Sdk, Java Technology Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:sdk,_java_technology_edition:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Sdk, Java Technology Edition (1fe82903-3825-5fa0-94a0-550f37a0b844) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-38264 |
vulnerable | 2026-06-08 06:08:17.502161 |
IBM SDK, Java Technology Edition denial of service
MEDIUM (5.9)
The IBM SDK, Java Technology Edition's Object Request Broker (ORB) 7.1.0.0 through 7.1.5.21 and 8.0.0.0 through 8.0.8.21 is vulnerable to a denial of service attack in some circumstances due to improper enforcement of the JEP 290 MaxRef and MaxDepth deserialization filters. IBM X-Force ID: 260578.
Published: 2024-05-10T17:21:51.076Z
Updated: 2024-08-02T17:39:12.051Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40609 |
vulnerable | 2026-06-08 05:48:27.708026 |
IBM SDK, Java Technology Edition code execution
HIGH (8.1)
IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 236069.
Published: 2023-08-02T14:21:51.701Z
Updated: 2024-10-17T18:51:39.988Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1656 |
vulnerable | 2026-06-08 05:11:18.519326 |
Details available
HIGH (7.4)
The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.
Published: 2018-08-20T21:00:00.000Z
Updated: 2024-09-16T18:09:14.892Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1517 |
vulnerable | 2026-06-08 05:11:18.334853 |
Details available
MEDIUM (5.9)
A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.
Published: 2018-08-20T21:00:00.000Z
Updated: 2024-09-16T17:34:15.110Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1417 |
vulnerable | 2026-06-08 05:11:18.090293 |
Details available
HIGH (8.1)
Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID: 138823.
Published: 2018-02-22T19:00:00.000Z
Updated: 2024-09-16T19:11:02.846Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.