Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXP.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Java | — | Upgrade to Apple Java version 1.6.0.65 | Oct 18, 2013 | Oct 16, 2013 |
| Centos_linux | — | Upgrade java-1.6.0-openjdkUpgrade java-1.7.0-openjdk-demoUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdk-srcUpgrade java-1.7.0-openjdkUpgrade java-1.6.0-openjdk-develUpgrade java-1.7.0-openjdk-develUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.6.0-openjdk-demoUpgrade java-1.7.0-openjdk-src | Dec 1, 2016 | Oct 16, 2013 |
| Gentoo Linux | — | Upgrade dev-java/sun-jre-bin.Upgrade dev-java/sun-jdk.Upgrade app-emulation/emul-linux-x86-java.Upgrade dev-java/oracle-jre-bin.Upgrade dev-java/icedtea-bin.Upgrade dev-java/oracle-jdk-bin. | Oct 30, 2017 | Oct 16, 2013 |
| Hpux | — | Update Jre70.JRE70-IPF64-HS to the latest versionUpdate Jdk70.JDK70-COM to the latest versionUpdate Jdk70.JDK70-IPF64 to the latest versionUpdate Jre70.JRE70-IPF32-HS to the latest versionUpdate Jre70.JRE70-COM to the latest versionUpdate Jdk70.JDK70-IPF32 to the latest versionUpdate Jre70.JRE70-IPF32 to the latest versionUpdate Jre70.JRE70-IPF64 to the latest versionUpdate Jdk70.JDK70-DEMO to the latest version | Aug 11, 2017 | Oct 16, 2013 |
| Ibm Aix | — | Apply the fix or workaround for java_advisory | Nov 30, 2017 | Oct 16, 2013 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Nov 7, 2013 | Oct 16, 2013 |
| Oracle_linux | — | Upgrade java-1.7.0-openjdk-srcUpgrade java-1.7.0-openjdk-develUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-demoUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.7.0-openjdk-demoUpgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdkUpgrade java-1.7.0-openjdk | Oct 16, 2024 | Oct 16, 2013 |
| Suse | — | Upgrade java-1_7_0-openjdk-develUpgrade java-1_7_0-ibm-alsaUpgrade java-1_5_0-ibm-jdbcUpgrade java-1_6_0-ibm-plugin-32bitUpgrade sle-sdk-releaseUpgrade java-1_6_0-ibm-jdbcUpgrade java-1_7_0-openjdk-srcUpgrade java-1_6_0-ibmUpgrade java-1_6_0-openjdk-develUpgrade java-1_5_0-ibmUpgrade java-1_5_0-ibm-32bitUpgrade java-1_6_0-ibm-fontsUpgrade java-1_6_0-ibm-develUpgrade java-1_5_0-ibm-fontsUpgrade java-1_6_0-ibm-32bitUpgrade java-1_7_0-openjdkUpgrade java-1_7_0-ibm-develUpgrade java-1_6_0-openjdkUpgrade java-1_6_0-ibm-devel-32bitUpgrade java-1_6_0-ibm-alsa-32bitUpgrade java-1_7_0-ibm-pluginUpgrade java-1_7_0-openjdk-demoUpgrade java-1_5_0-ibm-develUpgrade java-1_5_0-ibm-pluginUpgrade java-1_5_0-ibm-alsaUpgrade java-1_7_0-ibmUpgrade java-1_7_0-ibm-jdbcUpgrade java-1_6_0-ibm-alsaUpgrade java-1_6_0-openjdk-demoUpgrade java-1_7_0-openjdk-javadocUpgrade java-1_6_0-ibm-pluginUpgrade java-1_5_0-ibm-alsa-32bitUpgrade java-1_5_0-ibm-devel-32bit | Feb 17, 2015 | Oct 16, 2013 |
| Ubuntu | — | Upgrade icedtea-6-jre-jamvmUpgrade icedtea-6-jre-cacaoUpgrade openjdk-6-jre-zeroUpgrade openjdk-6-jre-libUpgrade icedtea-7-jre-cacaoUpgrade openjdk-7-jre-libUpgrade openjdk-7-jre-headlessUpgrade openjdk-7-jreUpgrade openjdk-7-jre-zeroUpgrade openjdk-6-jre-headlessUpgrade icedtea-7-jre-jamvmUpgrade openjdk-6-jre | Nov 8, 2024 | Oct 16, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub