Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:jre:1.5.0:update55:*:*:*:*:*:*

part: a version: 1.5.0 update: update55

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductJre (1cb184e3-41fa-5dea-b33c-5f401005728c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0428 vulnerable 2026-06-08 05:05:12.819178 Details available
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to "insufficient security checks in IIOP streams," which allows attackers to escape the sandbox.
Published: 2014-01-15T02:50:00.000Z
Updated: 2024-08-06T09:13:10.581Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0423 vulnerable 2026-06-08 05:05:12.816766 Details available
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote authenticated users to affect confidentiality and availability via unknown vectors related to Beans. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability in DocumentHandler.java, related to Beans decoding.
Published: 2014-01-15T02:50:00.000Z
Updated: 2024-08-06T09:13:10.491Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0422 vulnerable 2026-06-08 05:05:12.815868 Details available
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to missing package access checks in the Naming / JNDI component, which allows attackers to escape the sandbox.
Published: 2014-01-15T02:50:00.000Z
Updated: 2024-08-06T09:13:10.493Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0417 vulnerable 2026-06-08 05:05:12.803994 Details available
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JavaFX 2.2.45; and Java SE Embedded 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Published: 2014-01-15T02:50:00.000Z
Updated: 2024-08-06T09:13:10.485Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0416 vulnerable 2026-06-08 05:05:12.803437 Details available
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAAS. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to how principals are set for the Subject class, which allows attackers to escape the sandbox using deserialization of a crafted Subject instance.
Published: 2014-01-15T02:50:00.000Z
Updated: 2024-08-06T09:13:10.521Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0411 vulnerable 2026-06-08 05:05:12.797375 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0376 vulnerable 2026-06-08 05:05:12.693046 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0373 vulnerable 2026-06-08 05:05:12.689211 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0368 vulnerable 2026-06-08 05:05:12.679270 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5907 vulnerable 2026-06-08 05:04:54.656198 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5906 vulnerable 2026-06-08 05:04:54.655486 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5905 vulnerable 2026-06-08 05:04:54.654523 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5896 vulnerable 2026-06-08 05:04:54.641755 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5884 vulnerable 2026-06-08 05:04:54.605531 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.