Icedtea

6 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2017-3544 LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Java Oracle Jdk Jre +11

NVD

CVSS 3.0

3.7

EPSS

0.4%

CVE-2017-3539 LOW PATCH Monitor

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Rated low severity (CVSS 3.1), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Java Oracle Jdk Jre +9

NVD

CVSS 3.0

3.1

EPSS

0.7%

CVE-2017-3533 LOW PATCH Monitor

Authentication Bypass Java Oracle Jdk Jre +10

NVD

CVSS 3.0

3.7

EPSS

0.6%

CVE-2017-3512 HIGH PATCH This Week

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure Java Oracle Jdk Jre +1

NVD

CVSS 3.0

8.3

EPSS

5.1%

CVE-2015-5235 MEDIUM PATCH This Month

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

Authentication Bypass Fedora Enterprise Linux Desktop Enterprise Linux Hpc Node Enterprise Linux Server +3

NVD

CVSS 2.0

4.3

EPSS

0.9%

CVE-2015-5234 MEDIUM PATCH This Month

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration file and bypass. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

Authentication Bypass Enterprise Linux Desktop Enterprise Linux Hpc Node Enterprise Linux Server Enterprise Linux Workstation +3

NVD

CVSS 2.0

6.8

EPSS

0.9%

CVE-2017-3544

EPSS 0% CVSS 3.7

LOW PATCH Monitor

Authentication Bypass Java Oracle +13

NVD

CVE-2017-3539

EPSS 1% CVSS 3.1

LOW PATCH Monitor

Authentication Bypass Java Oracle +11

NVD

CVE-2017-3533

EPSS 1% CVSS 3.7

LOW PATCH Monitor

Authentication Bypass Java Oracle +12

NVD

CVE-2017-3512

EPSS 5% CVSS 8.3

HIGH PATCH This Week

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure Java Oracle +3

NVD

CVE-2015-5235

EPSS 1% CVSS 4.3

MEDIUM PATCH This Month

Authentication Bypass Fedora Enterprise Linux Desktop +5

NVD

CVE-2015-5234

EPSS 1% CVSS 6.8

MEDIUM PATCH This Month

Authentication Bypass Enterprise Linux Desktop Enterprise Linux Hpc Node +5

NVD