Oracle JDK - 5132 CVEs (Page 36/43)

About “Oracle JDK”

A curated feed of “Oracle JDK”-related CVEs appears below. We currently track 5132 CVEs for this tag (all time). In the last 365 days, 782 were published. Average CVSS is 6.7 (all time; 6.3 over 365d), and 48% are rated High/Critical (all time). Top CWEs (last 365 days): CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal').

In our taxonomy this topic maps to a MODERATE impact class. JDK and JVM updates affect TLS, serialization, and performance. Upgrade JDK or JRE, restart dependents, avoid unsupported builds, and consider key or cert rotation if needed. Use the filters below to sort by CVSS, risk and CWE. Each detail page highlights vendor advisories and mitigation tips.

CVEs tagged with this topic. Filters apply to the whole list (loaded from JSON).

CVSS ≥ 0.0

2013-03-15

Medium

CVE-2013-0967

CoreTypes in Apple Mac OS X before 10.8.3 includes JNLP files in the list of safe file types, which allows remote attackers to bypass a Java plug-in disabled setting, and trigger the launch of Java W…

CVSS: 4.3 CWE: N/A View on NVD

2013-03-08

Critical

CVE-2013-1491

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to exe…

CVSS: 10.0 CWE: CWE-94 - Improper Control of Generation of Code ('Code Injection') View on NVD

Critical

CVE-2013-1488

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to execute arbitrary code via unspecified vectors involving reflec…

CVSS: 10.0 CWE: CWE-94 - Improper Control of Generation of Code ('Code Injection') View on NVD

Critical

CVE-2013-0402

Heap-based buffer overflow in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via…

CVSS: 10.0 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2013-0401

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute…

CVSS: 10.0 CWE: CWE-94 - Improper Control of Generation of Code ('Code Injection') View on NVD

2013-03-05

Critical

CVE-2013-1493

The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbit…

CVSS: 10.0 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

Critical

CVE-2013-0809

Unspecified vulnerability in the 2D component in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows…

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2012-4858

IBM Cognos Business Intelligence (BI) 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 does not properly validate Java serialized input, which allows remote attackers to exec…

CVSS: 9.3 CWE: CWE-20 - Improper Input Validation View on NVD

2013-02-20

Critical

CVE-2013-1487

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE 7 Update 13 and earlier and 6 Update 39 and earlier allows remote attackers to affect confidentiality, integrity,…

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2013-1486

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier, 6 Update 39 and earlier, and 5.0 Update 39 and earlier allows remote attackers to…

CVSS: 10.0 CWE: N/A View on NVD

Medium

CVE-2013-1485

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier allows remote attackers to affect integrity via unknown vectors related to Librarie…

CVSS: 5.0 CWE: N/A View on NVD

Critical

CVE-2013-1484

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier allows remote attackers to affect confidentiality, integrity, and availability via…

CVSS: 10.0 CWE: N/A View on NVD

2013-02-08

Medium

CVE-2013-1624

The TLS implementation in the Bouncy Castle Java library before 1.48 and C# library before 1.8 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the…

CVSS: 4.0 CWE: CWE-310 View on NVD

2013-02-02

Critical

CVE-2013-1483

Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a diff…

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2013-1482

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2013-1481

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier allows remote attackers to affect conf…

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2013-1480

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 an…

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2013-1479

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and JavaFX 2.2.4 and earlier allows remote attackers to affect co…

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2013-1478

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2013-1477

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2013-1476

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2013-1475

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2013-1474

CVSS: 9.3 CWE: N/A View on NVD

Medium

CVE-2013-1473

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect integrity via unknown vectors…

CVSS: 5.0 CWE: N/A View on NVD

Critical

CVE-2013-1472

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2013-0450

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote att…

CVSS: 10.0 CWE: N/A View on NVD

Medium

CVE-2013-0449

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 allows remote attackers to affect confidentiality via unknown vectors related to Deploy…

CVSS: 5.0 CWE: N/A View on NVD

Medium

CVE-2013-0448

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 allows remote attackers to affect integrity via unknown vectors related to Libraries.

CVSS: 5.0 CWE: N/A View on NVD

Critical

CVE-2013-0447

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2013-0446

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, a…

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2013-0445

CVSS: 10.0 CWE: N/A View on NVD

High

CVE-2013-0444

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and avail…

CVSS: 7.6 CWE: N/A View on NVD

Medium

CVE-2013-0443

CVSS: 4.0 CWE: N/A View on NVD

Critical

CVE-2013-0442

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2013-0441

CVSS: 10.0 CWE: N/A View on NVD

Medium

CVE-2013-0440

CVSS: 5.0 CWE: N/A View on NVD

Critical

CVE-2013-0439

CVSS: 10.0 CWE: N/A View on NVD

Medium

CVE-2013-0438

CVSS: 4.3 CWE: N/A View on NVD

Critical

CVE-2013-0437

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integri…

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2013-0436

CVSS: 10.0 CWE: N/A View on NVD

Medium

CVE-2013-0435

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confide…

CVSS: 5.0 CWE: N/A View on NVD

Medium

CVE-2013-0434

CVSS: 5.0 CWE: N/A View on NVD

Medium

CVE-2013-0433

CVSS: 5.0 CWE: N/A View on NVD

Medium

CVE-2013-0432

CVSS: 6.4 CWE: N/A View on NVD

Medium

CVE-2013-0430

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38, allows local users to affect confidentiality, integrity, and a…

CVSS: 6.9 CWE: N/A View on NVD

High

CVE-2013-0429

CVSS: 7.6 CWE: N/A View on NVD

Critical

CVE-2013-0428

CVSS: 10.0 CWE: N/A View on NVD

Medium

CVE-2013-0427

CVSS: 5.0 CWE: N/A View on NVD

Critical

CVE-2013-0426

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2013-0425

CVSS: 10.0 CWE: N/A View on NVD

Medium

CVE-2013-0424

CVSS: 5.0 CWE: N/A View on NVD

High

CVE-2013-0423

CVSS: 7.6 CWE: N/A View on NVD

High

CVE-2013-0419

CVSS: 7.6 CWE: N/A View on NVD

Medium

CVE-2013-0409

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38 allows remote attackers to affect confi…

CVSS: 5.0 CWE: N/A View on NVD

High

CVE-2013-0351

CVSS: 7.5 CWE: N/A View on NVD

Critical

CVE-2012-4305

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2012-4301

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2012-3342

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2012-3213

CVSS: 10.0 CWE: N/A View on NVD

High

CVE-2012-1543

CVSS: 7.6 CWE: N/A View on NVD

Critical

CVE-2012-1541

CVSS: 10.0 CWE: N/A View on NVD

2013-01-31

Medium

CVE-2013-1490

Unspecified vulnerability in Oracle Java SE 7 Update 11 (JRE 1.7.0_11-b21) allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors, aka "Issue 51," a differe…

CVSS: 4.3 CWE: N/A View on NVD

Critical

CVE-2013-1489

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chro…

CVSS: 10.0 CWE: N/A View on NVD

Medium

CVE-2013-0431

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandb…

CVSS: 5.3 CWE: CWE-693 - Protection Mechanism Failure View on NVD

2013-01-27

Medium

CVE-2013-0652

GE Intelligent Platforms Proficy Real-Time Information Portal does not restrict access to methods of an unspecified Java class, which allows remote attackers to obtain a username listing via an RMI c…

CVSS: 5.0 CWE: CWE-264 View on NVD

2013-01-14

Critical

CVE-2012-3174

Unspecified vulnerability in Oracle Java 7 before Update 11 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013…

CVSS: 10.0 CWE: CWE-264 View on NVD

2013-01-11

Critical

CVE-2012-4823

Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used…

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2012-4822

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earli…

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2012-4821

CVSS: 9.3 CWE: N/A View on NVD

Critical

CVE-2012-4820

CVSS: 9.3 CWE: N/A View on NVD

2013-01-10

Critical

CVE-2013-0422

Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a…

CVSS: 9.8 CWE: CWE-284 - Improper Access Control View on NVD

2013-01-05

Medium

CVE-2012-4550

A flaw was found in JBoss Enterprise Application Platform. When role-based authorization is used for Enterprise Java Beans (EJB) access, the system does not correctly call the necessary authorization…

CVSS: 5.3 CWE: CWE-280 - Improper Handling of Insufficient Permissions or Privileges View on NVD

Medium

CVE-2012-4549

A flaw was found in JBoss Enterprise Application Platform. The `processInvocation` function within the `org.jboss.as.ejb3.security.AuthorizationInterceptor` component incorrectly authorizes all reque…

CVSS: 6.5 CWE: CWE-266 - Incorrect Privilege Assignment View on NVD

2012-12-19

Low

CVE-2012-4534

org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO connector is used in conjunction with sendfile and HTTPS, allows remote attackers to…

CVSS: 2.6 CWE: CWE-399 View on NVD

Medium

CVE-2012-4431

org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mecha…

CVSS: 4.3 CWE: CWE-264 View on NVD

Medium

CVE-2012-3546

org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by le…

CVSS: 4.3 CWE: CWE-264 View on NVD

2012-12-05

Medium

CVE-2012-3317

IBM WebSphere Message Broker 6.1 before 6.1.0.11, 7.0 before 7.0.0.5, and 8.0 before 8.0.0.2 has incorrect ownership of certain uninstaller Java Runtime Environment (JRE) files, which might allow loc…

CVSS: 6.9 CWE: CWE-264 View on NVD

2012-11-28

Medium

CVE-2012-5373

Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers…

CVSS: 5.0 CWE: CWE-310 View on NVD

Medium

CVE-2012-2739

Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39, computes hash values without restricting the ability to trigger hash collisions predictably, which allows co…

CVSS: 5.0 CWE: CWE-310 View on NVD

2012-11-23

Medium

CVE-2012-3431

The Teiid Java Database Connectivity (JDBC) socket, as used in JBoss Enterprise Data Services Platform before 5.3.0, does not encrypt login messages by default contrary to documentation and specifica…

CVSS: 4.3 CWE: CWE-310 View on NVD

Medium

CVE-2011-5245

The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity reference in a Java Architecture for XML Bi…

CVSS: 5.0 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

2012-11-16

Medium

CVE-2012-2733

java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28 does not properly restrict the request-header size, which…

CVSS: 5.0 CWE: CWE-20 - Improper Input Validation View on NVD

2012-11-08

Medium

CVE-2012-3315

The Java servlets in the management console in IBM Tivoli Federated Identity Manager (TFIM) through 6.2.2 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) before 6.2.2 do not require a…

CVSS: 5.0 CWE: CWE-287 - Improper Authentication View on NVD

2012-11-04

High

CVE-2012-5817

Codehaus XFire 1.2.6 and earlier, as used in the Amazon EC2 API Tools Java library and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN)…

CVSS: 7.4 CWE: CWE-295 - Improper Certificate Validation View on NVD

Medium

CVE-2012-5785

Apache Axis2/Java 1.6.2 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man…

CVSS: 5.8 CWE: CWE-20 - Improper Input Validation View on NVD

Medium

CVE-2012-5784

Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, do…

CVSS: 5.8 CWE: CWE-20 - Improper Input Validation View on NVD

Medium

CVE-2012-5783

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's…

CVSS: 5.8 CWE: CWE-295 - Improper Certificate Validation View on NVD

2012-10-16

Medium

CVE-2012-3155

Unspecified vulnerability in the CORBA ORB component in Sun GlassFish Enterprise Server 2.1.1, Oracle GlassFish Server 3.0.1 and 3.1.2, and Sun Java System Application Server 8.1 and 8.2 allows remot…

CVSS: 5.0 CWE: N/A View on NVD

High

CVE-2012-5089

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to a…

CVSS: 7.6 CWE: N/A View on NVD

Critical

CVE-2012-5088

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via u…

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2012-5087

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2012-5086

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, int…

CVSS: 10.0 CWE: N/A View on NVD

Low

CVE-2012-5085

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows…

CVSS: 0.0 CWE: N/A View on NVD

High

CVE-2012-5084

CVSS: 7.6 CWE: N/A View on NVD

Critical

CVE-2012-5083

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, 1.4.2_38 and earlier, and JavaF…

CVSS: 10.0 CWE: N/A View on NVD

Medium

CVE-2012-5082

Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2 and earlier allows remote attackers to affect availability via unknown vectors.

CVSS: 5.0 CWE: N/A View on NVD

Medium

CVE-2012-5081

CVSS: 5.0 CWE: N/A View on NVD

High

CVE-2012-5080

Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a differ…

CVSS: 7.6 CWE: N/A View on NVD

Medium

CVE-2012-5079

CVSS: 5.0 CWE: N/A View on NVD

Critical

CVE-2012-5078

CVSS: 10.0 CWE: N/A View on NVD

Low

CVE-2012-5077

CVSS: 2.6 CWE: N/A View on NVD

Critical

CVE-2012-5076

CVSS: 9.8 CWE: CWE-284 - Improper Access Control View on NVD

Medium

CVE-2012-5075

CVSS: 5.0 CWE: N/A View on NVD

Medium

CVE-2012-5074

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality and integrity, related to JAX-WS.

CVSS: 6.4 CWE: N/A View on NVD

Medium

CVE-2012-5073

CVSS: 5.0 CWE: N/A View on NVD

Medium

CVE-2012-5072

CVSS: 5.0 CWE: N/A View on NVD

Medium

CVE-2012-5071

CVSS: 6.4 CWE: N/A View on NVD

Medium

CVE-2012-5070

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, related to JMX.

CVSS: 5.0 CWE: N/A View on NVD

Medium

CVE-2012-5069

CVSS: 5.8 CWE: N/A View on NVD

High

CVE-2012-5068

CVSS: 7.5 CWE: N/A View on NVD

Medium

CVE-2012-5067

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Dep…

CVSS: 5.0 CWE: N/A View on NVD

Medium

CVE-2012-4416

CVSS: 6.4 CWE: N/A View on NVD

Low

CVE-2012-3216

CVSS: 2.6 CWE: N/A View on NVD

High

CVE-2012-3159

CVSS: 7.5 CWE: N/A View on NVD

Critical

CVE-2012-3143

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2012-1533

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2012-1532

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier and 6 Update 35 and earlier allows remote attackers to affect confidentiality, integ…

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2012-1531

CVSS: 10.0 CWE: N/A View on NVD

2012-10-09

Medium

CVE-2012-5353

Eduserv OpenAthens SP 2.0 for Java allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack."

CVSS: 5.8 CWE: CWE-287 - Improper Authentication View on NVD

Medium

CVE-2012-5352

Java Open Single Sign-On Project Home (JOSSO) allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attac…

CVSS: 5.8 CWE: CWE-287 - Improper Authentication View on NVD