IBM Java vulnerabilities

27 CVEs affecting IBM Java, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-30441, published 2023-04-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-4002, published 2013-07-23. High severity, CVSS 7.1. EPSS: 24.7% chance of exploitation in the next 30 days. XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7…
CVE-2012-4822, published 2013-01-11. High severity, CVSS 9.3. EPSS: 6.9% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and…
CVE-2012-4821, published 2013-01-11. High severity, CVSS 9.3. EPSS: 6.9% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and…
CVE-2012-4823, published 2013-01-11. High severity, CVSS 9.3. EPSS: 6.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used…
CVE-2013-5457, published 2013-11-24. High severity, CVSS 9.3. EPSS: 6.1% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2013-5456, published 2013-11-24. High severity, CVSS 9.3. EPSS: 6% chance of exploitation in the next 30 days. The com.ibm.rmi.io.SunSerializableFactory class in IBM Java SDK 7.0.0 before SR6 allows remote attackers to bypass a sandbox protection mechanism and execute arbitrary code via vectors related to…
CVE-2013-5458, published 2013-11-24. High severity, CVSS 9.3. EPSS: 5.4% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6 allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2012-4820, published 2013-01-11. High severity, CVSS 9.3. EPSS: 5.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used…
CVE-2013-3012, published 2013-07-23. High severity, CVSS 9.3. EPSS: 4.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows…
CVE-2013-3011, published 2013-07-23. High severity, CVSS 9.3. EPSS: 4.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows…

Latest

CVE-2023-30441, published 2023-04-29. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations. IBM…
CVE-2019-4473, published 2019-08-05. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM…
CVE-2015-1916, published 2015-07-02. High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM Java 8 before SR1 allows remote attackers to cause a denial of service via unknown vectors related to SSL/TLS and the Secure Socket Extension provider.
CVE-2015-1914, published 2015-07-02. Medium severity, CVSS 5.0. EPSS: 4% chance of exploitation in the next 30 days. IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to bypass "permission checks" and obtain sensitive information via…
CVE-2015-0192, published 2015-07-02. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to gain privileges via…
CVE-2014-3068, published 2014-12-02. Medium severity, CVSS 6.4. EPSS: 1.2% chance of exploitation in the next 30 days. IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1 (7.0.7.1), 6 R1 before SR8 FP1 (6.1.8.1), 6 before SR16 FP1 (6.0.16.1), and before 5.0 SR16 FP7 (5.0.16.7) allows…
CVE-2014-3065, published 2014-12-02. Medium severity, CVSS 6.9. EPSS: 0.6% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7 before SR8 (7.0.8.0), 6 R1 before SR8 FP2 (6.1.8.2), 6 before SR16 FP2 (6.0.16.2), and before SR16 FP8…
CVE-2013-0485, published 2014-01-21. High severity, CVSS 10.0. EPSS: 2.4% chance of exploitation in the next 30 days. Unspecified vulnerability in IBM Java SDK 7 before SR4-FP1, 6 before SR13-FP1, 5.0 before SR16-FP1, and 1.4.2 before SR13-FP16 has unknown impact and attack vectors related to Class Libraries.