Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:sdk:*:*:*:*:java_technology:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSdk (faa55907-2936-5932-8f18-681f3e56c3d9)
Edition*
Language*
Software editionjava_technology
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-40609 vulnerable 2026-06-08 05:48:27.708786 IBM SDK, Java Technology Edition code execution
HIGH (8.1)
IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 236069.
Published: 2023-08-02T14:21:51.701Z
Updated: 2024-10-17T18:51:39.988Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4732 vulnerable 2026-06-08 05:13:57.441373 Details available
HIGH (7.2)
IBM SDK, Java Technology Edition Version 7.0.0.0 through 7.0.10.55, 7.1.0.0 through 7.1.4.55, and 8.0.0.0 through 8.0.6.0 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability in Microsoft Windows client. By placing a specially-crafted file in a compromised folder, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 172618.
Published: 2020-02-03T16:45:18.286Z
Updated: 2024-09-16T22:09:29.963Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.