The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3 Java_jan2016_advisory | — | — | Aug 5, 2016 | Aug 5, 2016 |
| Aix 6.1 Java_jan2016_advisory | — | — | Aug 5, 2016 | Aug 5, 2016 |
| Aix 7.1 Java_jan2016_advisory | — | — | Aug 5, 2016 | Aug 5, 2016 |
| Aix 7.2 Java_jan2016_advisory | — | — | Aug 5, 2016 | Aug 5, 2016 |
| Ibm Aix | — | Apply the fix or workaround for java_jan2016_advisory | Nov 30, 2017 | Jun 6, 2016 |
| Ibm Java | — | Upgrade IBM Java to version 6.1.8.20Upgrade IBM Java to version 7.1.3.30Upgrade IBM Java to version 6.0.16.20Upgrade IBM Java to version 8.0.2.10Upgrade IBM Java to version 7.0.9.30 | Oct 5, 2018 | Jun 6, 2016 |
| Suse | — | Upgrade java-1_6_0-ibm-fontsUpgrade java-1_7_0-ibm-alsaUpgrade java-1_7_0-ibmUpgrade java-1_7_1-ibm-alsaUpgrade java-1_6_0-ibm-pluginUpgrade java-1_8_0-ibmUpgrade java-1_6_0-ibm-develUpgrade java-1_7_1-ibmUpgrade java-1_8_0-ibm-alsaUpgrade java-1_6_0-ibm-alsaUpgrade java-1_7_0-ibm-jdbcUpgrade java-1_8_0-ibm-develUpgrade java-1_7_0-ibm-develUpgrade java-1_7_1-ibm-jdbcUpgrade java-1_6_0-ibm-jdbcUpgrade java-1_6_0-ibmUpgrade java-1_8_0-ibm-pluginUpgrade java-1_7_1-ibm-develUpgrade java-1_7_1-ibm-pluginUpgrade java-1_7_0-ibm-plugin | Feb 9, 2016 | Feb 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub