7.4
Élevée
CVE-2018-1656 The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0…
Description
The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SDK, Java Technology Edition | 8.0 | Pas de correctif indiqué |
| SDK, Java Technology Edition | 7.0 | Pas de correctif indiqué |
| SDK, Java Technology Edition | 6.0 | Pas de correctif indiqué |
Autres CVE de SDK, Java Technology Edition
Les 6 CVE de SDK, Java Technology Edition →
CVE-2024-27267
The Object Request Broker (ORB) in IBM SDK, Java Technology Edition 7.1.0.0 through 7.1.5.18 and 8.0.0.0 through…
5.9
Moyenne
CVE-2023-38264
The IBM SDK, Java Technology Edition's Object Request Broker (ORB) 7.1.0.0 through 7.1.5.21 and 8.0.0.0 through 8.0.8.21…
5.9
Moyenne
CVE-2022-40609
IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the…
8.1
Élevée
CVE-2018-1517
A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict…
5.9
Moyenne