Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:java_software_development_kit:*:*:*:*:java_technology:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductJava Software Development Kit (1021abeb-e0b0-5164-874a-29b7d3955a6b)
Edition*
Language*
Software editionjava_technology
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-38264 vulnerable 2026-06-08 06:08:17.502811 IBM SDK, Java Technology Edition denial of service
MEDIUM (5.9)
The IBM SDK, Java Technology Edition's Object Request Broker (ORB) 7.1.0.0 through 7.1.5.21 and 8.0.0.0 through 8.0.8.21 is vulnerable to a denial of service attack in some circumstances due to improper enforcement of the JEP 290 MaxRef and MaxDepth deserialization filters. IBM X-Force ID: 260578.
Published: 2024-05-10T17:21:51.076Z
Updated: 2024-08-02T17:39:12.051Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.