DeutschShown in its original language — a full translation is planned for a future version.
Oracle Java SE: Mehrere Schwachstellen
view advisory published 2019-10-15
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE und Oracle Java SE Embedded ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.
01
describes (20)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-2999US | medium4.7 | — | ||
Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13. Difficult to exploit vul… | ||||
| CVE-2019-2996US | medium4.2 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Deployment). The supported version that is affected is Java SE: 8u221; Java SE Embedded: 8u221.… | ||||
| CVE-2019-2992US | low3.7 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Emb… | ||||
| CVE-2019-2989US | medium6.8 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Jav… | ||||
| CVE-2019-2988US | low3.7 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Emb… | ||||
| CVE-2019-2987US | low3.7 | — | ||
Vulnerability in the Java SE product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows u… | ||||
| CVE-2019-2983US | low3.7 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13;… | ||||
| CVE-2019-2981US | low3.7 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE E… | ||||
| CVE-2019-2978US | low3.7 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Jav… | ||||
| CVE-2019-2977US | medium4.8 | — | ||
Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability all… | ||||
| CVE-2019-2975US | medium4.8 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u221, 11.0.4 and 13; Java SE Emb… | ||||
| CVE-2019-2973US | low3.7 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE E… | ||||
| CVE-2019-2964US | low3.7 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Ja… | ||||
| CVE-2019-2962US | low3.7 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Emb… | ||||
| CVE-2019-2958US | medium5.9 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java… | ||||
| CVE-2019-2949US | medium6.8 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java… | ||||
| CVE-2019-2945US | low3.1 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Jav… | ||||
| CVE-2019-2933US | low3.1 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java… | ||||
| CVE-2019-2894US | low3.7 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java… | ||||
| CVE-2019-11068US | critical9.8 | — | ||
libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead… | ||||
02
references
External citations — patches, advisories, analysis.
- CentOS Security Advisory CESA-2019:3127 vom 2019-10-23external
- CentOS Security Advisory CESA-2019:3128 vom 2019-10-23external
- CentOS Security Advisory CESA-2019:3136 vom 2019-10-23external
- CentOS Security Advisory CESA-2019:3157 vom 2019-10-23external
- CentOS Security Advisory CESA-2019:3158 vom 2019-10-23external
- SUSE Security Update SUSE-SU-2020:1684-1 vom 2020-06-19external
- SUSE Security Update SUSE-SU-2020:1685-1 vom 2020-06-19external
- Debian Security Advisory DSA-4546 vom 2019-10-21external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan