{"id":"CVE-2018-1417","aliases":["EUVD-2018-11996","GHSA-hjv6-rx46-p2h8","RHSA-2018:0351","RHSA-2018:0352","RHSA-2018:0458","RHSA-2018:0521","RHSA-2018:1463","SUSE-SU-2018:1447-1","SUSE-SU-2018:1458-1","SUSE-SU-2018:1738-1","SUSE-SU-2018:1738-2","SUSE-SU-2018:1764-1","SUSE-SU-2018:1764-2","SUSE-SU-2018:2068-1"],"status":"published","title":"Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0)...","description":"Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID: 138823.","severity":{"version":"3.0","score":8.1,"vector":"CVSS:3.0/A:H/AC:H/AV:N/C:H/I:H/PR:N/S:U/UI:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.02145,"percentile":0.82216,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-732"],"published":"2018-02-22T19:00:00Z","modified":"2026-07-01T10:03:50Z","affected":[{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el6_9"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.1.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.1.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.1.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.1.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.1.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.1.el7"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.1-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.1.4.20-1jpp.3.el6_9"}]}],"bundled":16},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el6_9"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:network_satellite:5.8::el6","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.5.10-1jpp.1.el6_9"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-26.26.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-26.26.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-26.26.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.25-65.25.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.25-65.25.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"java-1_7_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0_sr10.25-65.25.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.15-30.33.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.15-30.33.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.15-30.33.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.15-30.33.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.15-30.33.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.15-30.33.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.15-30.33.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.15-30.33.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.15-30.33.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.15-30.33.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-38.23.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-38.23.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-38.23.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-38.23.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-38.23.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-38.23.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-38.23.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-38.23.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-38.23.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-38.23.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"java-1_7_1-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1_sr4.25-38.23.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr5.15-3.3.4"}]}],"bundled":13}],"products":[{"vendor":"ibm","product":"java_sdk"},{"vendor":"ibm","product":"sdk, java technology edition"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/138823","tags":["x_refsource_MISC","x_transferred","VDB Entry","Vendor Advisory","article"]},{"url":"http://www.securityfocus.com/bid/103216","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1040403","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1463","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=isg3T1027315","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg22014937","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.ibm.com/support/docview.wss?uid=swg22012965","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1417","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-hjv6-rx46-p2h8"},{"url":"https://access.redhat.com/errata/RHSA-2018:0351","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://developer.ibm.com/javasdk/support/security-vulnerabilities/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534263","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534296","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534525","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534543","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534553","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534762","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534766","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534943","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535350","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535351","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0351.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1417","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1568966","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1417","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2579","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2579","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2579","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2582","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2582","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2582","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2588","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2588","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2588","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2599","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2599","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2599","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2602","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2602","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2602","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2603","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2603","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2603","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2618","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2618","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2618","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2633","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2633","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2633","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2634","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2634","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2634","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2637","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2637","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2637","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2638","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2638","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2638","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html#AppendixJAVA","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2639","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2639","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2639","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2641","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2641","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2641","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2663","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2663","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2663","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2677","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2677","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2677","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2678","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2678","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2678","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0352","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0352.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0458","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535353","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0458.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2657","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2657","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2657","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0521","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0521.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534625","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535352","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535354","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1463.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2581","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2581","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2581","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2627","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2627","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2627","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-2629","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-2629","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-2629","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181447-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1085449","tags":["report"]},{"url":"https://bugzilla.suse.com/1093311","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2814","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181458-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181738-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2826","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181738-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181764-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181764-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182068-1/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2018-1417","description":"Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID: 138823.","status":"published","published":"2018-02-22T19:00:00Z","modified":"2024-09-16T19:11:02.846Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/A:H/AC:H/AV:N/C:H/I:H/PR:N/S:U/UI:N","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:35:08.701206Z"}],"euvd":[{"id":"EUVD-2018-11996","description":"Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID: 138823.","status":"published","published":"2018-02-22T19:00:00Z","modified":"2024-09-16T19:11:02Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/A:H/AC:H/AV:N/C:H/I:H/PR:N/S:U/UI:N","level":"high"}],"updated_at":"2026-11-03T00:55:25.259735Z"}],"ghsa":[{"id":"GHSA-hjv6-rx46-p2h8","title":"Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0)...","description":"Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID: 138823.","status":"published","published":"2022-05-13T01:49:55Z","modified":"2023-02-02T05:01:56Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:51:18.541099Z"}],"nvd":[{"id":"CVE-2018-1417","description":"Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID: 138823.","status":"published","published":"2018-02-22T19:29:03.81Z","modified":"2026-06-17T01:51:11.133Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:04:23.783914Z"}],"osv":[{"id":"RHSA-2018:0351","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-16T00:57:11Z","modified":"2026-07-01T10:03:22Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0352","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-16T00:57:06Z","modified":"2026-07-01T10:03:23Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0458","title":"Red Hat Security Advisory: java-1.7.1-ibm security update","status":"published","published":"2024-09-16T00:57:22Z","modified":"2026-07-01T10:03:27Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0521","title":"Red Hat Security Advisory: java-1.7.1-ibm security update","status":"published","published":"2024-09-16T00:57:16Z","modified":"2026-07-01T10:03:33Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:1463","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-16T00:56:59Z","modified":"2026-07-01T10:03:50Z","cvss":[{"version":"3.0","score":8.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"SUSE-SU-2018:1447-1","title":"Security update for java-1_7_1-ibm","description":"\n\nIBM Java was updated to 7.1.4.25 [bsc#1093311, bsc#1085449]\n\nSecurity fixes:\n\n-   CVE-2018-2814 CVE-2018-2794 CVE-2018-2783 CVE-2018-2799\n    CVE-2018-2798 CVE-2018-2797 CVE-2018-2796 CVE-2018-2795\n    CVE-2018-2800 CVE-2018-2790 CVE-2018-1417\n","status":"published","published":"2018-05-28T08:58:16Z","modified":"2026-02-04T02:57:25.592901Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1458-1","title":"Security update for java-1_7_0-ibm","description":"This update for java-1_7_0-ibm fixes the following issues:\n\nIBM Java was updated to 7.1.4.25 (bsc#1093311, bsc#1085449)\n\nSecurity fixes:\n\n- CVE-2018-2814 CVE-2018-2794 CVE-2018-2783 CVE-2018-2799\n  CVE-2018-2798 CVE-2018-2797 CVE-2018-2796 CVE-2018-2795\n  CVE-2018-2800 CVE-2018-2790 CVE-2018-1417\n","status":"published","published":"2018-05-29T08:30:56Z","modified":"2025-05-02T04:07:45.440129Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1738-1","title":"Security update for java-1_8_0-ibm","description":"\n\nIBM Java was updated to version 8.0.5.15 [bsc#1093311, bsc#1085449]\n\nSecurity fixes:\n\n- CVE-2018-2826 CVE-2018-2825 CVE-2018-2814 CVE-2018-2794\n  CVE-2018-2783 CVE-2018-2799 CVE-2018-2798 CVE-2018-2797\n  CVE-2018-2796 CVE-2018-2795 CVE-2018-2800 CVE-2018-2790\n  CVE-2018-1417\n\n- Removed translations in the java-1_8_0-ibm-devel-32bit package\n  as they conflict with those in java-1_8_0-ibm-devel.\n","status":"published","published":"2018-06-19T13:49:40Z","modified":"2026-02-04T02:45:48.433416Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1738-2","title":"Security update for java-1_8_0-ibm","description":"\n\nIBM Java was updated to version 8.0.5.15 [bsc#1093311, bsc#1085449]\n\nSecurity fixes:\n\n- CVE-2018-2826 CVE-2018-2825 CVE-2018-2814 CVE-2018-2794\n  CVE-2018-2783 CVE-2018-2799 CVE-2018-2798 CVE-2018-2797\n  CVE-2018-2796 CVE-2018-2795 CVE-2018-2800 CVE-2018-2790\n  CVE-2018-1417\n\n- Removed translations in the java-1_8_0-ibm-devel-32bit package\n  as they conflict with those in java-1_8_0-ibm-devel.\n","status":"published","published":"2018-10-18T12:45:52Z","modified":"2026-02-04T02:40:10.331412Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1764-1","title":"Security update for java-1_7_1-ibm","description":"\n\nIBM Java was updated to 7.1.4.25 [bsc#1093311, bsc#1085449]:\n\nSecurity fixes:\n\n- CVE-2018-2814 CVE-2018-2794 CVE-2018-2783 CVE-2018-2799\n  CVE-2018-2798 CVE-2018-2797 CVE-2018-2796 CVE-2018-2795\n  CVE-2018-2800 CVE-2018-2790 CVE-2018-1417\n","status":"published","published":"2018-06-20T12:42:35Z","modified":"2026-02-04T02:31:44.523937Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1764-2","title":"Security update for java-1_7_1-ibm","description":"\n\nIBM Java was updated to 7.1.4.25 [bsc#1093311, bsc#1085449]:\n\nSecurity fixes:\n\n- CVE-2018-2814 CVE-2018-2794 CVE-2018-2783 CVE-2018-2799\n  CVE-2018-2798 CVE-2018-2797 CVE-2018-2796 CVE-2018-2795\n  CVE-2018-2800 CVE-2018-2790 CVE-2018-1417\n","status":"published","published":"2018-10-18T12:45:40Z","modified":"2026-02-04T04:28:20.608531Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:2068-1","title":"Security update for java-1_8_0-ibm","description":"\nIBM Java was updated to version 8.0.5.15 [bsc#1093311, bsc#1085449]\n\nSecurity fixes:\n\n- CVE-2018-2826 CVE-2018-2825 CVE-2018-2814 CVE-2018-2794\n  CVE-2018-2783 CVE-2018-2799 CVE-2018-2798 CVE-2018-2797\n  CVE-2018-2796 CVE-2018-2795 CVE-2018-2800 CVE-2018-2790\n  CVE-2018-1417\n\n- Removed translations in the java-1_8_0-ibm-devel-32bit package\n  as they conflict with those in java-1_8_0-ibm-devel.\n","status":"published","published":"2018-07-26T14:28:02Z","modified":"2026-02-04T02:21:08.223897Z","updated_at":"2026-11-02T15:53:44.972817Z"}]}}