5.9
Moyenne
CVE-2023-38264 The IBM SDK, Java Technology Edition's Object Request Broker (ORB) 7.1.0.0 through 7.1.5.21 and 8.0.0.0 through 8.0.8.21…
Description
The IBM SDK, Java Technology Edition's Object Request Broker (ORB) 7.1.0.0 through 7.1.5.21 and 8.0.0.0 through 8.0.8.21 is vulnerable to a denial of service attack in some circumstances due to improper enforcement of the JEP 290 MaxRef and MaxDepth deserialization filters. IBM X-Force ID: 260578.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SDK, Java Technology Edition 8.0 | 8.0.0.0 → 8.0.8.21 | Pas de correctif indiqué |
| SDK, Java Technology Edition 7.1 | 7.1.0.0 → 7.1.5.21 | Pas de correctif indiqué |
Autres CVE de SDK, Java Technology Edition
Les 6 CVE de SDK, Java Technology Edition →
CVE-2024-27267
The Object Request Broker (ORB) in IBM SDK, Java Technology Edition 7.1.0.0 through 7.1.5.18 and 8.0.0.0 through…
5.9
Moyenne
CVE-2022-40609
IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the…
8.1
Élevée
CVE-2018-1517
A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict…
5.9
Moyenne
CVE-2018-1656
The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0…
7.4
Élevée