CVE-2012-0551
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and...
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Container or Deployment.
Exploit likelihood
What each source reports
NVD Score used
5.8
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Container or Deployment.
- Record
CVE-2012-0551- CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Container or Deployment.
- Record
CVE-2012-0551- Updated
- 2026-11-02
EUVDEUVD-2012-0583 No score
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Container or Deployment.
- Record
EUVD-2012-0583- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mc32-mvw8-hcj8 No score
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and...
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Container or Deployment.
- Record
GHSA-mc32-mvw8-hcj8- Updated
- 2026-11-02
OSVSUSE-SU-2015:0344-1 No score
Security update for IBM Java 7
IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.
More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/
Security Issue references:
* CVE-2013-5458
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
…
- Record
SUSE-SU-2015:0344-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0392-1 No score
Security update for IBM Java 6
IBM Java 6 SR15 has been released and fixes lots of bugs and security issues.
More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/
Security Issue references:
* CVE-2013-5458
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
…
- Record
SUSE-SU-2015:0392-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1086-1 No score
Security update for IBM Java 6
IBM Java 6 SR15 has been released and fixes lots of bugs and security issues.
More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/
Security Issue references:
* CVE-2013-5458
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
…
- Record
SUSE-SU-2015:1086-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1086-3 No score
Security update for IBM Java 7
IBM Java 7 SR6 has been released and fixes lots of bugs and security issues.
More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ http://www.ibm.com/developerworks/java/jdk/alerts/
Security Issue references:
* CVE-2013-5458
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458>
* CVE-2013-5456
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456>
* CVE-2013-5457
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457>
* CVE-2013-4041
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041>
* CVE-2013-5375
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375>
* CVE-2013-5372
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372>
* CVE-2013-5843
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843>
* CVE-2013-5789
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789>
* CVE-2013-5830
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830>
* CVE-2013-5829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829>
* CVE-2013-5787
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787>
* CVE-2013-5788
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788>
* CVE-2013-5824
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824>
* CVE-2013-5842
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842>
* CVE-2013-5782
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782>
* CVE-2013-5817
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817>
* CVE-2013-5809
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809>
* CVE-2013-5814
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814>
* CVE-2013-5832
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832>
* CVE-2013-5850
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850>
* CVE-2013-5838
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838>
* CVE-2013-5802
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802>
* CVE-2013-5812
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812>
* CVE-2013-5804
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804>
* CVE-2013-5783
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783>
* CVE-2013-3829
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829>
* CVE-2013-5823
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823>
* CVE-2013-5831
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831>
* CVE-2013-5820
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820>
* CVE-2013-5819
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819>
* CVE-2013-5818
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818>
* CVE-2013-5848
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848>
* CVE-2013-5776
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776>
* CVE-2013-5774
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774>
* CVE-2013-5825
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825>
* CVE-2013-5840
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840>
* CVE-2013-5801
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801>
* CVE-2013-5778
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778>
* CVE-2013-5851
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851>
* CVE-2013-5800
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800>
* CVE-2013-5784
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784>
* CVE-2013-5849
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849>
* CVE-2013-5790
…
- Record
SUSE-SU-2015:1086-3- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sunRed Hat:rhel_extras:5::client |
before 1:1.6.0.33-1jpp.1.el5_8 | 1:1.6.0.33-1jpp.1.el5_8 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.33-1jpp.1.el5_8 | 1:1.6.0.33-1jpp.1.el5_8 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.33-1jpp.1.el5_8 | 1:1.6.0.33-1jpp.1.el5_8 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.33-1jpp.1.el5_8 | 1:1.6.0.33-1jpp.1.el5_8 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.33-1jpp.1.el5_8 | 1:1.6.0.33-1jpp.1.el5_8 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.33-1jpp.1.el5_8 | 1:1.6.0.33-1jpp.1.el5_8 |
java-1.6.0-sunRed Hat:rhel_extras:5::server |
before 1:1.6.0.33-1jpp.1.el5_8 | 1:1.6.0.33-1jpp.1.el5_8 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.33-1jpp.1.el5_8 | 1:1.6.0.33-1jpp.1.el5_8 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.33-1jpp.1.el5_8 | 1:1.6.0.33-1jpp.1.el5_8 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.33-1jpp.1.el5_8 | 1:1.6.0.33-1jpp.1.el5_8 |
Show 50 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.33-1jpp.1.el5_8 | 1:1.6.0.33-1jpp.1.el5_8 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.33-1jpp.1.el5_8 | 1:1.6.0.33-1jpp.1.el5_8 |
java-1.6.0-sunRed Hat:rhel_extras:6 |
before 1:1.6.0.33-1jpp.1.el6_2 | 1:1.6.0.33-1jpp.1.el6_2 |
java-1.6.0-sun-demoRed Hat:rhel_extras:6 |
before 1:1.6.0.33-1jpp.1.el6_2 | 1:1.6.0.33-1jpp.1.el6_2 |
java-1.6.0-sun-develRed Hat:rhel_extras:6 |
before 1:1.6.0.33-1jpp.1.el6_2 | 1:1.6.0.33-1jpp.1.el6_2 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:6 |
before 1:1.6.0.33-1jpp.1.el6_2 | 1:1.6.0.33-1jpp.1.el6_2 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:6 |
before 1:1.6.0.33-1jpp.1.el6_2 | 1:1.6.0.33-1jpp.1.el6_2 |
java-1.6.0-sun-srcRed Hat:rhel_extras:6 |
before 1:1.6.0.33-1jpp.1.el6_2 | 1:1.6.0.33-1jpp.1.el6_2 |
java-1.7.0-oracleRed Hat:rhel_extras:6 |
before 1:1.7.0.5-1jpp.1.el6 | 1:1.7.0.5-1jpp.1.el6 |
java-1.7.0-oracle-develRed Hat:rhel_extras:6 |
before 1:1.7.0.5-1jpp.1.el6 | 1:1.7.0.5-1jpp.1.el6 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras:6 |
before 1:1.7.0.5-1jpp.1.el6 | 1:1.7.0.5-1jpp.1.el6 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras:6 |
before 1:1.7.0.5-1jpp.1.el6 | 1:1.7.0.5-1jpp.1.el6 |
java-1.7.0-oracle-srcRed Hat:rhel_extras:6 |
before 1:1.7.0.5-1jpp.1.el6 | 1:1.7.0.5-1jpp.1.el6 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.6.0.11.0-1jpp.1.el5_8 | 1:1.6.0.11.0-1jpp.1.el5_8 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client |
before 1:1.6.0.11.0-1jpp.1.el5_8 | 1:1.6.0.11.0-1jpp.1.el5_8 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.11.0-1jpp.1.el5_8 | 1:1.6.0.11.0-1jpp.1.el5_8 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.11.0-1jpp.1.el5_8 | 1:1.6.0.11.0-1jpp.1.el5_8 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client |
before 1:1.6.0.11.0-1jpp.1.el5_8 | 1:1.6.0.11.0-1jpp.1.el5_8 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.11.0-1jpp.1.el5_8 | 1:1.6.0.11.0-1jpp.1.el5_8 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.11.0-1jpp.1.el5_8 | 1:1.6.0.11.0-1jpp.1.el5_8 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.11.0-1jpp.1.el5_8 | 1:1.6.0.11.0-1jpp.1.el5_8 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.6.0.11.0-1jpp.1.el5_8 | 1:1.6.0.11.0-1jpp.1.el5_8 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.6.0.11.0-1jpp.1.el5_8 | 1:1.6.0.11.0-1jpp.1.el5_8 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.11.0-1jpp.1.el5_8 | 1:1.6.0.11.0-1jpp.1.el5_8 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.11.0-1jpp.1.el5_8 | 1:1.6.0.11.0-1jpp.1.el5_8 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.6.0.11.0-1jpp.1.el5_8 | 1:1.6.0.11.0-1jpp.1.el5_8 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.11.0-1jpp.1.el5_8 | 1:1.6.0.11.0-1jpp.1.el5_8 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.11.0-1jpp.1.el5_8 | 1:1.6.0.11.0-1jpp.1.el5_8 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.11.0-1jpp.1.el5_8 | 1:1.6.0.11.0-1jpp.1.el5_8 |
java-1.6.0-ibmRed Hat:rhel_extras:6 |
before 1:1.6.0.11.0-1jpp.1.el6_3 | 1:1.6.0.11.0-1jpp.1.el6_3 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:6 |
before 1:1.6.0.11.0-1jpp.1.el6_3 | 1:1.6.0.11.0-1jpp.1.el6_3 |
java-1.6.0-ibm-develRed Hat:rhel_extras:6 |
before 1:1.6.0.11.0-1jpp.1.el6_3 | 1:1.6.0.11.0-1jpp.1.el6_3 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:6 |
before 1:1.6.0.11.0-1jpp.1.el6_3 | 1:1.6.0.11.0-1jpp.1.el6_3 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:6 |
before 1:1.6.0.11.0-1jpp.1.el6_3 | 1:1.6.0.11.0-1jpp.1.el6_3 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:6 |
before 1:1.6.0.11.0-1jpp.1.el6_3 | 1:1.6.0.11.0-1jpp.1.el6_3 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:6 |
before 1:1.6.0.11.0-1jpp.1.el6_3 | 1:1.6.0.11.0-1jpp.1.el6_3 |
java-1.7.0-ibmRed Hat:rhel_extras:6 |
before 1:1.7.0.2.0-1jpp.3.el6_3 | 1:1.7.0.2.0-1jpp.3.el6_3 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:6 |
before 1:1.7.0.2.0-1jpp.3.el6_3 | 1:1.7.0.2.0-1jpp.3.el6_3 |
java-1.7.0-ibm-develRed Hat:rhel_extras:6 |
before 1:1.7.0.2.0-1jpp.3.el6_3 | 1:1.7.0.2.0-1jpp.3.el6_3 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:6 |
before 1:1.7.0.2.0-1jpp.3.el6_3 | 1:1.7.0.2.0-1jpp.3.el6_3 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:6 |
before 1:1.7.0.2.0-1jpp.3.el6_3 | 1:1.7.0.2.0-1jpp.3.el6_3 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:6 |
before 1:1.7.0.2.0-1jpp.3.el6_3 | 1:1.7.0.2.0-1jpp.3.el6_3 |
java-1.6.0-ibmRed Hat:network_satellite:5.4::el5 |
before 1:1.6.0.14.0-1jpp.1.el5_9 | 1:1.6.0.14.0-1jpp.1.el5_9 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.4::el5 |
before 1:1.6.0.14.0-1jpp.1.el5_9 | 1:1.6.0.14.0-1jpp.1.el5_9 |
java-1.6.0-ibmRed Hat:network_satellite:5.4::el6 |
before 1:1.6.0.14.0-1jpp.1.el6_4 | 1:1.6.0.14.0-1jpp.1.el6_4 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.4::el6 |
before 1:1.6.0.14.0-1jpp.1.el6_4 | 1:1.6.0.14.0-1jpp.1.el6_4 |
java-1.6.0-ibmRed Hat:network_satellite:5.5::el5 |
before 1:1.6.0.14.0-1jpp.1.el5_9 | 1:1.6.0.14.0-1jpp.1.el5_9 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.5::el5 |
before 1:1.6.0.14.0-1jpp.1.el5_9 | 1:1.6.0.14.0-1jpp.1.el5_9 |
java-1.6.0-ibmRed Hat:network_satellite:5.5::el6 |
before 1:1.6.0.14.0-1jpp.1.el6_4 | 1:1.6.0.14.0-1jpp.1.el6_4 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.5::el6 |
before 1:1.6.0.14.0-1jpp.1.el6_4 | 1:1.6.0.14.0-1jpp.1.el6_4 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Oracle GlassFish Server 3.1.1 (build 12) - Multiple Cross-Site Scripting Vulnerabilities | 2012-04-22 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-0551 is a medium vulnerability (CVSS 5.8) in Oracle Jre, published May 3, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.4%, the 96th percentile. Fixed in java-1.6.0-sun 1:1.6.0.33-1jpp.1.el5_8.
References
lists.opensuse.org/opensuse-security-announce/2012-09/msg00035.html
lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16707
rhn.redhat.com/errata/RHSA-2012-0734.html
oracle.com/technetwork/topics/security/javacpujun2012-1515912.html
securitytracker.com/id?1026941
Show 194 moreShow less
marc.info?l=bugtraq&m=134496371727681&w=2
rhn.redhat.com/errata/RHSA-2013-1455.html
rhn.redhat.com/errata/RHSA-2013-1456.html
oracle.com/technetwork/topics/security/cpuapr2012-366314.html
mandriva.com/security/advisories?name=MDVSA-2013:150
securityfocus.com/bid/53136
nvd.nist.gov/vuln/detail/CVE-2012-0551
github.com/advisories/GHSA-mc32-mvw8-hcj8
access.redhat.com/errata/RHSA-2012:0734
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=829354
bugzilla.redhat.com/show_bug.cgi?id=829358
bugzilla.redhat.com/show_bug.cgi?id=829360
bugzilla.redhat.com/show_bug.cgi?id=829361
bugzilla.redhat.com/show_bug.cgi?id=829371
bugzilla.redhat.com/show_bug.cgi?id=829372
bugzilla.redhat.com/show_bug.cgi?id=829373
bugzilla.redhat.com/show_bug.cgi?id=829374
bugzilla.redhat.com/show_bug.cgi?id=829376
bugzilla.redhat.com/show_bug.cgi?id=831353
bugzilla.redhat.com/show_bug.cgi?id=831354
bugzilla.redhat.com/show_bug.cgi?id=831355
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0734.json
access.redhat.com/security/cve/CVE-2012-0551
cve.org/CVERecord?id=CVE-2012-0551
access.redhat.com/security/cve/CVE-2012-1711
cve.org/CVERecord?id=CVE-2012-1711
nvd.nist.gov/vuln/detail/CVE-2012-1711
access.redhat.com/security/cve/CVE-2012-1713
cve.org/CVERecord?id=CVE-2012-1713
nvd.nist.gov/vuln/detail/CVE-2012-1713
access.redhat.com/security/cve/CVE-2012-1716
cve.org/CVERecord?id=CVE-2012-1716
nvd.nist.gov/vuln/detail/CVE-2012-1716
access.redhat.com/security/cve/CVE-2012-1717
cve.org/CVERecord?id=CVE-2012-1717
nvd.nist.gov/vuln/detail/CVE-2012-1717
access.redhat.com/security/cve/CVE-2012-1718
cve.org/CVERecord?id=CVE-2012-1718
nvd.nist.gov/vuln/detail/CVE-2012-1718
access.redhat.com/security/cve/CVE-2012-1719
cve.org/CVERecord?id=CVE-2012-1719
nvd.nist.gov/vuln/detail/CVE-2012-1719
access.redhat.com/security/cve/CVE-2012-1721
cve.org/CVERecord?id=CVE-2012-1721
nvd.nist.gov/vuln/detail/CVE-2012-1721
access.redhat.com/security/cve/CVE-2012-1722
cve.org/CVERecord?id=CVE-2012-1722
nvd.nist.gov/vuln/detail/CVE-2012-1722
access.redhat.com/security/cve/CVE-2012-1723
cve.org/CVERecord?id=CVE-2012-1723
nvd.nist.gov/vuln/detail/CVE-2012-1723
cisa.gov/known-exploited-vulnerabilities-catalog
access.redhat.com/security/cve/CVE-2012-1724
cve.org/CVERecord?id=CVE-2012-1724
nvd.nist.gov/vuln/detail/CVE-2012-1724
access.redhat.com/security/cve/CVE-2012-1725
cve.org/CVERecord?id=CVE-2012-1725
nvd.nist.gov/vuln/detail/CVE-2012-1725
access.redhat.com/errata/RHSA-2012:1019
bugzilla.redhat.com/show_bug.cgi?id=829377
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1019.json
access.redhat.com/security/cve/CVE-2012-1726
cve.org/CVERecord?id=CVE-2012-1726
nvd.nist.gov/vuln/detail/CVE-2012-1726
access.redhat.com/errata/RHSA-2012:1238
ibm.com/developerworks/java/jdk/alerts
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1238.json
access.redhat.com/errata/RHSA-2012:1289
bugzilla.redhat.com/show_bug.cgi?id=852051
bugzilla.redhat.com/show_bug.cgi?id=853097
bugzilla.redhat.com/show_bug.cgi?id=853138
bugzilla.redhat.com/show_bug.cgi?id=853228
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1289.json
access.redhat.com/security/cve/CVE-2012-0547
cve.org/CVERecord?id=CVE-2012-0547
nvd.nist.gov/vuln/detail/CVE-2012-0547
access.redhat.com/security/cve/CVE-2012-1682
cve.org/CVERecord?id=CVE-2012-1682
nvd.nist.gov/vuln/detail/CVE-2012-1682
oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html
access.redhat.com/security/cve/CVE-2012-3136
cve.org/CVERecord?id=CVE-2012-3136
nvd.nist.gov/vuln/detail/CVE-2012-3136
access.redhat.com/security/cve/CVE-2012-4681
cve.org/CVERecord?id=CVE-2012-4681
nvd.nist.gov/vuln/detail/CVE-2012-4681
access.redhat.com/errata/RHSA-2013:1455
bugzilla.redhat.com/show_bug.cgi?id=706106
bugzilla.redhat.com/show_bug.cgi?id=706139
bugzilla.redhat.com/show_bug.cgi?id=706153
bugzilla.redhat.com/show_bug.cgi?id=706234
bugzilla.redhat.com/show_bug.cgi?id=706241
bugzilla.redhat.com/show_bug.cgi?id=706248
bugzilla.redhat.com/show_bug.cgi?id=711675
bugzilla.redhat.com/show_bug.cgi?id=711676
bugzilla.redhat.com/show_bug.cgi?id=711677
bugzilla.redhat.com/show_bug.cgi?id=737506
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1455.json
access.redhat.com/security/cve/CVE-2011-0802
cve.org/CVERecord?id=CVE-2011-0802
nvd.nist.gov/vuln/detail/CVE-2011-0802
access.redhat.com/security/cve/CVE-2011-0814
cve.org/CVERecord?id=CVE-2011-0814
nvd.nist.gov/vuln/detail/CVE-2011-0814
access.redhat.com/security/cve/CVE-2011-0862
cve.org/CVERecord?id=CVE-2011-0862
nvd.nist.gov/vuln/detail/CVE-2011-0862
access.redhat.com/security/cve/CVE-2011-0863
cve.org/CVERecord?id=CVE-2011-0863
nvd.nist.gov/vuln/detail/CVE-2011-0863
cve.org/CVERecord?id=CVE-2011-0865
nvd.nist.gov/vuln/detail/CVE-2011-0865
cve.org/CVERecord?id=CVE-2011-0867
nvd.nist.gov/vuln/detail/CVE-2011-0867
cve.org/CVERecord?id=CVE-2011-0868
nvd.nist.gov/vuln/detail/CVE-2011-0868
cve.org/CVERecord?id=CVE-2011-0869
nvd.nist.gov/vuln/detail/CVE-2011-0869
cve.org/CVERecord?id=CVE-2011-0871
nvd.nist.gov/vuln/detail/CVE-2011-0871
cve.org/CVERecord?id=CVE-2011-0873
nvd.nist.gov/vuln/detail/CVE-2011-0873
nvd.nist.gov/vuln/detail/CVE-2011-3389
oracle.com/technetwork/topics/security/javacpuoct2011-443431.html
oracle.com/technetwork/topics/security/javacpufeb2012-366318.html
oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html
oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html
xforce.iss.net/xforce/xfdb/78764
xforce.iss.net/xforce/xfdb/78766
xforce.iss.net/xforce/xfdb/78767
isg.rhul.ac.uk/tls
openssl.org/news/secadv_20130205.txt
polarssl.org/tech-updates/releases/polarssl-1.2.5-released
oracle.com/technetwork/topics/security/alert-cve-2013-1493-1915081.html
oracle.com/technetwork/topics/security/javacpufeb2013update-1905892.html
oracle.com/technetwork/topics/security/javacpujun2013-1899847.html
oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html
kb.cert.org/vuls/id/225657
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1456.json
suse.com/support/update/announcement/2015/suse-su-20150344-1
bugzilla.suse.com/592934
bugzilla.suse.com/772640
bugzilla.suse.com/780897
bugzilla.suse.com/788750
bugzilla.suse.com/798535
bugzilla.suse.com/813939
bugzilla.suse.com/817062
bugzilla.suse.com/819285
bugzilla.suse.com/819288
bugzilla.suse.com/823034
bugzilla.suse.com/829212
bugzilla.suse.com/849212
bugzilla.suse.com/862064
bugzilla.suse.com/877429
bugzilla.suse.com/891701
bugzilla.suse.com/901223
bugzilla.suse.com/901239
bugzilla.suse.com/904889
bugzilla.suse.com/912434
bugzilla.suse.com/912447
bugzilla.suse.com/916265
bugzilla.suse.com/916266
bugzilla.suse.com/930365
bugzilla.suse.com/931702
suse.com/security/cve/CVE-2012-0547
suse.com/security/cve/CVE-2012-0551
suse.com/security/cve/CVE-2012-1531
suse.com/security/cve/CVE-2012-1532
suse.com/security/cve/CVE-2012-1533
suse.com/security/cve/CVE-2012-1541
suse.com/security/cve/CVE-2012-1682
suse.com/security/cve/CVE-2012-1713
suse.com/security/cve/CVE-2012-1716
suse.com/security/cve/CVE-2012-1717
suse.com/security/cve/CVE-2012-1718
suse.com/security/cve/CVE-2012-1719
suse.com/security/cve/CVE-2012-1721
suse.com/security/cve/CVE-2012-1722
suse.com/security/cve/CVE-2012-1725
suse.com/security/cve/CVE-2012-1726
suse.com/security/cve/CVE-2012-3136
suse.com/security/cve/CVE-2012-3143
suse.com/security/cve/CVE-2012-3159
suse.com/security/cve/CVE-2012-3174
suse.com/security/cve/CVE-2012-3213
suse.com/security/cve/CVE-2012-3216
suse.com/security/cve/CVE-2012-3342
suse.com/security/cve/CVE-2012-4681
suse.com/security/cve/CVE-2012-5067
suse.com/security/cve/CVE-2012-5069
bugzilla.suse.com/666744
bugzilla.suse.com/771808
bugzilla.suse.com/773021
Left out here: 801 references and the rest of 4 source descriptions. The JSON record has them.