Sdk (Ibm) - vulnerabilities (CVEs)
6 CVEs, 0 in the last 30 days, 36 known versions, newest CVE from 2024-05-14. Vendor: Ibm.
CVEs of Sdk
- CVE-2023-38264 - CVSS 7.5 (high), 2024-05-14: The IBM SDK, Java Technology Edition's Object Request Broker (ORB) 7.1.0.0 through 7.1.5.21 and 8.0.0.0 through 8.0.8.21 is vulnerable to a denial of service…
- CVE-2022-40609 - CVSS 9.8 (critical), 2023-08-02: IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe…
- CVE-2019-4732 - CVSS 7.2 (high), 2020-02-03: IBM SDK, Java Technology Edition Version 7.0.0.0 through 7.0.10.55, 7.1.0.0 through 7.1.4.55, and 8.0.0.0 through 8.0.6.0 could allow a local authenticated…
- CVE-2018-1890 - CVSS 7.8 (high), 2019-03-11: IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local…
- CVE-2018-1656 - CVSS 7.4 (high), 2018-08-20: The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against…
- CVE-2018-1517 - CVSS 7.5 (high), 2018-08-20: A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with…
- CVE-2018-1417 - CVSS 8.1 (high), 2018-02-22: Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrusted code running under a security manager to…
- CVE-2017-1289 - CVSS 8.2 (high), 2017-05-22: IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this…
- CVE-2016-3956 - CVSS 7.5 (high), 2016-07-02: The CLI in npm before 2.15.1 and 3.x before 3.8.3, as used in Node.js 0.10 before 0.10.44, 0.12 before 0.12.13, 4 before 4.4.2, and 5 before 5.10.0, includes…