WID-SEC-W-2023-1375
Vulnerability from csaf_certbund - Published: 2018-04-17 22:00 - Updated: 2023-06-06 22:00Summary
Oracle Java SE: Mehrere Schwachstellen
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Die Java Platform, Standard Edition (SE) ist eine Sammlung von Java-APIs (JDK) und der Java Laufzeit Umgebung (JRE).
Java Standard Edition (SE) Embedded ist die Laufzeitumgebung für die Java-Plattform des US-Unternehmens Oracle Corporation für Embedded Systems.
Oracle JRockit JVM ist eine leistungsfähige Java Virtual Machine, die in Oracle Fusion Middleware enthalten ist.
Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.
Betroffene Betriebssysteme: - UNIX
- Linux
- Windows
- F5 Networks
Affected products
Known affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Java SE 7u161
Oracle / Java SE
|
cpe:/a:oracle:java_se:7u161
|
— | |
|
Oracle Java SE 6u181
Oracle / Java SE
|
cpe:/a:oracle:java_se:6u181
|
— | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Oracle Java SE 8u152
Oracle / Java SE
|
cpe:/a:oracle:java_se:8u152
|
— | |
|
Oracle Java SE 8u162
Oracle / Java SE
|
cpe:/a:oracle:java_se:8u162
|
— | |
|
Oracle Java SE 7u171
Oracle / Java SE
|
cpe:/a:oracle:java_se:7u171
|
— | |
|
Oracle Java SE 10
Oracle / Java SE
|
cpe:/a:oracle:java_se:10
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
F5 BIG-IP
F5
|
cpe:/a:f5:big-ip:-
|
— | |
|
McAfee ePolicy Orchestrator 5.9.0
McAfee / ePolicy Orchestrator
|
cpe:/a:mcafee:epolicy_orchestrator:5.9.0
|
— | |
|
NetApp OnCommand Unified Manager 7.2
NetApp
|
cpe:/a:netapp:oncommand_unified_manager:7.2
|
— | |
|
McAfee ePolicy Orchestrator 5.9.1
McAfee / ePolicy Orchestrator
|
cpe:/a:mcafee:epolicy_orchestrator:5.9.1
|
— | |
|
EMC VNX2
EMC
|
cpe:/h:emc:vnx:-
|
— | |
|
McAfee ePolicy Orchestrator 5.3.3
McAfee / ePolicy Orchestrator
|
cpe:/a:mcafee:epolicy_orchestrator:5.3.3
|
— | |
|
McAfee ePolicy Orchestrator 5.3.1
McAfee / ePolicy Orchestrator
|
cpe:/a:mcafee:epolicy_orchestrator:5.3.1
|
— | |
|
McAfee ePolicy Orchestrator 5.3.0
McAfee / ePolicy Orchestrator
|
cpe:/a:mcafee:epolicy_orchestrator:5.3.0
|
— | |
|
McAfee ePolicy Orchestrator 5.3.2
McAfee / ePolicy Orchestrator
|
cpe:/a:mcafee:epolicy_orchestrator:5.3.2
|
— | |
|
Oracle JRockit R28.3.17
Oracle
|
cpe:/a:oracle:jrockit:r28.3.17
|
— | |
|
IBM Operational Decision Manager 8.10.x
IBM / Operational Decision Manager
|
cpe:/a:ibm:operational_decision_manager:8.10.x
|
— | |
|
IBM Operational Decision Manager 8.11.x
IBM / Operational Decision Manager
|
cpe:/a:ibm:operational_decision_manager:8.11.x
|
— | |
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
F5 Enterprise Manager
F5
|
cpe:/a:f5:enterprise_manager:-
|
— | |
|
Open Source CentOS
Open Source
|
cpe:/o:centos:centos:-
|
— | |
|
Oracle Java SE Embedded 8u161
Oracle
|
cpe:/a:oracle:java_se_embedded:7.0:update_40
|
— |
Affected products
Known affected
25 products, the same list as for
CVE-2018-2783
Affected products
Known affected
25 products, the same list as for
CVE-2018-2783
Affected products
Known affected
25 products, the same list as for
CVE-2018-2783
Affected products
Known affected
25 products, the same list as for
CVE-2018-2783
Affected products
Known affected
25 products, the same list as for
CVE-2018-2783
Affected products
Known affected
25 products, the same list as for
CVE-2018-2783
Affected products
Known affected
25 products, the same list as for
CVE-2018-2783
Affected products
Known affected
25 products, the same list as for
CVE-2018-2783
Affected products
Known affected
25 products, the same list as for
CVE-2018-2783
Affected products
Known affected
25 products, the same list as for
CVE-2018-2783
Affected products
Known affected
25 products, the same list as for
CVE-2018-2783
Affected products
Known affected
25 products, the same list as for
CVE-2018-2783
Affected products
Known affected
25 products, the same list as for
CVE-2018-2783
References
41 references
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Die Java Platform, Standard Edition (SE) ist eine Sammlung von Java-APIs (JDK) und der Java Laufzeit Umgebung (JRE).\r\nJava Standard Edition (SE) Embedded ist die Laufzeitumgebung f\u00fcr die Java-Plattform des US-Unternehmens Oracle Corporation f\u00fcr Embedded Systems.\r\nOracle JRockit JVM ist eine leistungsf\u00e4hige Java Virtual Machine, die in Oracle Fusion Middleware enthalten ist.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit ausnutzen, um die Verf\u00fcgbarkeit, Vertraulichkeit und Integrit\u00e4t zu gef\u00e4hrden.",
"title": "Angriff"
},
{
"category": "general",
"text": "- UNIX\n- Linux\n- Windows\n- F5 Networks",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2023-1375 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2018/wid-sec-w-2023-1375.json"
},
{
"category": "self",
"summary": "WID-SEC-2023-1375 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1375"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7001787 vom 2023-06-07",
"url": "https://www.ibm.com/support/pages/node/7001787"
},
{
"category": "external",
"summary": "Oracle Critical Patch Update Advisory - April 2018 vom 2018-04-17",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html#AppendixJAVA"
},
{
"category": "external",
"summary": "NetApp Security Advisory NTAP-20180419-0001 vom 2018-04-20",
"url": "https://security.netapp.com/advisory/ntap-20180419-0001/"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2018-1191 vom 2018-04-20",
"url": "http://linux.oracle.com/errata/ELSA-2018-1191.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2018-1188 vom 2018-04-20",
"url": "http://linux.oracle.com/errata/ELSA-2018-1188.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1201 vom 2018-04-24",
"url": "https://access.redhat.com/errata/RHSA-2018:1201"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1204 vom 2018-04-24",
"url": "https://access.redhat.com/errata/RHSA-2018:1204"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1206 vom 2018-04-24",
"url": "https://access.redhat.com/errata/RHSA-2018:1206"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1202 vom 2018-04-24",
"url": "https://access.redhat.com/errata/RHSA-2018:1202"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1205 vom 2018-04-24",
"url": "https://access.redhat.com/errata/RHSA-2018:1205"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1203 vom 2018-04-24",
"url": "https://access.redhat.com/errata/RHSA-2018:1203"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-4185 vom 2018-04-29",
"url": "https://www.debian.org/security/2018/dsa-4185"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2018-1270 vom 2018-05-01",
"url": "http://linux.oracle.com/errata/ELSA-2018-1270.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1270 vom 2018-04-30",
"url": "https://access.redhat.com/errata/RHSA-2018:1270"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1188",
"url": "https://access.redhat.com/errata/RHSA-2018:1188"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2018-1278 vom 2018-05-03",
"url": "http://linux.oracle.com/errata/ELSA-2018-1278.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1278 vom 2018-05-03",
"url": "https://access.redhat.com/errata/RHSA-2018:1278"
},
{
"category": "external",
"summary": "CentOS Security Advisory CESA-2018:1270 vom 2018-05-02",
"url": "http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2018-1270-Important-CentOS-6-java-1-7-0-openjdk-Security-Update-tp4645024.html"
},
{
"category": "external",
"summary": "McAfee Security Bulletin",
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10234"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1724 vom 2018-05-24",
"url": "http://rhn.redhat.com/errata/RHSA-2018-1724.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1723 vom 2018-05-24",
"url": "http://rhn.redhat.com/errata/RHSA-2018-1723.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1722 vom 2018-05-24",
"url": "http://rhn.redhat.com/errata/RHSA-2018-1722.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1721 vom 2018-05-24",
"url": "http://rhn.redhat.com/errata/RHSA-2018-1721.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:1447-1 vom 2018-05-29",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181447-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:1458-1 vom 2018-05-29",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181458-1.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-4225 vom 2018-06-11",
"url": "https://www.debian.org/security/2018/dsa-4225"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:1692-1 vom 2018-06-14",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181692-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:1690-1 vom 2018-06-14",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181690-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:1738-1 vom 2018-06-20",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181738-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:1764-1 vom 2018-06-20",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181764-1.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1975 vom 2018-06-25",
"url": "http://rhn.redhat.com/errata/RHSA-2018-1975.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:1974 vom 2018-06-25",
"url": "http://rhn.redhat.com/errata/RHSA-2018-1974.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:1938-1 vom 2018-07-13",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181938-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:1938-2 vom 2018-07-13",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20181938-2.html"
},
{
"category": "external",
"summary": "F5 Security Advisory K15217245 vom 2018-09-19",
"url": "https://support.f5.com/csp/article/K15217245"
},
{
"category": "external",
"summary": "F5 Security Advisory K44923228 Stand 2018-09.20",
"url": "https://support.f5.com/csp/article/K44923228"
},
{
"category": "external",
"summary": "F5 Security Advisory K33924005 Stand 2018-09.20",
"url": "https://support.f5.com/csp/article/K33924005"
},
{
"category": "external",
"summary": "F5 Security Advisory K70321874 vom 2018-12-18",
"url": "https://support.f5.com/csp/article/K70321874"
},
{
"category": "external",
"summary": "Dell/EMC Knowledge Base Article: 000529947",
"url": "https://support.emc.com/kb/529947"
}
],
"source_lang": "en-US",
"title": "Oracle Java SE: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2023-06-06T22:00:00.000+00:00",
"generator": {
"date": "2026-07-16T16:47:24.554+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.6.0"
}
},
"id": "WID-SEC-W-2023-1375",
"initial_release_date": "2018-04-17T22:00:00.000+00:00",
"revision_history": [
{
"date": "2018-04-17T22:00:00.000+00:00",
"number": "1",
"summary": "Initial Release"
},
{
"date": "2018-04-17T22:00:00.000+00:00",
"number": "2",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-04-19T22:00:00.000+00:00",
"number": "3",
"summary": "New remediations available"
},
{
"date": "2018-04-19T22:00:00.000+00:00",
"number": "4",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-04-23T22:00:00.000+00:00",
"number": "5",
"summary": "New remediations available"
},
{
"date": "2018-04-29T22:00:00.000+00:00",
"number": "6",
"summary": "New remediations available"
},
{
"date": "2018-05-01T22:00:00.000+00:00",
"number": "7",
"summary": "New remediations available"
},
{
"date": "2018-05-01T22:00:00.000+00:00",
"number": "8",
"summary": "New remediations available"
},
{
"date": "2018-05-02T22:00:00.000+00:00",
"number": "9",
"summary": "New remediations available"
},
{
"date": "2018-05-02T22:00:00.000+00:00",
"number": "10",
"summary": "New remediations available"
},
{
"date": "2018-05-07T22:00:00.000+00:00",
"number": "11",
"summary": "New remediations available"
},
{
"date": "2018-05-07T22:00:00.000+00:00",
"number": "12",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-05-24T22:00:00.000+00:00",
"number": "13",
"summary": "New remediations available"
},
{
"date": "2018-05-28T22:00:00.000+00:00",
"number": "14",
"summary": "New remediations available"
},
{
"date": "2018-05-29T22:00:00.000+00:00",
"number": "15",
"summary": "New remediations available"
},
{
"date": "2018-06-11T22:00:00.000+00:00",
"number": "16",
"summary": "New remediations available"
},
{
"date": "2018-06-14T22:00:00.000+00:00",
"number": "17",
"summary": "New remediations available"
},
{
"date": "2018-06-19T22:00:00.000+00:00",
"number": "18",
"summary": "New remediations available"
},
{
"date": "2018-06-20T22:00:00.000+00:00",
"number": "19",
"summary": "New remediations available"
},
{
"date": "2018-06-25T22:00:00.000+00:00",
"number": "20",
"summary": "New remediations available"
},
{
"date": "2018-07-12T22:00:00.000+00:00",
"number": "21",
"summary": "New remediations available"
},
{
"date": "2018-09-19T22:00:00.000+00:00",
"number": "22",
"summary": "New remediations available"
},
{
"date": "2018-09-19T22:00:00.000+00:00",
"number": "23",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-09-19T22:00:00.000+00:00",
"number": "24",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-12-18T23:00:00.000+00:00",
"number": "25",
"summary": "New remediations available"
},
{
"date": "2019-01-30T23:00:00.000+00:00",
"number": "26",
"summary": "Neue Updates von EMC aufgenommen"
},
{
"date": "2023-06-06T22:00:00.000+00:00",
"number": "27",
"summary": "Neue Updates von IBM aufgenommen"
}
],
"status": "final",
"version": "27"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"category": "product_name",
"name": "EMC VNX2",
"product": {
"name": "EMC VNX2",
"product_id": "T004667",
"product_identification_helper": {
"cpe": "cpe:/h:emc:vnx:-"
}
}
}
],
"category": "vendor",
"name": "EMC"
},
{
"branches": [
{
"category": "product_name",
"name": "F5 BIG-IP",
"product": {
"name": "F5 BIG-IP",
"product_id": "T001663",
"product_identification_helper": {
"cpe": "cpe:/a:f5:big-ip:-"
}
}
},
{
"category": "product_name",
"name": "F5 Enterprise Manager",
"product": {
"name": "F5 Enterprise Manager",
"product_id": "T000125",
"product_identification_helper": {
"cpe": "cpe:/a:f5:enterprise_manager:-"
}
}
}
],
"category": "vendor",
"name": "F5"
},
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "IBM Operational Decision Manager 8.10.x",
"product": {
"name": "IBM Operational Decision Manager 8.10.x",
"product_id": "T027827",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:operational_decision_manager:8.10.x"
}
}
},
{
"category": "product_name",
"name": "IBM Operational Decision Manager 8.11.x",
"product": {
"name": "IBM Operational Decision Manager 8.11.x",
"product_id": "T027828",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:operational_decision_manager:8.11.x"
}
}
}
],
"category": "product_name",
"name": "Operational Decision Manager"
}
],
"category": "vendor",
"name": "IBM"
},
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "McAfee ePolicy Orchestrator 5.3.1",
"product": {
"name": "McAfee ePolicy Orchestrator 5.3.1",
"product_id": "318532",
"product_identification_helper": {
"cpe": "cpe:/a:mcafee:epolicy_orchestrator:5.3.1"
}
}
},
{
"category": "product_name",
"name": "McAfee ePolicy Orchestrator 5.3.2",
"product": {
"name": "McAfee ePolicy Orchestrator 5.3.2",
"product_id": "T009959",
"product_identification_helper": {
"cpe": "cpe:/a:mcafee:epolicy_orchestrator:5.3.2"
}
}
},
{
"category": "product_name",
"name": "McAfee ePolicy Orchestrator 5.9.0",
"product": {
"name": "McAfee ePolicy Orchestrator 5.9.0",
"product_id": "T009960",
"product_identification_helper": {
"cpe": "cpe:/a:mcafee:epolicy_orchestrator:5.9.0"
}
}
},
{
"category": "product_name",
"name": "McAfee ePolicy Orchestrator 5.3.3",
"product": {
"name": "McAfee ePolicy Orchestrator 5.3.3",
"product_id": "T012223",
"product_identification_helper": {
"cpe": "cpe:/a:mcafee:epolicy_orchestrator:5.3.3"
}
}
},
{
"category": "product_name",
"name": "McAfee ePolicy Orchestrator 5.3.0",
"product": {
"name": "McAfee ePolicy Orchestrator 5.3.0",
"product_id": "T012224",
"product_identification_helper": {
"cpe": "cpe:/a:mcafee:epolicy_orchestrator:5.3.0"
}
}
},
{
"category": "product_name",
"name": "McAfee ePolicy Orchestrator 5.9.1",
"product": {
"name": "McAfee ePolicy Orchestrator 5.9.1",
"product_id": "T012225",
"product_identification_helper": {
"cpe": "cpe:/a:mcafee:epolicy_orchestrator:5.9.1"
}
}
}
],
"category": "product_name",
"name": "ePolicy Orchestrator"
}
],
"category": "vendor",
"name": "McAfee"
},
{
"branches": [
{
"category": "product_name",
"name": "NetApp OnCommand Unified Manager 7.2",
"product": {
"name": "NetApp OnCommand Unified Manager 7.2",
"product_id": "T011994",
"product_identification_helper": {
"cpe": "cpe:/a:netapp:oncommand_unified_manager:7.2"
}
}
}
],
"category": "vendor",
"name": "NetApp"
},
{
"branches": [
{
"category": "product_name",
"name": "Open Source CentOS",
"product": {
"name": "Open Source CentOS",
"product_id": "1727",
"product_identification_helper": {
"cpe": "cpe:/o:centos:centos:-"
}
}
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle JRockit R28.3.17",
"product": {
"name": "Oracle JRockit R28.3.17",
"product_id": "T012140",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:jrockit:r28.3.17"
}
}
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Java SE 7u161",
"product": {
"name": "Oracle Java SE 7u161",
"product_id": "T011621",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:7u161"
}
}
},
{
"category": "product_name",
"name": "Oracle Java SE 8u152",
"product": {
"name": "Oracle Java SE 8u152",
"product_id": "T011623",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:8u152"
}
}
},
{
"category": "product_name",
"name": "Oracle Java SE 10",
"product": {
"name": "Oracle Java SE 10",
"product_id": "T012136",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:10"
}
}
},
{
"category": "product_name",
"name": "Oracle Java SE 8u162",
"product": {
"name": "Oracle Java SE 8u162",
"product_id": "T012137",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:8u162"
}
}
},
{
"category": "product_name",
"name": "Oracle Java SE 7u171",
"product": {
"name": "Oracle Java SE 7u171",
"product_id": "T012138",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:7u171"
}
}
},
{
"category": "product_name",
"name": "Oracle Java SE 6u181",
"product": {
"name": "Oracle Java SE 6u181",
"product_id": "T012139",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se:6u181"
}
}
}
],
"category": "product_name",
"name": "Java SE"
},
{
"category": "product_name",
"name": "Oracle Java SE Embedded 8u161",
"product": {
"name": "Oracle Java SE Embedded 8u161",
"product_id": "T002043",
"product_identification_helper": {
"cpe": "cpe:/a:oracle:java_se_embedded:7.0:update_40"
}
}
},
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-2783",
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2783"
},
{
"cve": "CVE-2018-2790",
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2790"
},
{
"cve": "CVE-2018-2794",
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2794"
},
{
"cve": "CVE-2018-2795",
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2795"
},
{
"cve": "CVE-2018-2796",
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2796"
},
{
"cve": "CVE-2018-2797",
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2797"
},
{
"cve": "CVE-2018-2798",
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2798"
},
{
"cve": "CVE-2018-2799",
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2799"
},
{
"cve": "CVE-2018-2800",
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2800"
},
{
"cve": "CVE-2018-2811",
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2811"
},
{
"cve": "CVE-2018-2814",
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2814"
},
{
"cve": "CVE-2018-2815",
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2815"
},
{
"cve": "CVE-2018-2825",
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2825"
},
{
"cve": "CVE-2018-2826",
"product_status": {
"known_affected": [
"T011621",
"T012139",
"67646",
"T011623",
"T012137",
"T012138",
"T012136",
"T004914",
"T001663",
"T009960",
"T011994",
"T012225",
"T004667",
"T012223",
"318532",
"T012224",
"T009959",
"T012140",
"T027827",
"T027828",
"2951",
"T002207",
"T000125",
"1727",
"T002043"
]
},
"release_date": "2018-04-17T22:00:00.000+00:00",
"title": "CVE-2018-2826"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…