Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:java_sdk:*:*:*:*:technology:*:*:*
part: a version: * update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Java Sdk (c0d6f3e6-40ae-52b3-a764-ec5a3d8299bf) |
| Edition | * |
| Language | * |
| Software edition | technology |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-0376 |
vulnerable | 2026-06-08 05:07:15.136728 |
Details available
The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) does not properly deserialize classes in an AccessController doPrivileged block, which allows remote attackers to bypass a sandbox protection mechanism and execute arbitrary code as demonstrated by the readValue method of the com.ibm.rmi.io.ValueHandlerPool.ValueHandlerSingleton class, which implements the javax.rmi.CORBA.ValueHandler interface. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-5456.
Published: 2016-06-03T14:00:00.000Z
Updated: 2024-08-05T22:15:24.181Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-0363 |
vulnerable | 2026-06-08 05:07:15.089677 |
Details available
The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) uses the invoke method of the java.lang.reflect.Method class in an AccessController doPrivileged block, which allows remote attackers to call setSecurityManager and bypass a sandbox protection mechanism via vectors related to a Proxy object instance implementing the java.lang.reflect.InvocationHandler interface. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3009.
Published: 2016-06-03T14:00:00.000Z
Updated: 2024-08-05T22:15:24.000Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-0264 |
vulnerable | 2026-06-08 05:07:14.705880 |
Details available
Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) allows remote attackers to execute arbitrary code via unspecified vectors.
Published: 2016-05-24T15:00:00.000Z
Updated: 2024-08-05T22:15:23.235Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5041 |
vulnerable | 2026-06-08 05:06:48.633186 |
Details available
The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods.
Published: 2016-06-06T17:00:00.000Z
Updated: 2024-08-06T06:32:32.251Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5006 |
vulnerable | 2026-06-08 05:06:48.508034 |
Details available
IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, 6 R1 before SR8 FP15, and 6 before SR16 FP15 allow physically proximate attackers to obtain sensitive information by reading the Kerberos Credential Cache.
Published: 2015-12-07T20:00:00.000Z
Updated: 2024-08-06T06:32:31.516Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1931 |
vulnerable | 2026-06-08 05:06:26.848316 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8892 |
vulnerable | 2026-06-08 05:06:10.306689 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8891 |
vulnerable | 2026-06-08 05:06:10.306084 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.