{"id":"CVE-2015-1914","aliases":["EUVD-2015-2019","GHSA-f6r5-5pp4-r7jw","RHSA-2015:1006","RHSA-2015:1007","RHSA-2015:1020","RHSA-2015:1021","RHSA-2015:1091","SUSE-SU-2015:0343-1","SUSE-SU-2015:0343-2","SUSE-SU-2015:0344-1","SUSE-SU-2015:0392-1","SUSE-SU-2015:1073-1","SUSE-SU-2015:1086-1","SUSE-SU-2015:1086-2","SUSE-SU-2015:1086-3","SUSE-SU-2015:1086-4","SUSE-SU-2015:1161-1"],"status":"published","title":"IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before...","description":"IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to bypass \"permission checks\" and obtain sensitive information via vectors related to the Java Virtual Machine.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.04009,"percentile":0.90627,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2013-11-14T23:20:58Z","modified":"2026-06-29T10:09:20Z","affected":[{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-javacomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.6.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-javacomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.6.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-javacomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.6.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.0-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.0-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.0-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.0-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.0-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.7.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.0-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.0-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.0-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.0-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.0-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.0-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.9.0-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.0-1jpp.2.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.0-1jpp.2.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.0-1jpp.2.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.0-1jpp.2.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.0-1jpp.2.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.0-1jpp.2.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.0-1jpp.2.el7_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.0-1jpp.2.el7_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.0-1jpp.2.el7_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.0-1jpp.2.el7_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.0-1jpp.2.el7_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.3.0-1jpp.2.el7_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.5.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.5.0-ibm-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.5.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.5.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.5.0-ibm-javacomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.5.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.5.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"java-1.5.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.5.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.5.0-ibm-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.5.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.5.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.5.0-ibm-javacomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.5.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.5.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.5.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el5"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.5.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.5.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.5.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.5.0-ibm-javacomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.5.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.5.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.5.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.0.16.10-1jpp.1.el6_6"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"java-1.6.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el5","package":"java-1.6.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el5"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"java-1.6.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.6::el6","package":"java-1.6.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"java-1.6.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.7::el6","package":"java-1.6.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.6.0.16.4-1jpp.1.el6_6"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.0-11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.0-11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr3.0-11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"java-1_6_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0_sr16.4-15.1"}]}],"bundled":13}],"products":[{"vendor":"ibm","product":"java"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2015-1007.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV72245","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1006.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1091.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21883640","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1020.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/74645","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1021.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV72246","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1914","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-f6r5-5pp4-r7jw"},{"url":"https://access.redhat.com/errata/RHSA-2015:1006","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://www.ibm.com/developerworks/java/jdk/alerts/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1207101#c4","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=606442","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1207101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1210355","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1210829","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211504","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211543","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1219212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1219215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1219223","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1006.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1080","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1080","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1080","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0138","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0138","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0138","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0192","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0192","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0192","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0458","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0458","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0458","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixJAVA","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0459","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0459","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0459","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0469","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0469","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0469","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0477","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0477","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0477","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0478","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0478","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0478","tags":["advisory"]},{"url":"https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf","tags":["article"]},{"url":"https://securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perfect-forward-secrecy/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0480","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0480","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0480","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0488","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0488","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0488","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0491","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0491","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0491","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-1914","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1914","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-2808","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2808","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2808","tags":["advisory"]},{"url":"http://www.imperva.com/docs/HII_Attacking_SSL_when_using_RC4.pdf","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1007","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1007.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1020","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1020.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1021","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://www.ibm.com/developerworks/java/jdk/lifecycle/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1021.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1091","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1091.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150343-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/592934","tags":["report"]},{"url":"https://bugzilla.suse.com/817062","tags":["report"]},{"url":"https://bugzilla.suse.com/819285","tags":["report"]},{"url":"https://bugzilla.suse.com/819288","tags":["report"]},{"url":"https://bugzilla.suse.com/823034","tags":["report"]},{"url":"https://bugzilla.suse.com/829212","tags":["report"]},{"url":"https://bugzilla.suse.com/849212","tags":["report"]},{"url":"https://bugzilla.suse.com/861782","tags":["report"]},{"url":"https://bugzilla.suse.com/862064","tags":["report"]},{"url":"https://bugzilla.suse.com/877429","tags":["report"]},{"url":"https://bugzilla.suse.com/891701","tags":["report"]},{"url":"https://bugzilla.suse.com/904889","tags":["report"]},{"url":"https://bugzilla.suse.com/912434","tags":["report"]},{"url":"https://bugzilla.suse.com/912447","tags":["report"]},{"url":"https://bugzilla.suse.com/916265","tags":["report"]},{"url":"https://bugzilla.suse.com/916266","tags":["report"]},{"url":"https://bugzilla.suse.com/930365","tags":["report"]},{"url":"https://bugzilla.suse.com/931702","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5838","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2808","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150343-2/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/877430","tags":["report"]},{"url":"https://bugzilla.suse.com/891700","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150344-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/772640","tags":["report"]},{"url":"https://bugzilla.suse.com/780897","tags":["report"]},{"url":"https://bugzilla.suse.com/788750","tags":["report"]},{"url":"https://bugzilla.suse.com/798535","tags":["report"]},{"url":"https://bugzilla.suse.com/813939","tags":["report"]},{"url":"https://bugzilla.suse.com/901223","tags":["report"]},{"url":"https://bugzilla.suse.com/901239","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1532","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2455","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150392-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/666744","tags":["report"]},{"url":"https://bugzilla.suse.com/771808","tags":["report"]},{"url":"https://bugzilla.suse.com/773021","tags":["report"]},{"url":"https://bugzilla.suse.com/778629","tags":["report"]},{"url":"https://bugzilla.suse.com/785631","tags":["report"]},{"url":"https://bugzilla.suse.com/808625","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1481","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151073-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/931693","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151086-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151086-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151086-3/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151086-4/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151161-1/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2015-1914","description":"IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to bypass \"permission checks\" and obtain sensitive information via vectors related to the Java Virtual Machine.","status":"published","published":"2015-07-02T21:16:00Z","modified":"2024-08-06T04:54:16.525Z","updated_at":"2026-11-02T14:35:43.698357Z"}],"euvd":[{"id":"EUVD-2015-2019","description":"IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to bypass \"permission checks\" and obtain sensitive information via vectors related to the Java Virtual Machine.","status":"published","published":"2015-07-02T21:16:00Z","modified":"2024-08-06T04:54:16Z","updated_at":"2026-11-03T02:22:13.664628Z"}],"ghsa":[{"id":"GHSA-f6r5-5pp4-r7jw","title":"IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before...","description":"IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to bypass \"permission checks\" and obtain sensitive information via vectors related to the Java Virtual Machine.","status":"published","published":"2022-05-14T00:58:28Z","modified":"2023-02-02T05:02:58Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:51:32.869646Z"}],"nvd":[{"id":"CVE-2015-1914","description":"IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to bypass \"permission checks\" and obtain sensitive information via vectors related to the Java Virtual Machine.","status":"published","published":"2015-07-02T21:59:01.377Z","modified":"2026-06-17T00:23:13.263Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:05.884985Z"}],"osv":[{"id":"RHSA-2015:1006","title":"Red Hat Security Advisory: java-1.6.0-ibm security update","status":"published","published":"2024-09-22T16:26:46Z","modified":"2026-06-29T10:09:08Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1007","title":"Red Hat Security Advisory: java-1.7.0-ibm security update","status":"published","published":"2024-09-22T16:26:33Z","modified":"2026-06-29T10:09:09Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1020","title":"Red Hat Security Advisory: java-1.7.1-ibm security update","status":"published","published":"2024-09-22T16:26:18Z","modified":"2026-06-29T10:09:11Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1021","title":"Red Hat Security Advisory: java-1.5.0-ibm security update","status":"published","published":"2024-09-22T16:26:21Z","modified":"2026-06-29T10:09:11Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:1091","title":"Red Hat Security Advisory: Red Hat Satellite IBM Java Runtime security update","status":"published","published":"2024-09-22T16:26:29Z","modified":"2026-06-29T10:09:20Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2015:0343-1","title":"Security update for IBM Java","description":"\njava-1_7_0-ibm has been updated to version 1.7.0_sr7.2 to fix 21 security \nissues.\n\nThese security issues have been fixed:\n\n    * Unspecified vulnerability (CVE-2014-3065).\n    * The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other\n      products, uses nondeterministic CBC padding, which makes it easier\n      for man-in-the-middle attackers to obtain cleartext data via a\n      padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and\n      Java SE Embedded 7u60, allows remote attackers to affect\n      confidentiality, integrity, and availability via vectors related to\n      AWT (CVE-2014-6513).\n    * Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows\n      remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors (CVE-2014-6456).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532\n      (CVE-2014-6503).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503\n      (CVE-2014-6532).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532\n      (CVE-2014-4288).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532\n      (CVE-2014-6493).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,\n      when running on Firefox, allows remote attackers to affect\n      confidentiality, integrity, and availability via unknown vectors\n      related to Deployment (CVE-2014-6492).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows local users to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment\n      (CVE-2014-6458).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,\n      when running on Internet Explorer, allows local users to affect\n      confidentiality, integrity, and availability via unknown vectors\n      related to Deployment (CVE-2014-6466).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20, and Java SE Embedded 7u60, allows remote attackers to affect\n      confidentiality, integrity, and availability via unknown vectors\n      related to Libraries (CVE-2014-6506).\n    * Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows\n      remote attackers to affect integrity via unknown vectors related to\n      Deployment, a different vulnerability than CVE-2014-6527\n      (CVE-2014-6476).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect integrity via unknown vectors\n      related to Deployment (CVE-2014-6515).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20 allows remote attackers to affect confidentiality via unknown\n      vectors related to 2D (CVE-2014-6511).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20, and Java SE Embedded 7u60, allows remote attackers to affect\n      confidentiality via unknown vectors related to Libraries\n      (CVE-2014-6531).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows\n      remote attackers to affect integrity via unknown vectors related to\n      Libraries (CVE-2014-6512).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows\n      remote attackers to affect confidentiality and integrity via vectors\n      related to JSSE (CVE-2014-6457).\n    * Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows\n      remote attackers to affect integrity via unknown vectors related to\n      Deployment, a different vulnerability than CVE-2014-6476\n      (CVE-2014-6527).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20, and Java SE Embedded 7u60, allows remote attackers to affect\n      integrity via unknown vectors related to Libraries (CVE-2014-6502).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and JRockit R28.3.3\n      allows remote attackers to affect integrity via unknown vectors\n      related to Security (CVE-2014-6558).\n\nMore information can be found at \nhttp://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2014\n\u003chttp://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2014\u003e\n\nSecurity Issues:\n\n    * CVE-2014-3065\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3065\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-6506\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6506\u003e\n    * CVE-2014-6511\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6511\u003e\n    * CVE-2014-6531\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6531\u003e\n    * CVE-2014-6512\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6512\u003e\n    * CVE-2014-6457\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6457\u003e\n    * CVE-2014-6502\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6502\u003e\n    * CVE-2014-6558\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6558\u003e\n    * CVE-2014-6513\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6513\u003e\n    * CVE-2014-6503\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6503\u003e\n    * CVE-2014-4288\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4288\u003e\n    * CVE-2014-6493\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6493\u003e\n    * CVE-2014-6532\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6532\u003e\n    * CVE-2014-6492\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6492\u003e\n    * CVE-2014-6458\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6458\u003e\n    * CVE-2014-6466\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6466\u003e\n    * CVE-2014-6515\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6515\u003e\n    * CVE-2014-6456\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6456\u003e\n    * CVE-2014-6476\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6476\u003e\n    * CVE-2014-6527\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6527\u003e\n\n","status":"published","published":"2014-11-21T16:40:20Z","modified":"2026-02-04T02:52:14.19977Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0343-2","title":"Security update for IBM Java","description":"\njava-1_6_0-ibm has been updated to version 1.6.0_sr16.2 to fix 18 security \nissues.\n\nThese security issues have been fixed:\n\n    * Unspecified vulnerability in Oracle Java SE 6u81 (CVE-2014-3065).\n    * The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other\n      products, uses nondeterministic CBC padding, which makes it easier\n      for man-in-the-middle attackers to obtain cleartext data via a\n      padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and\n      Java SE Embedded 7u60, allows remote attackers to affect\n      confidentiality, integrity, and availability via vectors related to\n      AWT (CVE-2014-6513).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532\n      (CVE-2014-6503).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503\n      (CVE-2014-6532).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532\n      (CVE-2014-4288).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532\n      (CVE-2014-6493).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,\n      when running on Firefox, allows remote attackers to affect\n      confidentiality, integrity, and availability via unknown vectors\n      related to Deployment (CVE-2014-6492).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows local users to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment\n      (CVE-2014-6458).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,\n      when running on Internet Explorer, allows local users to affect\n      confidentiality, integrity, and availability via unknown vectors\n      related to Deployment (CVE-2014-6466).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20, and Java SE Embedded 7u60, allows remote attackers to affect\n      confidentiality, integrity, and availability via unknown vectors\n      related to Libraries (CVE-2014-6506).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect integrity via unknown vectors\n      related to Deployment (CVE-2014-6515).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20 allows remote attackers to affect confidentiality via unknown\n      vectors related to 2D (CVE-2014-6511).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20, and Java SE Embedded 7u60, allows remote attackers to affect\n      confidentiality via unknown vectors related to Libraries\n      (CVE-2014-6531).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows\n      remote attackers to affect integrity via unknown vectors related to\n      Libraries (CVE-2014-6512).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows\n      remote attackers to affect confidentiality and integrity via vectors\n      related to JSSE (CVE-2014-6457).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20, and Java SE Embedded 7u60, allows remote attackers to affect\n      integrity via unknown vectors related to Libraries (CVE-2014-6502).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and JRockit R28.3.3\n      allows remote attackers to affect integrity via unknown vectors\n      related to Security (CVE-2014-6558).\n\nMore information can be found at \nhttp://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2014\n\u003chttp://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2014\u003e\n\nSecurity Issues:\n\n    * CVE-2014-3065\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3065\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-6506\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6506\u003e\n    * CVE-2014-6511\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6511\u003e\n    * CVE-2014-6531\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6531\u003e\n    * CVE-2014-6512\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6512\u003e\n    * CVE-2014-6457\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6457\u003e\n    * CVE-2014-6502\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6502\u003e\n    * CVE-2014-6558\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6558\u003e\n    * CVE-2014-6513\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6513\u003e\n    * CVE-2014-6503\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6503\u003e\n    * CVE-2014-4288\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4288\u003e\n    * CVE-2014-6493\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6493\u003e\n    * CVE-2014-6532\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6532\u003e\n    * CVE-2014-6492\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6492\u003e\n    * CVE-2014-6458\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6458\u003e\n    * CVE-2014-6466\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6466\u003e\n    * CVE-2014-6515\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6515\u003e\n    * CVE-2014-6456\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6456\u003e\n    * CVE-2014-6476\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6476\u003e\n    * CVE-2014-6527\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6527\u003e\n\n","status":"published","published":"2014-11-19T10:21:52Z","modified":"2026-02-04T02:49:56.867631Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0344-1","title":"Security update for IBM Java 7","description":"\nIBM Java 7 SR6 has been released and fixes lots of bugs and security \nissues.\n\nMore information can be found on: \nhttp://www.ibm.com/developerworks/java/jdk/alerts/\n\u003chttp://www.ibm.com/developerworks/java/jdk/alerts/\u003e\n\nSecurity Issue references:\n\n    * CVE-2013-5458\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458\u003e\n    * CVE-2013-5456\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456\u003e\n    * CVE-2013-5457\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457\u003e\n    * CVE-2013-4041\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041\u003e\n    * CVE-2013-5375\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375\u003e\n    * CVE-2013-5372\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372\u003e\n    * CVE-2013-5843\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843\u003e\n    * CVE-2013-5789\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789\u003e\n    * CVE-2013-5830\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830\u003e\n    * CVE-2013-5829\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829\u003e\n    * CVE-2013-5787\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787\u003e\n    * CVE-2013-5788\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788\u003e\n    * CVE-2013-5824\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824\u003e\n    * CVE-2013-5842\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842\u003e\n    * CVE-2013-5782\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782\u003e\n    * CVE-2013-5817\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817\u003e\n    * CVE-2013-5809\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809\u003e\n    * CVE-2013-5814\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814\u003e\n    * CVE-2013-5832\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832\u003e\n    * CVE-2013-5850\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850\u003e\n    * CVE-2013-5838\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838\u003e\n    * CVE-2013-5802\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802\u003e\n    * CVE-2013-5812\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812\u003e\n    * CVE-2013-5804\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804\u003e\n    * CVE-2013-5783\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783\u003e\n    * CVE-2013-3829\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829\u003e\n    * CVE-2013-5823\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823\u003e\n    * CVE-2013-5831\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831\u003e\n    * CVE-2013-5820\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820\u003e\n    * CVE-2013-5819\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819\u003e\n    * CVE-2013-5818\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818\u003e\n    * CVE-2013-5848\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848\u003e\n    * CVE-2013-5776\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776\u003e\n    * CVE-2013-5774\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774\u003e\n    * CVE-2013-5825\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825\u003e\n    * CVE-2013-5840\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840\u003e\n    * CVE-2013-5801\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801\u003e\n    * CVE-2013-5778\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778\u003e\n    * CVE-2013-5851\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851\u003e\n    * CVE-2013-5800\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800\u003e\n    * CVE-2013-5784\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784\u003e\n    * CVE-2013-5849\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849\u003e\n    * CVE-2013-5790\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5790\u003e\n    * CVE-2013-5780\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5780\u003e\n    * CVE-2013-5797\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5797\u003e\n    * CVE-2013-5803\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5803\u003e\n    * CVE-2013-5772\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5772\u003e\n\n","status":"published","published":"2013-11-19T10:42:44Z","modified":"2026-02-04T02:42:34.105154Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0392-1","title":"Security update for IBM Java 6","description":"\nIBM Java 6 SR15 has been released and fixes lots of bugs and security \nissues.\n\nMore information can be found on: \nhttp://www.ibm.com/developerworks/java/jdk/alerts/\n\u003chttp://www.ibm.com/developerworks/java/jdk/alerts/\u003e\n\nSecurity Issue references:\n\n    * CVE-2013-5458\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458\u003e\n    * CVE-2013-5456\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456\u003e\n    * CVE-2013-5457\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457\u003e\n    * CVE-2013-4041\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041\u003e\n    * CVE-2013-5375\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375\u003e\n    * CVE-2013-5372\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372\u003e\n    * CVE-2013-5843\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843\u003e\n    * CVE-2013-5789\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789\u003e\n    * CVE-2013-5830\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830\u003e\n    * CVE-2013-5829\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829\u003e\n    * CVE-2013-5787\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787\u003e\n    * CVE-2013-5788\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788\u003e\n    * CVE-2013-5824\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824\u003e\n    * CVE-2013-5842\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842\u003e\n    * CVE-2013-5782\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782\u003e\n    * CVE-2013-5817\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817\u003e\n    * CVE-2013-5809\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809\u003e\n    * CVE-2013-5814\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814\u003e\n    * CVE-2013-5832\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832\u003e\n    * CVE-2013-5850\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850\u003e\n    * CVE-2013-5838\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838\u003e\n    * CVE-2013-5802\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802\u003e\n    * CVE-2013-5812\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812\u003e\n    * CVE-2013-5804\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804\u003e\n    * CVE-2013-5783\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783\u003e\n    * CVE-2013-3829\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829\u003e\n    * CVE-2013-5823\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823\u003e\n    * CVE-2013-5831\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831\u003e\n    * CVE-2013-5820\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820\u003e\n    * CVE-2013-5819\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819\u003e\n    * CVE-2013-5818\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818\u003e\n    * CVE-2013-5848\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848\u003e\n    * CVE-2013-5776\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776\u003e\n    * CVE-2013-5774\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774\u003e\n    * CVE-2013-5825\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825\u003e\n    * CVE-2013-5840\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840\u003e\n    * CVE-2013-5801\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801\u003e\n    * CVE-2013-5778\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778\u003e\n    * CVE-2013-5851\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851\u003e\n    * CVE-2013-5800\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800\u003e\n    * CVE-2013-5784\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784\u003e\n    * CVE-2013-5849\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849\u003e\n    * CVE-2013-5790\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5790\u003e\n    * CVE-2013-5780\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5780\u003e\n    * CVE-2013-5797\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5797\u003e\n    * CVE-2013-5803\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5803\u003e\n    * CVE-2013-5772\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5772\u003e\n\n","status":"published","published":"2013-11-14T23:20:58Z","modified":"2026-02-04T03:24:00.196796Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1073-1","title":"\nSecurity update for java-1_7_0-ibm ","description":"This update fixes the following security issues:\n\n- Version bump to 7.1-3.0 release bnc#930365 CVE-2015-0192 CVE-2015-2808 CVE-2015-1914 CVE-2015-0138\n\n- Fix removeing links before update-alternatives run. bnc#931702\n\n- Fix bnc#912434, javaws/plugin stuff should slave plugin update-alternatives\n- Fix bnc#912447, use system cacerts\n\n- Update to 7.1.2.10 for sec issues bnc#916266 and bnc#916265 CVE-2014-8892 CVE-2014-8891\n","status":"published","published":"2015-06-12T14:22:03Z","modified":"2026-02-04T03:40:51.459387Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1086-1","title":"Security update for IBM Java 6","description":"\nIBM Java 6 SR15 has been released and fixes lots of bugs and security \nissues.\n\nMore information can be found on: \nhttp://www.ibm.com/developerworks/java/jdk/alerts/\n\u003chttp://www.ibm.com/developerworks/java/jdk/alerts/\u003e\n\nSecurity Issue references:\n\n    * CVE-2013-5458\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458\u003e\n    * CVE-2013-5456\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456\u003e\n    * CVE-2013-5457\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457\u003e\n    * CVE-2013-4041\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041\u003e\n    * CVE-2013-5375\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375\u003e\n    * CVE-2013-5372\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372\u003e\n    * CVE-2013-5843\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843\u003e\n    * CVE-2013-5789\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789\u003e\n    * CVE-2013-5830\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830\u003e\n    * CVE-2013-5829\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829\u003e\n    * CVE-2013-5787\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787\u003e\n    * CVE-2013-5788\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788\u003e\n    * CVE-2013-5824\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824\u003e\n    * CVE-2013-5842\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842\u003e\n    * CVE-2013-5782\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782\u003e\n    * CVE-2013-5817\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817\u003e\n    * CVE-2013-5809\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809\u003e\n    * CVE-2013-5814\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814\u003e\n    * CVE-2013-5832\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832\u003e\n    * CVE-2013-5850\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850\u003e\n    * CVE-2013-5838\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838\u003e\n    * CVE-2013-5802\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802\u003e\n    * CVE-2013-5812\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812\u003e\n    * CVE-2013-5804\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804\u003e\n    * CVE-2013-5783\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783\u003e\n    * CVE-2013-3829\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829\u003e\n    * CVE-2013-5823\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823\u003e\n    * CVE-2013-5831\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831\u003e\n    * CVE-2013-5820\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820\u003e\n    * CVE-2013-5819\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819\u003e\n    * CVE-2013-5818\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818\u003e\n    * CVE-2013-5848\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848\u003e\n    * CVE-2013-5776\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776\u003e\n    * CVE-2013-5774\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774\u003e\n    * CVE-2013-5825\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825\u003e\n    * CVE-2013-5840\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840\u003e\n    * CVE-2013-5801\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801\u003e\n    * CVE-2013-5778\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778\u003e\n    * CVE-2013-5851\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851\u003e\n    * CVE-2013-5800\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800\u003e\n    * CVE-2013-5784\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784\u003e\n    * CVE-2013-5849\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849\u003e\n    * CVE-2013-5790\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5790\u003e\n    * CVE-2013-5780\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5780\u003e\n    * CVE-2013-5797\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5797\u003e\n    * CVE-2013-5803\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5803\u003e\n    * CVE-2013-5772\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5772\u003e\n\n","status":"published","published":"2013-11-14T23:20:58Z","modified":"2026-02-04T02:21:58.468769Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1086-2","title":"Security update for IBM Java","description":"\njava-1_6_0-ibm has been updated to version 1.6.0_sr16.2 to fix 18 security \nissues.\n\nThese security issues has been fixed:\n\n    * Unspecified vulnerability in Oracle Java SE 6u81 (CVE-2014-3065).\n    * The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other\n      products, uses nondeterministic CBC padding, which makes it easier\n      for man-in-the-middle attackers to obtain cleartext data via a\n      padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and\n      Java SE Embedded 7u60, allows remote attackers to affect\n      confidentiality, integrity, and availability via vectors related to\n      AWT (CVE-2014-6513).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532\n      (CVE-2014-6503).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503\n      (CVE-2014-6532).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532\n      (CVE-2014-4288).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532\n      (CVE-2014-6493).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,\n      when running on Firefox, allows remote attackers to affect\n      confidentiality, integrity, and availability via unknown vectors\n      related to Deployment (CVE-2014-6492).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows local users to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment\n      (CVE-2014-6458).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,\n      when running on Internet Explorer, allows local users to affect\n      confidentiality, integrity, and availability via unknown vectors\n      related to Deployment (CVE-2014-6466).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20, and Java SE Embedded 7u60, allows remote attackers to affect\n      confidentiality, integrity, and availability via unknown vectors\n      related to Libraries (CVE-2014-6506).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect integrity via unknown vectors\n      related to Deployment (CVE-2014-6515).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20 allows remote attackers to affect confidentiality via unknown\n      vectors related to 2D (CVE-2014-6511).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20, and Java SE Embedded 7u60, allows remote attackers to affect\n      confidentiality via unknown vectors related to Libraries\n      (CVE-2014-6531).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows\n      remote attackers to affect integrity via unknown vectors related to\n      Libraries (CVE-2014-6512).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows\n      remote attackers to affect confidentiality and integrity via vectors\n      related to JSSE (CVE-2014-6457).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20, and Java SE Embedded 7u60, allows remote attackers to affect\n      integrity via unknown vectors related to Libraries (CVE-2014-6502).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and JRockit R28.3.3\n      allows remote attackers to affect integrity via unknown vectors\n      related to Security (CVE-2014-6558).\n\nMore information can be found at \nhttp://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2014\n\u003chttp://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2014\u003e\n\nSecurity Issues:\n\n    * CVE-2014-3065\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3065\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-6506\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6506\u003e\n    * CVE-2014-6511\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6511\u003e\n    * CVE-2014-6531\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6531\u003e\n    * CVE-2014-6512\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6512\u003e\n    * CVE-2014-6457\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6457\u003e\n    * CVE-2014-6502\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6502\u003e\n    * CVE-2014-6558\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6558\u003e\n    * CVE-2014-6513\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6513\u003e\n    * CVE-2014-6503\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6503\u003e\n    * CVE-2014-4288\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4288\u003e\n    * CVE-2014-6493\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6493\u003e\n    * CVE-2014-6532\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6532\u003e\n    * CVE-2014-6492\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6492\u003e\n    * CVE-2014-6458\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6458\u003e\n    * CVE-2014-6466\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6466\u003e\n    * CVE-2014-6515\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6515\u003e\n    * CVE-2014-6456\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6456\u003e\n    * CVE-2014-6476\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6476\u003e\n    * CVE-2014-6527\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6527\u003e\n\n","status":"published","published":"2014-11-19T10:21:52Z","modified":"2026-02-04T02:20:15.144947Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1086-3","title":"Security update for IBM Java 7","description":"\nIBM Java 7 SR6 has been released and fixes lots of bugs and security \nissues.\n\nMore information can be found on: \nhttp://www.ibm.com/developerworks/java/jdk/alerts/\n\u003chttp://www.ibm.com/developerworks/java/jdk/alerts/\u003e\n\nSecurity Issue references:\n\n    * CVE-2013-5458\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5458\u003e\n    * CVE-2013-5456\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5456\u003e\n    * CVE-2013-5457\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5457\u003e\n    * CVE-2013-4041\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4041\u003e\n    * CVE-2013-5375\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5375\u003e\n    * CVE-2013-5372\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5372\u003e\n    * CVE-2013-5843\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5843\u003e\n    * CVE-2013-5789\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5789\u003e\n    * CVE-2013-5830\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5830\u003e\n    * CVE-2013-5829\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5829\u003e\n    * CVE-2013-5787\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5787\u003e\n    * CVE-2013-5788\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5788\u003e\n    * CVE-2013-5824\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5824\u003e\n    * CVE-2013-5842\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5842\u003e\n    * CVE-2013-5782\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5782\u003e\n    * CVE-2013-5817\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5817\u003e\n    * CVE-2013-5809\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5809\u003e\n    * CVE-2013-5814\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5814\u003e\n    * CVE-2013-5832\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5832\u003e\n    * CVE-2013-5850\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5850\u003e\n    * CVE-2013-5838\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5838\u003e\n    * CVE-2013-5802\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5802\u003e\n    * CVE-2013-5812\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5812\u003e\n    * CVE-2013-5804\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5804\u003e\n    * CVE-2013-5783\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5783\u003e\n    * CVE-2013-3829\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3829\u003e\n    * CVE-2013-5823\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5823\u003e\n    * CVE-2013-5831\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5831\u003e\n    * CVE-2013-5820\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5820\u003e\n    * CVE-2013-5819\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5819\u003e\n    * CVE-2013-5818\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5818\u003e\n    * CVE-2013-5848\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5848\u003e\n    * CVE-2013-5776\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5776\u003e\n    * CVE-2013-5774\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5774\u003e\n    * CVE-2013-5825\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5825\u003e\n    * CVE-2013-5840\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5840\u003e\n    * CVE-2013-5801\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5801\u003e\n    * CVE-2013-5778\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5778\u003e\n    * CVE-2013-5851\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5851\u003e\n    * CVE-2013-5800\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5800\u003e\n    * CVE-2013-5784\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5784\u003e\n    * CVE-2013-5849\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5849\u003e\n    * CVE-2013-5790\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5790\u003e\n    * CVE-2013-5780\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5780\u003e\n    * CVE-2013-5797\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5797\u003e\n    * CVE-2013-5803\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5803\u003e\n    * CVE-2013-5772\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5772\u003e\n\n","status":"published","published":"2013-11-19T10:42:44Z","modified":"2026-02-04T03:44:04.855456Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1086-4","title":"Security update for IBM Java","description":"\njava-1_7_0-ibm has been updated to version 1.7.0_sr7.2 to fix 21 security \nissues.\n\nThese security issues have been fixed:\n\n    * Unspecified vulnerability (CVE-2014-3065).\n    * The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other\n      products, uses nondeterministic CBC padding, which makes it easier\n      for man-in-the-middle attackers to obtain cleartext data via a\n      padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and\n      Java SE Embedded 7u60, allows remote attackers to affect\n      confidentiality, integrity, and availability via vectors related to\n      AWT (CVE-2014-6513).\n    * Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows\n      remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors (CVE-2014-6456).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532\n      (CVE-2014-6503).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503\n      (CVE-2014-6532).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532\n      (CVE-2014-4288).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment, a different\n      vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532\n      (CVE-2014-6493).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,\n      when running on Firefox, allows remote attackers to affect\n      confidentiality, integrity, and availability via unknown vectors\n      related to Deployment (CVE-2014-6492).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows local users to affect confidentiality, integrity, and\n      availability via unknown vectors related to Deployment\n      (CVE-2014-6458).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,\n      when running on Internet Explorer, allows local users to affect\n      confidentiality, integrity, and availability via unknown vectors\n      related to Deployment (CVE-2014-6466).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20, and Java SE Embedded 7u60, allows remote attackers to affect\n      confidentiality, integrity, and availability via unknown vectors\n      related to Libraries (CVE-2014-6506).\n    * Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows\n      remote attackers to affect integrity via unknown vectors related to\n      Deployment, a different vulnerability than CVE-2014-6527\n      (CVE-2014-6476).\n    * Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20\n      allows remote attackers to affect integrity via unknown vectors\n      related to Deployment (CVE-2014-6515).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20 allows remote attackers to affect confidentiality via unknown\n      vectors related to 2D (CVE-2014-6511).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20, and Java SE Embedded 7u60, allows remote attackers to affect\n      confidentiality via unknown vectors related to Libraries\n      (CVE-2014-6531).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows\n      remote attackers to affect integrity via unknown vectors related to\n      Libraries (CVE-2014-6512).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows\n      remote attackers to affect confidentiality and integrity via vectors\n      related to JSSE (CVE-2014-6457).\n    * Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows\n      remote attackers to affect integrity via unknown vectors related to\n      Deployment, a different vulnerability than CVE-2014-6476\n      (CVE-2014-6527).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20, and Java SE Embedded 7u60, allows remote attackers to affect\n      integrity via unknown vectors related to Libraries (CVE-2014-6502).\n    * Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and\n      8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and JRockit R28.3.3\n      allows remote attackers to affect integrity via unknown vectors\n      related to Security (CVE-2014-6558).\n\nMore information can be found at \nhttp://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2014\n\u003chttp://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2014\u003e\n\nSecurity Issues:\n\n    * CVE-2014-3065\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3065\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-6506\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6506\u003e\n    * CVE-2014-6511\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6511\u003e\n    * CVE-2014-6531\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6531\u003e\n    * CVE-2014-6512\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6512\u003e\n    * CVE-2014-6457\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6457\u003e\n    * CVE-2014-6502\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6502\u003e\n    * CVE-2014-6558\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6558\u003e\n    * CVE-2014-6513\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6513\u003e\n    * CVE-2014-6503\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6503\u003e\n    * CVE-2014-4288\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4288\u003e\n    * CVE-2014-6493\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6493\u003e\n    * CVE-2014-6532\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6532\u003e\n    * CVE-2014-6492\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6492\u003e\n    * CVE-2014-6458\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6458\u003e\n    * CVE-2014-6466\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6466\u003e\n    * CVE-2014-6515\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6515\u003e\n    * CVE-2014-6456\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6456\u003e\n    * CVE-2014-6476\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6476\u003e\n    * CVE-2014-6527\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6527\u003e\n\n","status":"published","published":"2014-11-21T16:40:20Z","modified":"2026-02-04T03:02:01.76993Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1161-1","title":"Security update for java-1_6_0-ibm","description":"\nIBM Java 1.6.0 was updated to SR16-FP4 fixing security issues and bugs.\n\nTabulated information can be found on:\n[http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_May_2015](http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_May_2015)\n\nCVEs addressed:\nCVE-2015-0192 CVE-2015-2808 CVE-2015-1914 CVE-2015-0138\nCVE-2015-0491 CVE-2015-0458 CVE-2015-0459 CVE-2015-0469\nCVE-2015-0480 CVE-2015-0488 CVE-2015-0478 CVE-2015-0477\nCVE-2015-0204 \n\nAdditional bugs fixed:\n\n* Fix javaws/plugin stuff should slave plugin update-alternatives (bnc#912434)\n* Changed Java to use the system root CA certificates (bnc#912447)\n","status":"published","published":"2015-06-17T10:10:25Z","modified":"2026-02-04T03:13:37.755327Z","updated_at":"2026-11-02T15:53:43.030986Z"}]}}