Red Hat ICEDTEA6 vulnerabilities

6 CVEs affecting Red Hat ICEDTEA6, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-2783, published 2019-10-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-1723: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability, published 2012-06-16. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 93.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows…
CVE-2011-2513, published 2014-05-14. Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days. The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to obtain the…
CVE-2011-2514, published 2014-05-14. Medium severity, CVSS 6.8. EPSS: 2.4% chance of exploitation in the next 30 days. The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to trick…
CVE-2010-2548, published 2019-10-31. Critical severity, CVSS 9.1. EPSS: 2% chance of exploitation in the next 30 days. IcedTea6 before 1.7.4 does not properly check property access, which allows unsigned apps to read and write arbitrary files.
CVE-2010-2783, published 2019-10-31. Critical severity, CVSS 9.1. EPSS: 1.9% chance of exploitation in the next 30 days. IcedTea6 before 1.7.4 allow unsigned apps to read and write arbitrary files, related to Extended JNLP Services.
CVE-2012-1717, published 2012-06-16. Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows…