IBM Java SDK vulnerabilities

11 CVEs affecting IBM Java SDK, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-27267, published 2024-08-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-8891, published 2015-03-06. High severity, CVSS 10.0. EPSS: 7.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10…
CVE-2016-0376, published 2016-06-03. High severity, CVSS 8.1. EPSS: 5.7% chance of exploitation in the next 30 days. The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40…
CVE-2014-8892, published 2015-03-06. High severity, CVSS 7.8. EPSS: 4.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10…
CVE-2016-0363, published 2016-06-03. High severity, CVSS 8.1. EPSS: 4% chance of exploitation in the next 30 days. The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40…
CVE-2016-0264, published 2016-05-24. Medium severity, CVSS 5.6. EPSS: 3.9% chance of exploitation in the next 30 days. Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3…
CVE-2015-5041, published 2016-06-06. Critical severity, CVSS 9.1. EPSS: 3.9% chance of exploitation in the next 30 days. The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject…
CVE-2018-1417, published 2018-02-22. High severity, CVSS 8.1. EPSS: 2.1% chance of exploitation in the next 30 days. Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID:…
CVE-2014-0878, published 2014-05-26. Medium severity, CVSS 5.8. EPSS: 2.1% chance of exploitation in the next 30 days. The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before…
CVE-2015-5006, published 2015-12-07. Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16 FP15 allow physically proximate…
CVE-2024-27267, published 2024-08-14. Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days. The Object Request Broker (ORB) in IBM SDK, Java Technology Edition 7.1.0.0 through 7.1.5.18 and 8.0.0.0 through 8.0.8.26 is vulnerable to remote denial of service, caused by a race condition in the…

Latest

CVE-2015-1931, published 2022-09-29. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores…