Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:jre:*:update6:*:*:*:*:*:*

part: a version: * update: update6

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductJre (1cb184e3-41fa-5dea-b33c-5f401005728c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-3136 vulnerable 2026-06-08 05:02:08.045777 Details available
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-1682.
Published: 2012-08-30T23:00:00.000Z
Updated: 2024-08-06T19:57:50.116Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1682 vulnerable 2026-06-08 05:00:50.426655 Details available
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-3136. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to "XMLDecoder security issue via ClassFinder."
Published: 2012-08-30T23:00:00.000Z
Updated: 2024-08-06T19:08:36.966Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0547 vulnerable 2026-06-08 05:00:43.541266 Details available
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and "a security-in-depth issue that is not directly exploitable but which can be used to aggravate security vulnerabilities that can be directly exploited." NOTE: this identifier was assigned by the Oracle CNA, but CVE is not intended to cover defense-in-depth issues that are only exposed by the presence of other vulnerabilities. NOTE: Oracle has not commented on claims from a downstream vendor that this issue is related to "toolkit internals references."
Published: 2012-08-30T23:00:00.000Z
Updated: 2024-08-06T18:30:53.609Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.