Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:jdk:1.7.0:update45_b33:*:*:*:*:*:*

part: a version: 1.7.0 update: update45_b33

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductJdk (1532aff9-da05-5018-bb6b-845c5e55198b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-2801 not_vulnerable 2026-06-08 05:25:00.359747 Details available
CRITICAL (9.8)
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. Note: The patch for this issue will address the vulnerability only if the WLS instance is using JDK 1.7.0_191 or later, or JDK 1.8.0_181 or later. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Published: 2020-04-15T13:29:46.000Z
Updated: 2024-09-30T14:55:20.174Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4578 vulnerable 2026-06-08 05:04:48.339518 Details available
jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper file validation.
Published: 2017-12-29T22:00:00.000Z
Updated: 2024-08-06T16:45:15.048Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.