IBM Forms Viewer vulnerabilities

13 CVEs affecting IBM Forms Viewer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-2428, published 2014-04-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-5447, published 2013-12-10. Medium severity, CVSS 6.8. EPSS: 34% chance of exploitation in the next 30 days. Stack-based buffer overflow in IBM Forms Viewer 4.x before 4.0.0.3 and 8.x before 8.0.1.1 allows remote attackers to execute arbitrary code via an XFDL form with a long fontname value.
CVE-2014-0429, published 2014-04-16. High severity, CVSS 10.0. EPSS: 7.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and…
CVE-2014-2421, published 2014-04-16. High severity, CVSS 10.0. EPSS: 6.8% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via…
CVE-2014-0457, published 2014-04-16. High severity, CVSS 10.0. EPSS: 6.8% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and…
CVE-2014-0456, published 2014-04-16. High severity, CVSS 10.0. EPSS: 6.8% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to…
CVE-2014-0461, published 2014-04-16. High severity, CVSS 9.3. EPSS: 6% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to…
CVE-2014-0455, published 2014-04-16. High severity, CVSS 9.3. EPSS: 5.5% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to…
CVE-2014-2428, published 2014-04-16. High severity, CVSS 7.6. EPSS: 5.2% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to…
CVE-2014-0448, published 2014-04-16. High severity, CVSS 7.6. EPSS: 5.2% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 7u51 and 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVE-2014-0453, published 2014-04-16. Medium severity, CVSS 4.0. EPSS: 5% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via…

Latest

CVE-2014-2401, published 2014-04-16. Medium severity, CVSS 5.0. EPSS: 3.6% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
CVE-2014-2398, published 2014-04-16. Low severity, CVSS 3.5. EPSS: 2.6% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related…
CVE-2014-0454, published 2014-04-16. High severity, CVSS 7.5. EPSS: 4.7% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to…