Java Sdk

10 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-27267 MEDIUM This Month

The Object Request Broker (ORB) in IBM SDK, Java Technology Edition 7.1.0.0 through 7.1.5.18 and 8.0.0.0 through 8.0.8.26 is vulnerable to remote denial of service, caused by a race condition in the. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

IBM Race Condition Java Denial Of Service Java Sdk

NVD

CVSS 3.1

5.9

EPSS

0.4%

CVE-2018-1417 HIGH This Week

Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code running under a security manager to elevate its privileges. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Java IBM Information Disclosure Java Sdk

NVD

CVSS 3.0

8.1

EPSS

2.2%

CVE-2015-5041 CRITICAL Act Now

The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

IBM Information Disclosure Java Java Sdk Linux Enterprise Server +4

NVD

CVSS 3.0

9.1

EPSS

0.9%

CVE-2016-0376 HIGH This Week

The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

IBM RCE Java Suse Linux Enterprise Software Development Kit Suse Linux Enterprise Module For Legacy Software +11

NVD

CVSS 3.0

8.1

EPSS

1.5%

CVE-2016-0363 HIGH This Week

The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

IBM Java Authentication Bypass Satellite Enterprise Linux Desktop +11

NVD

CVSS 3.0

8.1

EPSS

0.5%

CVE-2016-0264 MEDIUM This Month

Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3. Rated medium severity (CVSS 5.6), this vulnerability is remotely exploitable, no authentication required. Epss exploitation probability 12.9% and no vendor patch available.

IBM RCE Buffer Overflow Java Linux Enterprise Server +12

NVD

CVSS 3.1

5.6

EPSS

12.9%

CVE-2015-5006 LOW Monitor

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16 FP15 allow physically proximate. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. No vendor patch available.

IBM Information Disclosure Java Java 2 Sdk Java Sdk +7

NVD

CVSS 2.0

2.1

EPSS

0.1%

CVE-2014-8892 HIGH This Week

Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

IBM Information Disclosure Java Java Sdk

NVD

CVSS 2.0

7.8

EPSS

1.6%

CVE-2014-8891 CRITICAL Act Now

Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

IBM RCE Java Java Sdk

NVD

CVSS 2.0

10.0

EPSS

6.6%

CVE-2014-0878 MEDIUM This Month

The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable. No vendor patch available.

IBM Information Disclosure Java Java Sdk

NVD

CVSS 2.0

5.8

EPSS

0.6%

CVE-2024-27267

EPSS 0% CVSS 5.9

MEDIUM This Month

IBM Race Condition Java +2

NVD

CVE-2018-1417

EPSS 2% CVSS 8.1

HIGH This Week

Java IBM Information Disclosure +1

NVD

CVE-2015-5041

EPSS 1% CVSS 9.1

CRITICAL Act Now

IBM Information Disclosure Java +6

NVD

CVE-2016-0376

EPSS 2% CVSS 8.1

HIGH This Week

IBM RCE Java +13

NVD

CVE-2016-0363

EPSS 1% CVSS 8.1

HIGH This Week

IBM Java Authentication Bypass +13

NVD

CVE-2016-0264

EPSS 13% CVSS 5.6

MEDIUM This Month

IBM RCE Buffer Overflow +14

NVD

CVE-2015-5006

EPSS 0% CVSS 2.1

LOW Monitor

IBM Information Disclosure Java +9

NVD

CVE-2014-8892

EPSS 2% CVSS 7.8

HIGH This Week

IBM Information Disclosure Java +1

NVD

CVE-2014-8891

EPSS 7% CVSS 10.0

CRITICAL Act Now

Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

IBM RCE Java +1

NVD

CVE-2014-0878

EPSS 1% CVSS 5.8

MEDIUM This Month

IBM Information Disclosure Java +1

NVD