.0-1jpp.1.el5_10 | 1:1.7.0.7.0-1jpp.1.el5_10 |
java-1.7.0-ibmRed Hat:rhel_extras:6 |
before 1:1.7.0.7.0-1jpp.1.el6_5 | 1:1.7.0.7.0-1jpp.1.el6_5 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:6 |
before 1:1.7.0.7.0-1jpp.1.el6_5 | 1:1.7.0.7.0-1jpp.1.el6_5 |
java-1.7.0-ibm-develRed Hat:rhel_extras:6 |
before 1:1.7.0.7.0-1jpp.1.el6_5 | 1:1.7.0.7.0-1jpp.1.el6_5 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:6 |
before 1:1.7.0.7.0-1jpp.1.el6_5 | 1:1.7.0.7.0-1jpp.1.el6_5 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:6 |
before 1:1.7.0.7.0-1jpp.1.el6_5 | 1:1.7.0.7.0-1jpp.1.el6_5 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:6 |
before 1:1.7.0.7.0-1jpp.1.el6_5 | 1:1.7.0.7.0-1jpp.1.el6_5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.6.0.16.0-1jpp.1.el5_10 | 1:1.6.0.16.0-1jpp.1.el5_10 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client |
before 1:1.6.0.16.0-1jpp.1.el5_10 | 1:1.6.0.16.0-1jpp.1.el5_10 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.16.0-1jpp.1.el5_10 | 1:1.6.0.16.0-1jpp.1.el5_10 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.16.0-1jpp.1.el5_10 | 1:1.6.0.16.0-1jpp.1.el5_10 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client |
before 1:1.6.0.16.0-1jpp.1.el5_10 | 1:1.6.0.16.0-1jpp.1.el5_10 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.16.0-1jpp.1.el5_10 | 1:1.6.0.16.0-1jpp.1.el5_10 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.16.0-1jpp.1.el5_10 | 1:1.6.0.16.0-1jpp.1.el5_10 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.16.0-1jpp.1.el5_10 | 1:1.6.0.16.0-1jpp.1.el5_10 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.6.0.16.0-1jpp.1.el5_10 | 1:1.6.0.16.0-1jpp.1.el5_10 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.6.0.16.0-1jpp.1.el5_10 | 1:1.6.0.16.0-1jpp.1.el5_10 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.16.0-1jpp.1.el5_10 | 1:1.6.0.16.0-1jpp.1.el5_10 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.16.0-1jpp.1.el5_10 | 1:1.6.0.16.0-1jpp.1.el5_10 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.6.0.16.0-1jpp.1.el5_10 | 1:1.6.0.16.0-1jpp.1.el5_10 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.16.0-1jpp.1.el5_10 | 1:1.6.0.16.0-1jpp.1.el5_10 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.16.0-1jpp.1.el5_10 | 1:1.6.0.16.0-1jpp.1.el5_10 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.16.0-1jpp.1.el5_10 | 1:1.6.0.16.0-1jpp.1.el5_10 |
java-1.6.0-ibmRed Hat:rhel_extras:6 |
before 1:1.6.0.16.0-1jpp.1.el6_5 | 1:1.6.0.16.0-1jpp.1.el6_5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:6 |
before 1:1.6.0.16.0-1jpp.1.el6_5 | 1:1.6.0.16.0-1jpp.1.el6_5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:6 |
before 1:1.6.0.16.0-1jpp.1.el6_5 | 1:1.6.0.16.0-1jpp.1.el6_5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:6 |
before 1:1.6.0.16.0-1jpp.1.el6_5 | 1:1.6.0.16.0-1jpp.1.el6_5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:6 |
before 1:1.6.0.16.0-1jpp.1.el6_5 | 1:1.6.0.16.0-1jpp.1.el6_5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:6 |
before 1:1.6.0.16.0-1jpp.1.el6_5 | 1:1.6.0.16.0-1jpp.1.el6_5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:6 |
before 1:1.6.0.16.0-1jpp.1.el6_5 | 1:1.6.0.16.0-1jpp.1.el6_5 |
java-1.5.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.5.0.16.6-1jpp.1.el5_10 | 1:1.5.0.16.6-1jpp.1.el5_10 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::client |
before 1:1.5.0.16.6-1jpp.1.el5_10 | 1:1.5.0.16.6-1jpp.1.el5_10 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.5.0.16.6-1jpp.1.el5_10 | 1:1.5.0.16.6-1jpp.1.el5_10 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.5.0.16.6-1jpp.1.el5_10 | 1:1.5.0.16.6-1jpp.1.el5_10 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::client |
before 1:1.5.0.16.6-1jpp.1.el5_10 | 1:1.5.0.16.6-1jpp.1.el5_10 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.5.0.16.6-1jpp.1.el5_10 | 1:1.5.0.16.6-1jpp.1.el5_10 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.5.0.16.6-1jpp.1.el5_10 | 1:1.5.0.16.6-1jpp.1.el5_10 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.5.0.16.6-1jpp.1.el5_10 | 1:1.5.0.16.6-1jpp.1.el5_10 |
java-1.5.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.5.0.16.6-1jpp.1.el5_10 | 1:1.5.0.16.6-1jpp.1.el5_10 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.5.0.16.6-1jpp.1.el5_10 | 1:1.5.0.16.6-1jpp.1.el5_10 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.5.0.16.6-1jpp.1.el5_10 | 1:1.5.0.16.6-1jpp.1.el5_10 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.5.0.16.6-1jpp.1.el5_10 | 1:1.5.0.16.6-1jpp.1.el5_10 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.5.0.16.6-1jpp.1.el5_10 | 1:1.5.0.16.6-1jpp.1.el5_10 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.5.0.16.6-1jpp.1.el5_10 | 1:1.5.0.16.6-1jpp.1.el5_10 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.5.0.16.6-1jpp.1.el5_10 | 1:1.5.0.16.6-1jpp.1.el5_10 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.5.0.16.6-1jpp.1.el5_10 | 1:1.5.0.16.6-1jpp.1.el5_10 |
java-1.5.0-ibmRed Hat:rhel_extras:6 |
before 1:1.5.0.16.6-1jpp.1.el6_5 | 1:1.5.0.16.6-1jpp.1.el6_5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:6 |
before 1:1.5.0.16.6-1jpp.1.el6_5 | 1:1.5.0.16.6-1jpp.1.el6_5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:6 |
before 1:1.5.0.16.6-1jpp.1.el6_5 | 1:1.5.0.16.6-1jpp.1.el6_5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:6 |
before 1:1.5.0.16.6-1jpp.1.el6_5 | 1:1.5.0.16.6-1jpp.1.el6_5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:6 |
before 1:1.5.0.16.6-1jpp.1.el6_5 | 1:1.5.0.16.6-1jpp.1.el6_5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:6 |
before 1:1.5.0.16.6-1jpp.1.el6_5 | 1:1.5.0.16.6-1jpp.1.el6_5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:6 |
before 1:1.5.0.16.6-1jpp.1.el6_5 | 1:1.5.0.16.6-1jpp.1.el6_5 |
java-1.7.1-ibmRed Hat:rhel_extras:7 |
before 1:1.7.1.1.0-1jpp.2.el7_0 | 1:1.7.1.1.0-1jpp.2.el7_0 |
java-1.7.1-ibm-demoRed Hat:rhel_extras:7 |
before 1:1.7.1.1.0-1jpp.2.el7_0 | 1:1.7.1.1.0-1jpp.2.el7_0 |
java-1.7.1-ibm-develRed Hat:rhel_extras:7 |
before 1:1.7.1.1.0-1jpp.2.el7_0 | 1:1.7.1.1.0-1jpp.2.el7_0 |
java-1.7.1-ibm-jdbcRed Hat:rhel_extras:7 |
before 1:1.7.1.1.0-1jpp.2.el7_0 | 1:1.7.1.1.0-1jpp.2.el7_0 |
java-1.7.1-ibm-pluginRed Hat:rhel_extras:7 |
before 1:1.7.1.1.0-1jpp.2.el7_0 | 1:1.7.1.1.0-1jpp.2.el7_0 |
java-1.7.1-ibm-srcRed Hat:rhel_extras:7 |
before 1:1.7.1.1.0-1jpp.2.el7_0 | 1:1.7.1.1.0-1jpp.2.el7_0 |
java-1.6.0-ibmRed Hat:network_satellite:5.4::el5 |
before 1:1.6.0.16.0-1jpp.1.el5 | 1:1.6.0.16.0-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.4::el5 |
before 1:1.6.0.16.0-1jpp.1.el5 | 1:1.6.0.16.0-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:network_satellite:5.5::el5 |
before 1:1.6.0.16.0-1jpp.1.el5 | 1:1.6.0.16.0-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.5::el5 |
before 1:1.6.0.16.0-1jpp.1.el5 | 1:1.6.0.16.0-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:network_satellite:5.6::el5 |
before 1:1.6.0.16.0-1jpp.1.el5 | 1:1.6.0.16.0-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.6::el5 |
before 1:1.6.0.16.0-1jpp.1.el5 | 1:1.6.0.16.0-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:network_satellite:5.5::el6 |
before 1:1.6.0.16.0-1jpp.1.el6 | 1:1.6.0.16.0-1jpp.1.el6 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.5::el6 |
before 1:1.6.0.16.0-1jpp.1.el6 | 1:1.6.0.16.0-1jpp.1.el6 |
java-1.6.0-ibmRed Hat:network_satellite:5.6::el6 |
before 1:1.6.0.16.0-1jpp.1.el6 | 1:1.6.0.16.0-1jpp.1.el6 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.6::el6 |
before 1:1.6.0.16.0-1jpp.1.el6 | 1:1.6.0.16.0-1jpp.1.el6 |
java-1.6.0-ibmRed Hat:network_satellite:5.4::el6 |
before 1:1.6.0.16.0-1jpp.1.el6 | 1:1.6.0.16.0-1jpp.1.el6 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.4::el6 |
before 1:1.6.0.16.0-1jpp.1.el6 | 1:1.6.0.16.0-1jpp.1.el6 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
secunia.com/advisories/59022
www-01.ibm.com/support/docview.wss?uid=swg21680750
www-01.ibm.com/support/docview.wss?uid=swg21679610
www-01.ibm.com/support/docview.wss?uid=swg21676672
secunia.com/advisories/59058
secunia.com/advisories/61264
Show 194 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/91084
www-01.ibm.com/support/docview.wss?uid=swg21689593
www-01.ibm.com/support/docview.wss?uid=swg21681256
www-01.ibm.com/support/docview.wss?uid=swg21674539
www-01.ibm.com/support/docview.wss?uid=swg21686717
www-01.ibm.com/support/docview.wss?uid=swg21683484
www-01.ibm.com/support/docview.wss?uid=swg21673836
ibm.com/support/docview.wss?uid=swg21677387
secunia.com/advisories/59023
www-01.ibm.com/support/docview.wss?uid=swg21676746
www-01.ibm.com/support/docview.wss?uid=swg21672043
securityfocus.com/bid/67601
www-01.ibm.com/support/docview.wss?uid=swg21679713
ibm.com/support/docview.wss?uid=swg21675343
www-01.ibm.com/support/docview.wss?uid=swg21676703
ibm.com/support/docview.wss?uid=swg21675588
nvd.nist.gov/vuln/detail/CVE-2014-0878
github.com/advisories/GHSA-v5qx-wfhq-jh75
access.redhat.com/errata/RHSA-2014:0486
access.redhat.com/security/updates/classification
ibm.com/developerworks/java/jdk/alerts
bugzilla.redhat.com/show_bug.cgi?id=1031734
bugzilla.redhat.com/show_bug.cgi?id=1045561
bugzilla.redhat.com/show_bug.cgi?id=1060907
bugzilla.redhat.com/show_bug.cgi?id=1086632
bugzilla.redhat.com/show_bug.cgi?id=1086645
bugzilla.redhat.com/show_bug.cgi?id=1087409
bugzilla.redhat.com/show_bug.cgi?id=1087411
bugzilla.redhat.com/show_bug.cgi?id=1087417
bugzilla.redhat.com/show_bug.cgi?id=1087424
bugzilla.redhat.com/show_bug.cgi?id=1087426
bugzilla.redhat.com/show_bug.cgi?id=1087427
bugzilla.redhat.com/show_bug.cgi?id=1087428
bugzilla.redhat.com/show_bug.cgi?id=1087430
bugzilla.redhat.com/show_bug.cgi?id=1087431
bugzilla.redhat.com/show_bug.cgi?id=1087434
bugzilla.redhat.com/show_bug.cgi?id=1087436
bugzilla.redhat.com/show_bug.cgi?id=1087438
bugzilla.redhat.com/show_bug.cgi?id=1087439
bugzilla.redhat.com/show_bug.cgi?id=1087440
bugzilla.redhat.com/show_bug.cgi?id=1087441
bugzilla.redhat.com/show_bug.cgi?id=1087442
bugzilla.redhat.com/show_bug.cgi?id=1087444
bugzilla.redhat.com/show_bug.cgi?id=1088024
bugzilla.redhat.com/show_bug.cgi?id=1088025
bugzilla.redhat.com/show_bug.cgi?id=1088027
bugzilla.redhat.com/show_bug.cgi?id=1088028
bugzilla.redhat.com/show_bug.cgi?id=1088030
bugzilla.redhat.com/show_bug.cgi?id=1088031
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0486.json
access.redhat.com/security/cve/CVE-2013-6629
cve.org/CVERecord?id=CVE-2013-6629
nvd.nist.gov/vuln/detail/CVE-2013-6629
access.redhat.com/security/cve/CVE-2013-6954
cve.org/CVERecord?id=CVE-2013-6954
nvd.nist.gov/vuln/detail/CVE-2013-6954
access.redhat.com/security/cve/CVE-2014-0429
cve.org/CVERecord?id=CVE-2014-0429
nvd.nist.gov/vuln/detail/CVE-2014-0429
oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
access.redhat.com/security/cve/CVE-2014-0446
cve.org/CVERecord?id=CVE-2014-0446
nvd.nist.gov/vuln/detail/CVE-2014-0446
access.redhat.com/security/cve/CVE-2014-0448
cve.org/CVERecord?id=CVE-2014-0448
nvd.nist.gov/vuln/detail/CVE-2014-0448
access.redhat.com/security/cve/CVE-2014-0449
cve.org/CVERecord?id=CVE-2014-0449
nvd.nist.gov/vuln/detail/CVE-2014-0449
access.redhat.com/security/cve/CVE-2014-0451
cve.org/CVERecord?id=CVE-2014-0451
nvd.nist.gov/vuln/detail/CVE-2014-0451
access.redhat.com/security/cve/CVE-2014-0452
cve.org/CVERecord?id=CVE-2014-0452
nvd.nist.gov/vuln/detail/CVE-2014-0452
access.redhat.com/security/cve/CVE-2014-0453
cve.org/CVERecord?id=CVE-2014-0453
nvd.nist.gov/vuln/detail/CVE-2014-0453
access.redhat.com/security/cve/CVE-2014-0454
cve.org/CVERecord?id=CVE-2014-0454
nvd.nist.gov/vuln/detail/CVE-2014-0454
access.redhat.com/security/cve/CVE-2014-0455
cve.org/CVERecord?id=CVE-2014-0455
nvd.nist.gov/vuln/detail/CVE-2014-0455
access.redhat.com/security/cve/CVE-2014-0457
cve.org/CVERecord?id=CVE-2014-0457
nvd.nist.gov/vuln/detail/CVE-2014-0457
access.redhat.com/security/cve/CVE-2014-0458
cve.org/CVERecord?id=CVE-2014-0458
nvd.nist.gov/vuln/detail/CVE-2014-0458
access.redhat.com/security/cve/CVE-2014-0459
cve.org/CVERecord?id=CVE-2014-0459
nvd.nist.gov/vuln/detail/CVE-2014-0459
access.redhat.com/security/cve/CVE-2014-0460
cve.org/CVERecord?id=CVE-2014-0460
nvd.nist.gov/vuln/detail/CVE-2014-0460
access.redhat.com/security/cve/CVE-2014-0461
cve.org/CVERecord?id=CVE-2014-0461
nvd.nist.gov/vuln/detail/CVE-2014-0461
access.redhat.com/security/cve/CVE-2014-0878
cve.org/CVERecord?id=CVE-2014-0878
access.redhat.com/security/cve/CVE-2014-1876
cve.org/CVERecord?id=CVE-2014-1876
nvd.nist.gov/vuln/detail/CVE-2014-1876
access.redhat.com/security/cve/CVE-2014-2398
cve.org/CVERecord?id=CVE-2014-2398
nvd.nist.gov/vuln/detail/CVE-2014-2398
access.redhat.com/security/cve/CVE-2014-2401
cve.org/CVERecord?id=CVE-2014-2401
nvd.nist.gov/vuln/detail/CVE-2014-2401
access.redhat.com/security/cve/CVE-2014-2402
cve.org/CVERecord?id=CVE-2014-2402
nvd.nist.gov/vuln/detail/CVE-2014-2402
access.redhat.com/security/cve/CVE-2014-2409
cve.org/CVERecord?id=CVE-2014-2409
nvd.nist.gov/vuln/detail/CVE-2014-2409
access.redhat.com/security/cve/CVE-2014-2412
cve.org/CVERecord?id=CVE-2014-2412
nvd.nist.gov/vuln/detail/CVE-2014-2412
access.redhat.com/security/cve/CVE-2014-2414
cve.org/CVERecord?id=CVE-2014-2414
nvd.nist.gov/vuln/detail/CVE-2014-2414
access.redhat.com/security/cve/CVE-2014-2420
cve.org/CVERecord?id=CVE-2014-2420
nvd.nist.gov/vuln/detail/CVE-2014-2420
access.redhat.com/security/cve/CVE-2014-2421
cve.org/CVERecord?id=CVE-2014-2421
nvd.nist.gov/vuln/detail/CVE-2014-2421
cve.org/CVERecord?id=CVE-2014-2423
nvd.nist.gov/vuln/detail/CVE-2014-2423
cve.org/CVERecord?id=CVE-2014-2427
nvd.nist.gov/vuln/detail/CVE-2014-2427
nvd.nist.gov/vuln/detail/CVE-2014-2428
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0508.json
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0509.json
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0705.json
oracle.com/technetwork/topics/security/cpujan2014-1972949.html
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0982.json
suse.com/support/update/announcement/2015/suse-su-20150343-1
bugzilla.suse.com/592934
bugzilla.suse.com/817062
bugzilla.suse.com/819285
bugzilla.suse.com/819288
bugzilla.suse.com/823034
bugzilla.suse.com/829212
bugzilla.suse.com/849212
bugzilla.suse.com/861782
bugzilla.suse.com/862064
bugzilla.suse.com/877429
bugzilla.suse.com/891701
bugzilla.suse.com/904889
bugzilla.suse.com/912434
bugzilla.suse.com/912447
bugzilla.suse.com/916265
bugzilla.suse.com/916266
bugzilla.suse.com/930365
bugzilla.suse.com/931702
suse.com/security/cve/CVE-2013-0401
suse.com/security/cve/CVE-2013-1491
suse.com/security/cve/CVE-2013-1537
suse.com/security/cve/CVE-2013-1540
suse.com/security/cve/CVE-2013-1557
suse.com/security/cve/CVE-2013-1563
suse.com/security/cve/CVE-2013-1569
suse.com/security/cve/CVE-2013-2383
suse.com/security/cve/CVE-2013-2384
suse.com/security/cve/CVE-2013-2394
suse.com/security/cve/CVE-2013-2400
suse.com/security/cve/CVE-2013-2407
suse.com/security/cve/CVE-2013-2417
suse.com/security/cve/CVE-2013-2418
suse.com/security/cve/CVE-2013-2419
suse.com/security/cve/CVE-2013-2420
suse.com/security/cve/CVE-2013-2422
suse.com/security/cve/CVE-2013-2424
suse.com/security/cve/CVE-2013-2429
suse.com/security/cve/CVE-2013-2430
suse.com/security/cve/CVE-2013-2432
suse.com/security/cve/CVE-2013-2433
suse.com/security/cve/CVE-2013-2435
suse.com/security/cve/CVE-2013-2440
suse.com/security/cve/CVE-2013-2442
suse.com/security/cve/CVE-2013-2448
suse.com/security/cve/CVE-2013-2453
bugzilla.suse.com/877430
bugzilla.suse.com/891700
bugzilla.suse.com/772640
bugzilla.suse.com/780897
bugzilla.suse.com/788750
bugzilla.suse.com/798535
bugzilla.suse.com/813939
bugzilla.suse.com/901223
bugzilla.suse.com/901239
bugzilla.suse.com/666744
Left out here: 394 references and the rest of 8 source descriptions. The JSON record has them.