Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | centos-upgrade-java-1-7-1-ibmcentos-upgrade-java-1-7-1-ibm-democentos-upgrade-java-1-7-1-ibm-develcentos-upgrade-java-1-7-1-ibm-jdbccentos-upgrade-java-1-7-1-ibm-plugincentos-upgrade-java-1-7-1-ibm-srccentos-upgrade-java-1-8-0-ibmcentos-upgrade-java-1-8-0-ibm-democentos-upgrade-java-1-8-0-ibm-develcentos-upgrade-java-1-8-0-ibm-jdbccentos-upgrade-java-1-8-0-ibm-plugincentos-upgrade-java-1-8-0-ibm-srccentos-upgrade-satellitecentos-upgrade-satellite-branding | Aug 28, 2019 | Apr 19, 2018 |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | May 10, 2018 | |
| Ibm Aix | ibm-aix-java_apr2018_advisory | Jun 15, 2018 | Apr 18, 2018 | |
| Ibm Java | — | ibm-java-upgrade-6_0_16_65ibm-java-upgrade-6_1_8_65ibm-java-upgrade-7_0_10_25ibm-java-upgrade-7_1_4_25ibm-java-upgrade-8_0_5_15 | Oct 5, 2018 | Apr 18, 2018 |
| Ibm Was | ibm-was-upgrade-latest | May 31, 2018 | Apr 19, 2018 | |
| Jre Vuln | jre-upgrade-latest | Apr 18, 2018 | Apr 18, 2018 | |
| Redhat_linux | — | redhat-upgrade-java-1-7-1-ibmredhat-upgrade-java-1-7-1-ibm-demoredhat-upgrade-java-1-7-1-ibm-develredhat-upgrade-java-1-7-1-ibm-jdbcredhat-upgrade-java-1-7-1-ibm-pluginredhat-upgrade-java-1-7-1-ibm-srcredhat-upgrade-java-1-8-0-ibmredhat-upgrade-java-1-8-0-ibm-demoredhat-upgrade-java-1-8-0-ibm-develredhat-upgrade-java-1-8-0-ibm-jdbcredhat-upgrade-java-1-8-0-ibm-pluginredhat-upgrade-java-1-8-0-ibm-srcredhat-upgrade-satelliteredhat-upgrade-satellite-branding | May 25, 2018 | Apr 18, 2018 |
| Suse | — | suse-upgrade-java-1_7_0-ibmsuse-upgrade-java-1_7_0-ibm-alsasuse-upgrade-java-1_7_0-ibm-develsuse-upgrade-java-1_7_0-ibm-jdbcsuse-upgrade-java-1_7_0-ibm-pluginsuse-upgrade-java-1_7_1-ibmsuse-upgrade-java-1_7_1-ibm-alsasuse-upgrade-java-1_7_1-ibm-develsuse-upgrade-java-1_7_1-ibm-jdbcsuse-upgrade-java-1_7_1-ibm-pluginsuse-upgrade-java-1_8_0-ibmsuse-upgrade-java-1_8_0-ibm-alsasuse-upgrade-java-1_8_0-ibm-develsuse-upgrade-java-1_8_0-ibm-plugin | May 29, 2018 | Apr 18, 2018 |
| Ubuntu | ubuntu-upgrade-openjdk-8-jreubuntu-upgrade-openjdk-8-jre-headlessubuntu-upgrade-openjdk-8-jre-jamvmubuntu-upgrade-openjdk-8-jre-zero | May 22, 2018 | Apr 18, 2018 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Apr 19, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub