|
2020-01-15
|
CVE-2020-2659 |
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE... |
Ubuntu_linux,
Debian_linux,
E\-Series_santricity_management,
E\-Series_santricity_os_controller,
E\-Series_santricity_storage_manager,
E\-Series_santricity_unified_manager,
E\-Series_santricity_web_services,
Oncommand_workflow_automation,
Jdk,
Jre,
Openjdk,
Enterprise_linux_desktop,
Enterprise_linux_server,
Enterprise_linux_workstation
|
N/A
|
|
|
2020-01-15
|
CVE-2020-2654 |
Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability can only be exploited by supplying... |
Ubuntu_linux,
Debian_linux,
Jdk,
Jre,
Openjdk,
Enterprise_linux
|
N/A
|
|
|
2020-01-15
|
CVE-2020-2601 |
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability... |
Ubuntu_linux,
Debian_linux,
Jdk,
Jre,
Openjdk
|
N/A
|
|
|
2020-01-15
|
CVE-2020-2593 |
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded... |
Ubuntu_linux,
Debian_linux,
Jdk,
Jre,
Openjdk,
Enterprise_linux
|
N/A
|
|
|
2020-01-15
|
CVE-2020-2590 |
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible... |
Ubuntu_linux,
Debian_linux,
Jdk,
Jre,
Openjdk,
Enterprise_linux,
Enterprise_linux_desktop,
Enterprise_linux_server,
Enterprise_linux_workstation
|
N/A
|
|
|
2020-01-15
|
CVE-2020-2583 |
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java... |
Ubuntu_linux,
Debian_linux,
Jdk,
Jre,
Openjdk,
Enterprise_linux,
Enterprise_linux_desktop,
Enterprise_linux_server,
Enterprise_linux_workstation
|
N/A
|
|
|
2020-01-15
|
CVE-2020-2585 |
Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in... |
Jdk,
Jre
|
N/A
|
|
|
2020-01-15
|
CVE-2020-2655 |
Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This... |
Debian_linux,
Jdk,
Jre,
Enterprise_linux
|
N/A
|
|
|
2019-10-16
|
CVE-2019-2989 |
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this... |
E\-Series_santricity_os_controller,
E\-Series_santricity_storage_manager,
E\-Series_santricity_unified_manager,
E\-Series_santricity_web_services_proxy,
Oncommand_workflow_automation,
Snapmanager,
Graalvm,
Jdk,
Jre,
Enterprise_linux_desktop,
Enterprise_linux_server,
Enterprise_linux_workstation
|
N/A
|
|
|
2019-12-26
|
CVE-2012-4420 |
An information disclosure flaw was found in the way the Java Virtual Machine (JVM) implementation of Java SE 7 as provided by OpenJDK 7 incorrectly initialized integer arrays after memory allocation (in certain circumstances they had nonzero elements right after the allocation). A remote attacker could use this flaw to obtain potentially sensitive information. |
Jdk
|
N/A
|
|