Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:jdk:1.5.0:update55:*:*:*:*:*:*

part: a version: 1.5.0 update: update55

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductJdk (1532aff9-da05-5018-bb6b-845c5e55198b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0428 vulnerable 2026-06-08 05:05:12.819160 Details available
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to "insufficient security checks in IIOP streams," which allows attackers to escape the sandbox.
Published: 2014-01-15T02:50:00.000Z
Updated: 2024-08-06T09:13:10.581Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0423 vulnerable 2026-06-08 05:05:12.816749 Details available
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote authenticated users to affect confidentiality and availability via unknown vectors related to Beans. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability in DocumentHandler.java, related to Beans decoding.
Published: 2014-01-15T02:50:00.000Z
Updated: 2024-08-06T09:13:10.491Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0422 vulnerable 2026-06-08 05:05:12.815844 Details available
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to missing package access checks in the Naming / JNDI component, which allows attackers to escape the sandbox.
Published: 2014-01-15T02:50:00.000Z
Updated: 2024-08-06T09:13:10.493Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0417 vulnerable 2026-06-08 05:05:12.803973 Details available
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JavaFX 2.2.45; and Java SE Embedded 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Published: 2014-01-15T02:50:00.000Z
Updated: 2024-08-06T09:13:10.485Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0416 vulnerable 2026-06-08 05:05:12.803420 Details available
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAAS. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to how principals are set for the Subject class, which allows attackers to escape the sandbox using deserialization of a crafted Subject instance.
Published: 2014-01-15T02:50:00.000Z
Updated: 2024-08-06T09:13:10.521Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0411 vulnerable 2026-06-08 05:05:12.797354 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0376 vulnerable 2026-06-08 05:05:12.693028 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0373 vulnerable 2026-06-08 05:05:12.689191 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0368 vulnerable 2026-06-08 05:05:12.678636 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5907 vulnerable 2026-06-08 05:04:54.656177 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5906 vulnerable 2026-06-08 05:04:54.655469 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5905 vulnerable 2026-06-08 05:04:54.654498 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5896 vulnerable 2026-06-08 05:04:54.641634 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5884 vulnerable 2026-06-08 05:04:54.604800 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.