5.9
Medium
CVE-2023-38264 The IBM SDK, Java Technology Edition's Object Request Broker (ORB) 7.1.0.0 through 7.1.5.21 and 8.0.0.0 through 8.0.8.21…
Description
The IBM SDK, Java Technology Edition's Object Request Broker (ORB) 7.1.0.0 through 7.1.5.21 and 8.0.0.0 through 8.0.8.21 is vulnerable to a denial of service attack in some circumstances due to improper enforcement of the JEP 290 MaxRef and MaxDepth deserialization filters. IBM X-Force ID: 260578.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SDK, Java Technology Edition 8.0 | 8.0.0.0 → 8.0.8.21 | No fix stated |
| SDK, Java Technology Edition 7.1 | 7.1.0.0 → 7.1.5.21 | No fix stated |
Other CVEs of SDK, Java Technology Edition
The 6 CVEs of SDK, Java Technology Edition →
CVE-2024-27267
The Object Request Broker (ORB) in IBM SDK, Java Technology Edition 7.1.0.0 through 7.1.5.18 and 8.0.0.0 through…
5.9
Medium
CVE-2022-40609
IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the…
8.1
High
CVE-2018-1517
A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict…
5.9
Medium
CVE-2018-1656
The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0…
7.4
High