Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:jrockit:r27.7.7:*:*:*:*:*:*:*

part: a version: r27.7.7 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductJrockit (6afec1a0-7034-5ce1-b78b-e5dee450100f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0423 vulnerable 2026-06-08 05:05:12.816658 Details available
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote authenticated users to affect confidentiality and availability via unknown vectors related to Beans. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability in DocumentHandler.java, related to Beans decoding.
Published: 2014-01-15T02:50:00.000Z
Updated: 2024-08-06T09:13:10.491Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0411 vulnerable 2026-06-08 05:05:12.796689 Details available
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information about encryption keys via a timing discrepancy during the TLS/SSL handshake.
Published: 2014-01-15T02:50:00.000Z
Updated: 2024-08-06T09:13:10.517Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5907 vulnerable 2026-06-08 05:04:54.661960 Details available
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is due to incorrect input validation in LookupProcessor.cpp in the ICU Layout Engine, which allows attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted font file.
Published: 2014-01-15T01:33:00.000Z
Updated: 2024-08-06T17:29:42.685Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.