GCVE - cpe:2.3:a:oracle:jre:1.6.0:update19:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:jre:1.6.0:update19:*:*:*:*:*:*

part: a version: 1.6.0 update: update19

Vendor	Oracle (`3509f9eb-d8a0-57da-b153-b8021021b133`)
Product	Jre (`1cb184e3-41fa-5dea-b33c-5f401005728c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-5843`	vulnerable	2026-06-08 05:04:54.373784	Details available Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JavaFX 2.2.40 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. Published: 2013-10-16T17:31:00.000Z Updated: 2024-08-06T17:22:31.229Z Open on db.gcve.eu Reference links https://access.redhat.com/errata/RHSA-2014:0414 http://rhn.redhat.com/errata/RHSA-2013-1440.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19144 http://rhn.redhat.com/errata/RHSA-2013-1508.html http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5842`	vulnerable	2026-06-08 05:04:54.367595	Details available Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-5850. Published: 2013-10-16T17:31:00.000Z Updated: 2024-08-06T17:22:31.242Z Open on db.gcve.eu Reference links https://access.redhat.com/errata/RHSA-2014:0414 http://security.gentoo.org/glsa/glsa-201406-32.xml http://rhn.redhat.com/errata/RHSA-2013-1447.html http://rhn.redhat.com/errata/RHSA-2013-1440.html http://www.ubuntu.com/usn/USN-2033-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5830`	vulnerable	2026-06-08 05:04:54.292655	Details available Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. Published: 2013-10-16T17:31:00.000Z Updated: 2024-08-06T17:22:31.045Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/63121 https://access.redhat.com/errata/RHSA-2014:0414 http://security.gentoo.org/glsa/glsa-201406-32.xml http://rhn.redhat.com/errata/RHSA-2013-1447.html http://rhn.redhat.com/errata/RHSA-2013-1440.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5829`	vulnerable	2026-06-08 05:04:54.272582	Details available Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-5809. Published: 2013-10-16T17:31:00.000Z Updated: 2024-08-06T17:22:31.226Z Open on db.gcve.eu Reference links https://access.redhat.com/errata/RHSA-2014:0414 http://security.gentoo.org/glsa/glsa-201406-32.xml http://rhn.redhat.com/errata/RHSA-2013-1447.html http://rhn.redhat.com/errata/RHSA-2013-1440.html http://www.ubuntu.com/usn/USN-2033-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4681`	vulnerable	2026-06-08 05:02:52.153252	Details available Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using "reflection with a trusted immediate caller" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class. Published: 2012-08-28T00:00:00.000Z Updated: 2025-10-22T00:05:46.560Z Open on db.gcve.eu Reference links http://blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00016.html http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00032.html http://www.us-cert.gov/cas/techalerts/TA12-240A.html http://labs.alienvault.com/labs/index.php/2012/new-java-0day-exploited-in-the-wild/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1723`	vulnerable	2026-06-08 05:00:50.721550	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1717`	vulnerable	2026-06-08 05:00:50.630525	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3544`	vulnerable	2026-06-08 04:59:26.038108	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.