CVE-2018-2973

mediumpriority · track · 26EPSS 0.047 · 92 %ileDEEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

4.67% (92nd) EPSS

CVSS 4.3 · medium

Is it mine?

138 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · cert_bund · nvd

EPSS · scored 2026-10-27

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedjava-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2253
Fixedjava-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2253
Fixedjava-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2253
Fixedjava-1.8.0-oracle-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2253
Fixedjava-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2253
Fixedjava-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2253
Fixedjava-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2253
Fixedjava-1.8.0-oracle-devel-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2253
Fixedjava-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2253
Fixedjava-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2253
Fixedjava-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2253
Fixedjava-1.8.0-oracle-javafx-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2253
Fixedjava-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2253
Fixedjava-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2253
Fixedjava-1.8.0-oracle-jdbc-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2253
Fixedjava-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2253
Fixedjava-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2253
Fixedjava-1.8.0-oracle-plugin-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2253
Fixedjava-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2253
Fixedjava-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2253
Fixedjava-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2253
Fixedjava-1.8.0-oracle-src-1:1.8.0.181-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2253
Fixedjava-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2254
Fixedjava-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2254
Fixedjava-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2254
Fixedjava-1.7.0-oracle-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2254
Fixedjava-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2254
Fixedjava-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2254
Fixedjava-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2254
Fixedjava-1.7.0-oracle-devel-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2254
Fixedjava-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2254
Fixedjava-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2254
Fixedjava-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2254
Fixedjava-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2254
Fixedjava-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2254
Fixedjava-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2254
Fixedjava-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2254
Fixedjava-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2254
Fixedjava-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2254
Fixedjava-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2254
Fixedjava-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2254
Fixedjava-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2254
Fixedjava-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2254
Fixedjava-1.7.0-oracle-src-1:1.7.0.191-1jpp.2.el7.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2254
Fixedjava-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-devel-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-javafx-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-jdbc-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-plugin-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255
Fixedjava-1.7.0-oracle-src-1:1.7.0.191-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Oracle Java must be restarted for this update to take effect.
https://access.redhat.com/errata/RHSA-2018:2255

cvss

Technical severity, 0–10. One row per scoring source.

5.9

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.04.3mediumAV:N/AC:M/Au:N/C:N/I:P/A:Nprimary · NVD / NIST USexploitability 8.6 · impact 2.9

v3.15.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:Nprimary · NVD / NIST USexploitability 2.2 · impact 3.6

v3.05.9mediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:Nsecondary · Red Hat Product Security US

v3.15.4mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-269USLLM-inferred

affected products (138)

Products and version ranges known to be affected.

Avaya Aura Experience Portalall versionscert_bundDEcpe:/a:avaya:aura_experience_portal:-
Avaya Aura Session Managerall versionscert_bundDEcpe:/a:avaya:session_manager:-
Avaya Aura System Managerall versionscert_bundDEcpe:/a:avaya:aura_system_manager:-
Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
EMC VNXall versionscert_bundDEcpe:/h:emc:vnx:-
F5 BIG-IPall versionscert_bundDEcpe:/a:f5:big-ip:-
Hitachi Command Suiteall versionscert_bundDEcpe:/a:hitachi:command_suite:-
NetApp OnCommand Unified Managerall versionscert_bundDEcpe:/a:netapp:oncommand_unified_manager:-
Open Source CentOSall versionscert_bundDEcpe:/o:centos:centos:-
Oracle Java SEall versionscert_bundDEcpe:/a:oracle:java_se:-
Oracle Linuxall versionscert_bundDEcpe:/o:oracle:linux:-
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
SUSE Linuxall versionscert_bundDEcpe:/o:suse:suse_linux:-
Ubuntu Linuxall versionscert_bundDEcpe:/o:canonical:ubuntu_linux:-
Oracle Corporation Java≤ 8u172enisa_euvdEU
Oracle Corporation Java≤ 10.0.1; Java SE Embedded: 8u171enisa_euvdEU
Oracle Corporation Java≤ 7u181enisa_euvdEU
Oracle Corporation Java≤ Java SE: 6u191enisa_euvdEU
hp xp7 command viewall versionsnvdUScpe:2.3:a:hp:xp7_command_view:*:*:*:*:*:*:*:*
netapp active iq unified managerall versionsnvdUScpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:*:*:*

showing 20 of 138

advisories (4)

Vendor and ecosystem advisories describing this.

RHSA-2018:2253Red Hat Security Advisory: java-1.8.0-oracle security update2018-07-24csaf · redhat_csafUS
An update for java-1.8.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2018:2254Red Hat Security Advisory: java-1.7.0-oracle security update2018-07-24csaf · redhat_csafUS
An update for java-1.7.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2018:2255Red Hat Security Advisory: java-1.7.0-oracle security update2018-07-24csaf · redhat_csafUS
An update for java-1.7.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
WID-SEC-W-2023-1308Oracle Java SE: Mehrere SchwachstellenDeutsch2018-07-17csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE, Oracle Java SE Embedded und Oracle JRockit ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cert_bund nvd redhat_csaf NVD CVE.org MITRE

published 2018-07-18modified 2026-06-17

references (74)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan