GCVE - cpe:2.3:a:oracle:jrockit:r28.2.9:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:jrockit:r28.2.9:*:*:*:*:*:*:*

part: a version: r28.2.9 update: *

Vendor	Oracle (`3509f9eb-d8a0-57da-b153-b8021021b133`)
Product	Jrockit (`6afec1a0-7034-5ce1-b78b-e5dee450100f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-0423`	vulnerable	2026-06-08 05:05:12.816680	Details available Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote authenticated users to affect confidentiality and availability via unknown vectors related to Beans. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability in DocumentHandler.java, related to Beans decoding. Published: 2014-01-15T02:50:00.000Z Updated: 2024-08-06T09:13:10.491Z Open on db.gcve.eu Reference links http://secunia.com/advisories/56432 https://exchange.xforce.ibmcloud.com/vulnerabilities/90340 https://access.redhat.com/errata/RHSA-2014:0414 http://rhn.redhat.com/errata/RHSA-2014-0136.html http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0411`	vulnerable	2026-06-08 05:05:12.797286	Details available Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information about encryption keys via a timing discrepancy during the TLS/SSL handshake. Published: 2014-01-15T02:50:00.000Z Updated: 2024-08-06T09:13:10.517Z Open on db.gcve.eu Reference links http://www-01.ibm.com/support/docview.wss?uid=swg21676373 http://www-01.ibm.com/support/docview.wss?uid=swg21669519 http://secunia.com/advisories/56432 https://access.redhat.com/errata/RHSA-2014:0414 http://secunia.com/advisories/59705	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5907`	vulnerable	2026-06-08 05:04:54.662546	Details available Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is due to incorrect input validation in LookupProcessor.cpp in the ICU Layout Engine, which allows attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted font file. Published: 2014-01-15T01:33:00.000Z Updated: 2024-08-06T17:29:42.685Z Open on db.gcve.eu Reference links http://secunia.com/advisories/56432 https://access.redhat.com/errata/RHSA-2014:0414 http://rhn.redhat.com/errata/RHSA-2014-0136.html http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html http://marc.info/?l=bugtraq&m=139402749111889&w=2	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.