4.3 - VU#225657

Executive Summary

Summary
Title	Oracle Javadoc HTML frame injection vulnerability

Informations
Name	VU#225657	First vendor Publication	2013-06-18
Vendor	VU-CERT	Last vendor Modification	2013-06-26
Severity (Vendor)	N/A	Revision	M

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:N/I:P/A:N)
Cvss Base Score	4.3	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Vulnerability Note VU#225657

Oracle Javadoc HTML frame injection vulnerability

Original Release date: 18 Jun 2013 | Last revised: 26 Jun 2013

Overview

Javadoc HTML pages that were created by Javadoc 7 Update 21 and before, 6 Update 45 and before, 5.0 Update 45 and before, JavaFX 2.2.21 and before contain a frame injection vulnerability that could allow an attacker to replace a Javadoc web page frame with a malicious page.

Description

Oracle Java Development Toolkit (JDK) contains a Javadoc toolkit that allows a developer to generate API documentation in HTML format from doc comments in source code.

Javadoc HTML pages that were created by Javadoc 7 Update 21 and before, 6 Update 45 and before, 5.0 Update 45 and before, JavaFX 2.2.21 and before contain JavaScript code that fails to parse scheme relative URIs parameters correctly. An attacker can construct a URI that passes malicious parameters to the affected HTML page that causes one of the frames within the Javadoc-generated web page to be replaced with a malicious page.

For additional information please see Oracle Security Advisory.

Impact

An attacker can cause one of the frames within a Javadoc-generated web page to be replaced with a malicious page. This vulnerability could be used for phishing or social engineering, or it could be used for browser exploitation if combined with another browser-related vulnerability.

Solution

Apply Update

Oracle has released June 2013 Java Critical Patch Update to address this vulnerability. Oracle Java Development Toolkit (JDK) and Javadoc users are advised to apply June 2013 Java Critical Patch Update and regenerate and republish affected Javadoc HTML pages.

Fix-in-Place Tool

Oracle has released a fix-in-place tool named Java API Documentation Updater Tool. This fix-in-place tool can process directories or folders to search for HTML files to be remediated without having to regenerate existing Javadocs. When presented directories/folders and their sub-directories or sub-folders the Java API Documentation Updater Tool will search for files with the following names:

index.htm
index.html
toc.htm
toc.html

For each file that matches the names noted above the Java API Documentation Updater Tool will search the file for the affected JavaScript text and replace it with the remediated version. Note that this tool will not detect Javadoc pages that have been renamed to something other than one of the above page names.

Vendor Information (Learn More)

Vendor	Status	Date Notified	Date Updated
IBM Corporation	Affected	11 Jun 2013	26 Jun 2013
OpenOffice.org	Affected	-	24 Jun 2013
Oracle Corporation	Affected	-	20 Jun 2013
Red Hat, Inc.	Affected	11 Jun 2013	24 Jun 2013

If you are a vendor and your product is affected, let us know.

CVSS Metrics (Learn More)

Group	Score	Vector
Base	5.0	AV:N/AC:L/Au:N/C:N/I:P/A:N
Temporal	4.1	E:F/RL:OF/RC:C
Environmental	4.4	CDP:LM/TD:M/CR:ND/IR:ND/AR:ND

References

http://tools.ietf.org/html/rfc3986#section-4.2
http://www.oracle.com/technetwork/java/javase/jdk-7-readme-429198.html
http://www.oracle.com/technetwork/java/javase/documentation/index-jsp-135444.html
http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html
http://www.oracle.com/technetwork/java/javase/downloads/java-doc-updater-tool-1955731.html

Credit

Thanks to Oracle for reporting this vulnerability.

This document was written by Michael Orlando.

Other Information

CVE IDs:CVE-2013-1571
Date Public:18 Jun 2013
Date First Published:18 Jun 2013
Date Last Updated:26 Jun 2013
Document Revision:36

Feedback

If you have feedback, comments, or additional information about this vulnerability, please send us email.

Original Source

Url : http://www.kb.cert.org/vuls/id/225657

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:17215

Oval ID:	oval:org.mitre.oval:def:17215
Title:	Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, 5.0 Update 45 and earlier, and JavaFX 2.2.21 and earlier allows remote attackers to affect integrity via unknown vectors related to Javadoc.
Description:	Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-1571	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment JavaFX
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed OR Determine if the version of JavaFX is less than or equal to 2.2.21 Determine if the version of JavaFX is less than or equal to 2.2.21 Determine if the version of JavaFX is less than or equal to 2.2.21 AND Determine if the version of JavaFX is less than or equal to 2.2.21 (JRE 1.7.0:update_6 and later) AND JavaFX 2.x is installed

Definition Id: oval:org.mitre.oval:def:19518

Oval ID:	oval:org.mitre.oval:def:19518
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1571	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19667

Oval ID:	oval:org.mitre.oval:def:19667
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1571	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19718

Oval ID:	oval:org.mitre.oval:def:19718
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1571	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

CPE : Common Platform Enumeration

Type	Description	Count
Application	Oracle Javafx cpe:2.3:a:oracle:javafx:2.2.7:::::::* cpe:2.3:a:oracle:javafx:2.2.5:::::::* cpe:2.3:a:oracle:javafx:2.2.4:::::::* cpe:2.3:a:oracle:javafx:2.2.3:::::::* cpe:2.3:a:oracle:javafx:2.2.21:::::::* cpe:2.3:a:oracle:javafx:2.2:::::::* cpe:2.3:a:oracle:javafx:2.1:::::::* cpe:2.3:a:oracle:javafx:2.0.3:::::::* cpe:2.3:a:oracle:javafx:2.0.2:::::::* cpe:2.3:a:oracle:javafx:2.0:::::::* cpe:2.3:a:oracle:javafx:1.3.1:::::::* cpe:2.3:a:oracle:javafx:1.3.0:::::::* cpe:2.3:a:oracle:javafx:1.2.3:::::::* cpe:2.3:a:oracle:javafx:1.2.2:::::::* cpe:2.3:a:oracle:javafx:1.2:::::::*	15
Application	Oracle Jdk cpe:2.3:a:oracle:jdk:1.7.0:update4:::::: cpe:2.3:a:oracle:jdk:1.7.0:-:::::: cpe:2.3:a:oracle:jdk:1.7.0:update1:::::: cpe:2.3:a:oracle:jdk:1.7.0:update2:::::: cpe:2.3:a:oracle:jdk:1.7.0:update3:::::: cpe:2.3:a:oracle:jdk:1.7.0:update5:::::: cpe:2.3:a:oracle:jdk:1.7.0:update7:::::: cpe:2.3:a:oracle:jdk:1.7.0:update6:::::: cpe:2.3:a:oracle:jdk:1.7.0:update11:::::: cpe:2.3:a:oracle:jdk:1.7.0:update9:::::: cpe:2.3:a:oracle:jdk:1.7.0:update10:::::: cpe:2.3:a:oracle:jdk:1.7.0:update13:::::: cpe:2.3:a:oracle:jdk:1.7.0:update15:::::: cpe:2.3:a:oracle:jdk:1.7.0:update17:::::: cpe:2.3:a:oracle:jdk:1.7.0:update21:::::: cpe:2.3:a:oracle:jdk:1.7.0:update25:::::: cpe:2.3:a:oracle:jdk:1.7.0:update10:~~~windows~~:::::* cpe:2.3:a:oracle:jdk:1.7.0:update11:~~~windows~~:::::* cpe:2.3:a:oracle:jdk:1.7.0:update121:::::: cpe:2.3:a:oracle:jdk:1.7.0:update10_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update11_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update17_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update17_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update21_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update25_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update25_b34:::::: cpe:2.3:a:oracle:jdk:1.7.0:update25_b35:::::: cpe:2.3:a:oracle:jdk:1.7.0:update40:::::: cpe:2.3:a:oracle:jdk:1.7.0:update45:::::: cpe:2.3:a:oracle:jdk:1.7.0:update45_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update45_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update45_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update45_b34:::::: cpe:2.3:a:oracle:jdk:1.7.0:update51:::::: cpe:2.3:a:oracle:jdk:1.7.0:update7_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update9_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update9_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update10::::windows::* cpe:2.3:a:oracle:jdk:1.7.0:update11::::windows::* cpe:2.3:a:oracle:jdk:1.7.0:update241:::::: cpe:2.3:a:oracle:jdk:1.7.0:update251:::::: cpe:2.3:a:oracle:jdk:1.7.0:update60:::::: cpe:2.3:a:oracle:jdk:1.7.0:update67:::::: cpe:2.3:a:oracle:jdk:1.7.0:update72:::::: cpe:2.3:a:oracle:jdk:1.7.0:update71:::::: cpe:2.3:a:oracle:jdk:1.7.0:update75:::::: cpe:2.3:a:oracle:jdk:1.7.0:update101:::::: cpe:2.3:a:oracle:jdk:1.7.0:update111:::::: cpe:2.3:a:oracle:jdk:1.7.0:update141:::::: cpe:2.3:a:oracle:jdk:1.7.0:update151:::::: cpe:2.3:a:oracle:jdk:1.7.0:update131:::::: cpe:2.3:a:oracle:jdk:1.7.0:update201:::::: cpe:2.3:a:oracle:jdk:1.7.0:update191:::::: cpe:2.3:a:oracle:jdk:1.7.0:update161:::::: cpe:2.3:a:oracle:jdk:1.7.0:update171:::::: cpe:2.3:a:oracle:jdk:1.7.0:update181:::::: cpe:2.3:a:oracle:jdk:1.7.0:update211:::::: cpe:2.3:a:oracle:jdk:1.7.0:update221:::::: cpe:2.3:a:oracle:jdk:1.7.0:update231:::::: cpe:2.3:a:oracle:jdk:1.7.0:update271:::::: cpe:2.3:a:oracle:jdk:1.7.0:update321:::::: cpe:2.3:a:oracle:jdk:1.7.0:update331:::::: cpe:2.3:a:oracle:jdk:1.7.0:update301:::::: cpe:2.3:a:oracle:jdk:1.7.0:update291:::::: cpe:2.3:a:oracle:jdk:1.7.0:update261:::::: cpe:2.3:a:oracle:jdk:1.7.0:update99:::::: cpe:2.3:a:oracle:jdk:1.7.0:update97:::::: cpe:2.3:a:oracle:jdk:1.7.0:update95:::::: cpe:2.3:a:oracle:jdk:1.7.0:update91:::::: cpe:2.3:a:oracle:jdk:1.7.0:update85:::::: cpe:2.3:a:oracle:jdk:1.7.0:update80:::::: cpe:2.3:a:oracle:jdk:1.7.0:update76:::::: cpe:2.3:a:oracle:jdk:1.7.0:update343:::::: cpe:2.3:a:oracle:jdk:1.7.0:update191_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update191_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update201_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update211_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update211_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update221_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update221_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update221_b34:::::: cpe:2.3:a:oracle:jdk:1.7.0:update221_b35:::::: cpe:2.3:a:oracle:jdk:1.7.0:update231_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update241_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update271_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update281:::::: cpe:2.3:a:oracle:jdk:1.7.0:update281_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update281_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update291_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update291_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update301_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update311_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update321_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update341:::::: cpe:2.3:a:oracle:jdk:1.7.0:update341_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update343_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update51_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update51_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update51_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update55:::::: cpe:2.3:a:oracle:jdk:1.7.0:update55_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update55_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update55_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update55_b35:::::: cpe:2.3:a:oracle:jdk:1.7.0:update60_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update60_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update65:::::: cpe:2.3:a:oracle:jdk:1.7.0:update65_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update67_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update67_b34:::::: cpe:2.3:a:oracle:jdk:1.7.0:update72_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update72_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update72_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update76_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update76_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update76_b34:::::: cpe:2.3:a:oracle:jdk:1.7.0:update76_b35:::::: cpe:2.3:a:oracle:jdk:1.7.0:update76_b36:::::: cpe:2.3:a:oracle:jdk:1.7.0:update76_b37:::::: cpe:2.3:a:oracle:jdk:1.7.0:update76_b38:::::: cpe:2.3:a:oracle:jdk:1.7.0:update79:::::: cpe:2.3:a:oracle:jdk:1.7.0:update80_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update80_b35:::::: cpe:2.3:a:oracle:jdk:1.7.0:update85_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update85_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update85_b34:::::: cpe:2.3:a:oracle:jdk:1.7.0:update91_b17:::::: cpe:2.3:a:oracle:jdk:1.7.0:update91_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update91_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update95_b13:::::: cpe:2.3:a:oracle:jdk:1.7.0:update95_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update95_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update97_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update97_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update97_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update99_b31:::::: cpe:2.3:a:oracle:jdk:1.7:update_131:::::: cpe:2.3:a:oracle:jdk:1.6.0:update19:::::: cpe:2.3:a:oracle:jdk:1.6.0:update131:::::: cpe:2.3:a:oracle:jdk:1.6.0:::::::* cpe:2.3:a:oracle:jdk:1.6.0:-:::::: cpe:2.3:a:oracle:jdk:1.6.0:update201:::::: cpe:2.3:a:oracle:jdk:1.6.0:update191:::::: cpe:2.3:a:oracle:jdk:1.6.0:update181:::::: cpe:2.3:a:oracle:jdk:1.6.0:update171:::::: cpe:2.3:a:oracle:jdk:1.6.0:update161:::::: cpe:2.3:a:oracle:jdk:1.6.0:update151:::::: cpe:2.3:a:oracle:jdk:1.6.0:update141:::::: cpe:2.3:a:oracle:jdk:1.6.0:update121:::::: cpe:2.3:a:oracle:jdk:1.6.0:update115:::::: cpe:2.3:a:oracle:jdk:1.6.0:update113:::::: cpe:2.3:a:oracle:jdk:1.6.0:update111:::::: cpe:2.3:a:oracle:jdk:1.6.0:update105:::::: cpe:2.3:a:oracle:jdk:1.6.0:update101:::::: cpe:2.3:a:oracle:jdk:1.6.0:update95:::::: cpe:2.3:a:oracle:jdk:1.6.0:update91:::::: cpe:2.3:a:oracle:jdk:1.6.0:update85:::::: cpe:2.3:a:oracle:jdk:1.6.0:update81:::::: cpe:2.3:a:oracle:jdk:1.6.0:update75:::::: cpe:2.3:a:oracle:jdk:1.6.0:update71:::::: cpe:2.3:a:oracle:jdk:1.6.0:update65:::::: cpe:2.3:a:oracle:jdk:1.6.0:update32:::::: cpe:2.3:a:oracle:jdk:1.6.0:update31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update23:::::: cpe:2.3:a:oracle:jdk:1.6.0:update22:::::: cpe:2.3:a:oracle:jdk:1.6.0:update29:::::: cpe:2.3:a:oracle:jdk:1.6.0:update33:::::: cpe:2.3:a:oracle:jdk:1.6.0:update25:::::: cpe:2.3:a:oracle:jdk:1.6.0:update24:::::: cpe:2.3:a:oracle:jdk:1.6.0:update27:::::: cpe:2.3:a:oracle:jdk:1.6.0:update43:::::: cpe:2.3:a:oracle:jdk:1.6.0:update45:::::: cpe:2.3:a:oracle:jdk:1.6.0:update51:::::: cpe:2.3:a:oracle:jdk:1.6.0:update30:::::: cpe:2.3:a:oracle:jdk:1.6.0:update34:::::: cpe:2.3:a:oracle:jdk:1.6.0:update39:::::: cpe:2.3:a:oracle:jdk:1.6.0:update41:::::: cpe:2.3:a:oracle:jdk:1.6.0:update38:::::: cpe:2.3:a:oracle:jdk:1.6.0:update37:::::: cpe:2.3:a:oracle:jdk:1.6.0:update35:::::: cpe:2.3:a:oracle:jdk:1.6.0:update26:::::: cpe:2.3:a:oracle:jdk:1.6.0:update60:::::: cpe:2.3:a:oracle:jdk:1.6.0:update10:::::: cpe:2.3:a:oracle:jdk:1.6.0:update1:::::: cpe:2.3:a:oracle:jdk:1.6.0:update2:::::: cpe:2.3:a:oracle:jdk:1.6.0:update3:::::: cpe:2.3:a:oracle:jdk:1.6.0:update4:::::: cpe:2.3:a:oracle:jdk:1.6.0:update11:::::: cpe:2.3:a:oracle:jdk:1.6.0:update12:::::: cpe:2.3:a:oracle:jdk:1.6.0:update13:::::: cpe:2.3:a:oracle:jdk:1.6.0:update14:::::: cpe:2.3:a:oracle:jdk:1.6.0:update5:::::: cpe:2.3:a:oracle:jdk:1.6.0:update6:::::: cpe:2.3:a:oracle:jdk:1.6.0:update7:::::: cpe:2.3:a:oracle:jdk:1.6.0:update15:::::: cpe:2.3:a:oracle:jdk:1.6.0:update16:::::: cpe:2.3:a:oracle:jdk:1.6.0:update17:::::: cpe:2.3:a:oracle:jdk:1.6.0:update18:::::: cpe:2.3:a:oracle:jdk:1.6.0:update20:::::: cpe:2.3:a:oracle:jdk:1.6.0:update21:::::: cpe:2.3:a:oracle:jdk:1.6.0:update8:::::: cpe:2.3:a:oracle:jdk:1.6.0:update9:::::: cpe:2.3:a:oracle:jdk:1.6.0:update32_b31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update32_b32:::::: cpe:2.3:a:oracle:jdk:1.6.0:update33_b31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update33_b32:::::: cpe:2.3:a:oracle:jdk:1.6.0:update33_b33:::::: cpe:2.3:a:oracle:jdk:1.6.0:update34_b31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update34_b32:::::: cpe:2.3:a:oracle:jdk:1.6.0:update35_b31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update35_b32:::::: cpe:2.3:a:oracle:jdk:1.6.0:update37_b31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update37_b32:::::: cpe:2.3:a:oracle:jdk:1.6.0:update38_b31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update43_b31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update51_b31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update51_b32:::::: cpe:2.3:a:oracle:jdk:1.6:update_141:::::: cpe:2.3:a:oracle:jdk:1.5.0:update_71:::::: cpe:2.3:a:oracle:jdk:1.5.0:update11:::::: cpe:2.3:a:oracle:jdk:1.5.0:-:::::: cpe:2.3:a:oracle:jdk:1.5.0:update1:::::: cpe:2.3:a:oracle:jdk:1.5.0:update10:::::: cpe:2.3:a:oracle:jdk:1.5.0:update12:::::: cpe:2.3:a:oracle:jdk:1.5.0:update13:::::: cpe:2.3:a:oracle:jdk:1.5.0:update14:::::: cpe:2.3:a:oracle:jdk:1.5.0:update15:::::: cpe:2.3:a:oracle:jdk:1.5.0:update16:::::: cpe:2.3:a:oracle:jdk:1.5.0:update17:::::: cpe:2.3:a:oracle:jdk:1.5.0:update18:::::: cpe:2.3:a:oracle:jdk:1.5.0:update19:::::: cpe:2.3:a:oracle:jdk:1.5.0:update2:::::: cpe:2.3:a:oracle:jdk:1.5.0:update3:::::: cpe:2.3:a:oracle:jdk:1.5.0:update4:::::: cpe:2.3:a:oracle:jdk:1.5.0:update5:::::: cpe:2.3:a:oracle:jdk:1.5.0:update6:::::: cpe:2.3:a:oracle:jdk:1.5.0:update7:::::: cpe:2.3:a:oracle:jdk:1.5.0:update8:::::: cpe:2.3:a:oracle:jdk:1.5.0:update9:::::: cpe:2.3:a:oracle:jdk:1.5.0:update75:::::: cpe:2.3:a:oracle:jdk:1.5.0:update65:::::: cpe:2.3:a:oracle:jdk:1.5.0:update61:::::: cpe:2.3:a:oracle:jdk:1.5.0:update55:::::: cpe:2.3:a:oracle:jdk:1.5.0:update38:::::: cpe:2.3:a:oracle:jdk:1.5.0:update36:::::: cpe:2.3:a:oracle:jdk:1.5.0:update40:::::: cpe:2.3:a:oracle:jdk:1.5.0:update41:::::: cpe:2.3:a:oracle:jdk:1.5.0:update45:::::: cpe:2.3:a:oracle:jdk:1.5.0:update51:::::: cpe:2.3:a:oracle:jdk:1.5.0:update39:::::: cpe:2.3:a:oracle:jdk:1.5.0:update20:::::: cpe:2.3:a:oracle:jdk:1.5.0:update21:::::: cpe:2.3:a:oracle:jdk:1.5.0:update22:::::: cpe:2.3:a:oracle:jdk:1.5.0:update23:::::: cpe:2.3:a:oracle:jdk:1.5.0:update24:::::: cpe:2.3:a:oracle:jdk:1.5.0:update25:::::: cpe:2.3:a:oracle:jdk:1.5.0:update26:::::: cpe:2.3:a:oracle:jdk:1.5.0:update27:::::: cpe:2.3:a:oracle:jdk:1.5.0:update28:::::: cpe:2.3:a:oracle:jdk:1.5.0:update29:::::: cpe:2.3:a:oracle:jdk:1.5.0:update30:::::: cpe:2.3:a:oracle:jdk:1.5.0:update31:::::: cpe:2.3:a:oracle:jdk:1.5.0:update32:::::: cpe:2.3:a:oracle:jdk:1.5.0:update33:::::: cpe:2.3:a:oracle:jdk:1.5.0:update34:::::: cpe:2.3:a:oracle:jdk:1.5.0:update35:::::: cpe:2.3:a:oracle:jdk:1.4.2_40:::::::* cpe:2.3:a:oracle:jdk:1.4.2_38:::::::* cpe:2.3:a:oracle:jdk::::::::	269
Application	Oracle Jre cpe:2.3:a:oracle:jre:1.7.0:update1:::::: cpe:2.3:a:oracle:jre:1.7.0:update2:::::: cpe:2.3:a:oracle:jre:1.7.0:-:::::: cpe:2.3:a:oracle:jre:1.7.0:update4:::::: cpe:2.3:a:oracle:jre:1.7.0:update3:::::: cpe:2.3:a:oracle:jre:1.7.0:update5:::::: cpe:2.3:a:oracle:jre:1.7.0:update7:::::: cpe:2.3:a:oracle:jre:1.7.0:update6:::::: cpe:2.3:a:oracle:jre:1.7.0:update11:::::: cpe:2.3:a:oracle:jre:1.7.0:update10:::::: cpe:2.3:a:oracle:jre:1.7.0:update9:::::: cpe:2.3:a:oracle:jre:1.7.0:update13:::::: cpe:2.3:a:oracle:jre:1.7.0:update15:::::: cpe:2.3:a:oracle:jre:1.7.0:update17:::::: cpe:2.3:a:oracle:jre:1.7.0:update21:::::: cpe:2.3:a:oracle:jre:1.7.0:update25:::::: cpe:2.3:a:oracle:jre:1.7.0:update11:~~~windows~~:::::* cpe:2.3:a:oracle:jre:1.7.0:update10:~~~windows~~:::::* cpe:2.3:a:oracle:jre:1.7.0:update_67:::::: cpe:2.3:a:oracle:jre:1.7.0:update_75:::::: cpe:2.3:a:oracle:jre:1.7.0:update_80:::::: cpe:2.3:a:oracle:jre:1.7.0:update_85:::::: cpe:2.3:a:oracle:jre:1.7.0:update121:::::: cpe:2.3:a:oracle:jre:1.7.0:update10_b31:::::: cpe:2.3:a:oracle:jre:1.7.0:update11_b32:::::: cpe:2.3:a:oracle:jre:1.7.0:update17_b31:::::: cpe:2.3:a:oracle:jre:1.7.0:update17_b32:::::: cpe:2.3:a:oracle:jre:1.7.0:update21_b31:::::: cpe:2.3:a:oracle:jre:1.7.0:update25_b33:::::: cpe:2.3:a:oracle:jre:1.7.0:update25_b34:::::: cpe:2.3:a:oracle:jre:1.7.0:update25_b35:::::: cpe:2.3:a:oracle:jre:1.7.0:update40:::::: cpe:2.3:a:oracle:jre:1.7.0:update45:::::: cpe:2.3:a:oracle:jre:1.7.0:update45_b31:::::: cpe:2.3:a:oracle:jre:1.7.0:update45_b32:::::: cpe:2.3:a:oracle:jre:1.7.0:update45_b33:::::: cpe:2.3:a:oracle:jre:1.7.0:update45_b34:::::: cpe:2.3:a:oracle:jre:1.7.0:update51:::::: cpe:2.3:a:oracle:jre:1.7.0:update7_b32:::::: cpe:2.3:a:oracle:jre:1.7.0:update9_b31:::::: cpe:2.3:a:oracle:jre:1.7.0:update9_b32:::::: cpe:2.3:a:oracle:jre:1.7.0:update_131:::::: cpe:2.3:a:oracle:jre:1.7.0:update10::::windows::* cpe:2.3:a:oracle:jre:1.7.0:update11::::windows::* cpe:2.3:a:oracle:jre:1.7.0:update_241:::::: cpe:2.3:a:oracle:jre:1.7.0:update301:::::: cpe:2.3:a:oracle:jre:1.7.0:update321:::::: cpe:2.3:a:oracle:jre:1.7.0:update331:::::: cpe:2.3:a:oracle:jre:1.7.0:update251:::::: cpe:2.3:a:oracle:jre:1.7.0:update231:::::: cpe:2.3:a:oracle:jre:1.7.0:update221:::::: cpe:2.3:a:oracle:jre:1.7.0:update211:::::: cpe:2.3:a:oracle:jre:1.7.0:update201:::::: cpe:2.3:a:oracle:jre:1.7.0:update191:::::: cpe:2.3:a:oracle:jre:1.7.0:update181:::::: cpe:2.3:a:oracle:jre:1.7.0:update171:::::: cpe:2.3:a:oracle:jre:1.7.0:update161:::::: cpe:2.3:a:oracle:jre:1.7.0:update151:::::: cpe:2.3:a:oracle:jre:1.7.0:update141:::::: cpe:2.3:a:oracle:jre:1.7.0:update111:::::: cpe:2.3:a:oracle:jre:1.7.0:update101:::::: cpe:2.3:a:oracle:jre:1.7.0:update99:::::: cpe:2.3:a:oracle:jre:1.7.0:update97:::::: cpe:2.3:a:oracle:jre:1.7.0:update95:::::: cpe:2.3:a:oracle:jre:1.7.0:update91:::::: cpe:2.3:a:oracle:jre:1.7.0:update76:::::: cpe:2.3:a:oracle:jre:1.7.0:update72:::::: cpe:2.3:a:oracle:jre:1.7.0:update71:::::: cpe:2.3:a:oracle:jre:1.7.0:update60:::::: cpe:2.3:a:oracle:jre:1.7.0:update343:::::: cpe:2.3:a:oracle:jre:1.7:update_131:::::: cpe:2.3:a:oracle:jre:1.6.0:update19:::::: cpe:2.3:a:oracle:jre:1.6.0:update_10:::::: cpe:2.3:a:oracle:jre:1.6.0:update_81:::::: cpe:2.3:a:oracle:jre:1.6.0:update_95:::::: cpe:2.3:a:oracle:jre:1.6.0:update_101:::::: cpe:2.3:a:oracle:jre:1.6.0:update131:::::: cpe:2.3:a:oracle:jre:1.6.0:update201:::::: cpe:2.3:a:oracle:jre:1.6.0:update191:::::: cpe:2.3:a:oracle:jre:1.6.0:update181:::::: cpe:2.3:a:oracle:jre:1.6.0:update171:::::: cpe:2.3:a:oracle:jre:1.6.0:update161:::::: cpe:2.3:a:oracle:jre:1.6.0:update151:::::: cpe:2.3:a:oracle:jre:1.6.0:update141:::::: cpe:2.3:a:oracle:jre:1.6.0:update121:::::: cpe:2.3:a:oracle:jre:1.6.0:update115:::::: cpe:2.3:a:oracle:jre:1.6.0:update113:::::: cpe:2.3:a:oracle:jre:1.6.0:update111:::::: cpe:2.3:a:oracle:jre:1.6.0:update105:::::: cpe:2.3:a:oracle:jre:1.6.0:update91:::::: cpe:2.3:a:oracle:jre:1.6.0:update85:::::: cpe:2.3:a:oracle:jre:1.6.0:update75:::::: cpe:2.3:a:oracle:jre:1.6.0:update71:::::: cpe:2.3:a:oracle:jre:1.6.0:update65:::::: cpe:2.3:a:oracle:jre:1.6.0:update45:::::: cpe:2.3:a:oracle:jre:1.6.0:update30:::::: cpe:2.3:a:oracle:jre:1.6.0:update33:::::: cpe:2.3:a:oracle:jre:1.6.0:update32:::::: cpe:2.3:a:oracle:jre:1.6.0:update24:::::: cpe:2.3:a:oracle:jre:1.6.0:update35:::::: cpe:2.3:a:oracle:jre:1.6.0:update25:::::: cpe:2.3:a:oracle:jre:1.6.0:update39:::::: cpe:2.3:a:oracle:jre:1.6.0:update51:::::: cpe:2.3:a:oracle:jre:1.6.0:update31:::::: cpe:2.3:a:oracle:jre:1.6.0:update22:::::: cpe:2.3:a:oracle:jre:1.6.0:update38:::::: cpe:2.3:a:oracle:jre:1.6.0:update37:::::: cpe:2.3:a:oracle:jre:1.6.0:update29:::::: cpe:2.3:a:oracle:jre:1.6.0:update27:::::: cpe:2.3:a:oracle:jre:1.6.0:update23:::::: cpe:2.3:a:oracle:jre:1.6.0:update41:::::: cpe:2.3:a:oracle:jre:1.6.0:update43:::::: cpe:2.3:a:oracle:jre:1.6.0:update34:::::: cpe:2.3:a:oracle:jre:1.6.0:update26:::::: cpe:2.3:a:oracle:jre:1.6.0:update60:::::: cpe:2.3:a:oracle:jre:1.6.0:-:::::: cpe:2.3:a:oracle:jre:1.6.0:update1:::::: cpe:2.3:a:oracle:jre:1.6.0:update10:::::: cpe:2.3:a:oracle:jre:1.6.0:update11:::::: cpe:2.3:a:oracle:jre:1.6.0:update12:::::: cpe:2.3:a:oracle:jre:1.6.0:update13:::::: cpe:2.3:a:oracle:jre:1.6.0:update14:::::: cpe:2.3:a:oracle:jre:1.6.0:update15:::::: cpe:2.3:a:oracle:jre:1.6.0:update16:::::: cpe:2.3:a:oracle:jre:1.6.0:update17:::::: cpe:2.3:a:oracle:jre:1.6.0:update18:::::: cpe:2.3:a:oracle:jre:1.6.0:update2:::::: cpe:2.3:a:oracle:jre:1.6.0:update20:::::: cpe:2.3:a:oracle:jre:1.6.0:update21:::::: cpe:2.3:a:oracle:jre:1.6.0:update3:::::: cpe:2.3:a:oracle:jre:1.6.0:update5:::::: cpe:2.3:a:oracle:jre:1.6.0:update4:::::: cpe:2.3:a:oracle:jre:1.6.0:update6:::::: cpe:2.3:a:oracle:jre:1.6.0:update7:::::: cpe:2.3:a:oracle:jre:1.6.0:update8:::::: cpe:2.3:a:oracle:jre:1.6.0:update9:::::: cpe:2.3:a:oracle:jre:1.6:update_141:::::: cpe:2.3:a:oracle:jre:1.5.0:update_71:::::: cpe:2.3:a:oracle:jre:1.5.0:update81:::::: cpe:2.3:a:oracle:jre:1.5.0:update75:::::: cpe:2.3:a:oracle:jre:1.5.0:update65:::::: cpe:2.3:a:oracle:jre:1.5.0:update61:::::: cpe:2.3:a:oracle:jre:1.5.0:update55:::::: cpe:2.3:a:oracle:jre:1.5.0:update38:::::: cpe:2.3:a:oracle:jre:1.5.0:update36:::::: cpe:2.3:a:oracle:jre:1.5.0:update40:::::: cpe:2.3:a:oracle:jre:1.5.0:update41:::::: cpe:2.3:a:oracle:jre:1.5.0:update45:::::: cpe:2.3:a:oracle:jre:1.5.0:update51:::::: cpe:2.3:a:oracle:jre:1.5.0:update39:::::: cpe:2.3:a:oracle:jre:1.5.0:update2:::::: cpe:2.3:a:oracle:jre:1.5.0:update3:::::: cpe:2.3:a:oracle:jre:1.5.0:update4:::::: cpe:2.3:a:oracle:jre:1.5.0:update5:::::: cpe:2.3:a:oracle:jre:1.5.0:update6:::::: cpe:2.3:a:oracle:jre:1.5.0:update7:::::: cpe:2.3:a:oracle:jre:1.5.0:update8:::::: cpe:2.3:a:oracle:jre:1.5.0:update9:::::: cpe:2.3:a:oracle:jre:1.5.0:update10:::::: cpe:2.3:a:oracle:jre:1.5.0:update11:::::: cpe:2.3:a:oracle:jre:1.5.0:update12:::::: cpe:2.3:a:oracle:jre:1.5.0:update13:::::: cpe:2.3:a:oracle:jre:1.5.0:update14:::::: cpe:2.3:a:oracle:jre:1.5.0:update15:::::: cpe:2.3:a:oracle:jre:1.5.0:update16:::::: cpe:2.3:a:oracle:jre:1.5.0:update17:::::: cpe:2.3:a:oracle:jre:1.5.0:update18:::::: cpe:2.3:a:oracle:jre:1.5.0:update19:::::: cpe:2.3:a:oracle:jre:1.5.0:update20:::::: cpe:2.3:a:oracle:jre:1.5.0:update21:::::: cpe:2.3:a:oracle:jre:1.5.0:update22:::::: cpe:2.3:a:oracle:jre:1.5.0:update23:::::: cpe:2.3:a:oracle:jre:1.5.0:update24:::::: cpe:2.3:a:oracle:jre:1.5.0:update25:::::: cpe:2.3:a:oracle:jre:1.5.0:update26:::::: cpe:2.3:a:oracle:jre:1.5.0:update27:::::: cpe:2.3:a:oracle:jre:1.5.0:update28:::::: cpe:2.3:a:oracle:jre:1.5.0:update29:::::: cpe:2.3:a:oracle:jre:1.5.0:update30:::::: cpe:2.3:a:oracle:jre:1.5.0:update31:::::: cpe:2.3:a:oracle:jre:1.5.0:update32:::::: cpe:2.3:a:oracle:jre:1.5.0:update33:::::: cpe:2.3:a:oracle:jre:1.5.0:update34:::::: cpe:2.3:a:oracle:jre:1.5.0:update35:::::: cpe:2.3:a:oracle:jre:1.5.0:-:::::: cpe:2.3:a:oracle:jre:1.5.0:update1:::::: cpe:2.3:a:oracle:jre:1.4.2_40:::::::* cpe:2.3:a:oracle:jre:1.4.2_38:::::::* cpe:2.3:a:oracle:jre::::::::	189
Application	Sun Jdk cpe:2.3:a:sun:jdk:1.6.0:update_4:::::: cpe:2.3:a:sun:jdk:1.6.0:update_18:::::: cpe:2.3:a:sun:jdk:1.6.0:update1:::::: cpe:2.3:a:sun:jdk:1.6.0:update1_b06:::::: cpe:2.3:a:sun:jdk:1.6.0:update2:::::: cpe:2.3:a:sun:jdk:1.6.0:update_14:::::: cpe:2.3:a:sun:jdk:1.6.0:update_10:::::: cpe:2.3:a:sun:jdk:1.6.0:update_7:::::: cpe:2.3:a:sun:jdk:1.6.0:update_17:::::: cpe:2.3:a:sun:jdk:1.6.0:update_13:::::: cpe:2.3:a:sun:jdk:1.6.0:update_6:::::: cpe:2.3:a:sun:jdk:1.6.0:update_20:::::: cpe:2.3:a:sun:jdk:1.6.0:update_5:::::: cpe:2.3:a:sun:jdk:1.6.0:update_16:::::: cpe:2.3:a:sun:jdk:1.6.0:update_3:::::: cpe:2.3:a:sun:jdk:1.6.0:update_19:::::: cpe:2.3:a:sun:jdk:1.6.0:update_15:::::: cpe:2.3:a:sun:jdk:1.6.0:update_21:::::: cpe:2.3:a:sun:jdk:1.6.0:update_12:::::: cpe:2.3:a:sun:jdk:1.6.0:update_11:::::: cpe:2.3:a:sun:jdk:1.6.0:-:::::: cpe:2.3:a:sun:jdk:1.5.0:update25:::::: cpe:2.3:a:sun:jdk:1.5.0:update10:::::: cpe:2.3:a:sun:jdk:1.5.0:update5:::::: cpe:2.3:a:sun:jdk:1.5.0:update7:::::: cpe:2.3:a:sun:jdk:1.5.0:update6:::::: cpe:2.3:a:sun:jdk:1.5.0:update3:::::: cpe:2.3:a:sun:jdk:1.5.0:update16:::::: cpe:2.3:a:sun:jdk:1.5.0:update4:::::: cpe:2.3:a:sun:jdk:1.5.0:update17:::::: cpe:2.3:a:sun:jdk:1.5.0:update9:::::: cpe:2.3:a:sun:jdk:1.5.0:update19:::::: cpe:2.3:a:sun:jdk:1.5.0:update15:::::: cpe:2.3:a:sun:jdk:1.5.0:update21:::::: cpe:2.3:a:sun:jdk:1.5.0:update2:::::: cpe:2.3:a:sun:jdk:1.5.0:update12:::::: cpe:2.3:a:sun:jdk:1.5.0:update23:::::: cpe:2.3:a:sun:jdk:1.5.0:update8:::::: cpe:2.3:a:sun:jdk:1.5.0:update18:::::: cpe:2.3:a:sun:jdk:1.5.0:update11:::::: cpe:2.3:a:sun:jdk:1.5.0:update24:::::: cpe:2.3:a:sun:jdk:1.5.0:update22:::::: cpe:2.3:a:sun:jdk:1.5.0:update20:::::: cpe:2.3:a:sun:jdk:1.5.0:update14:::::: cpe:2.3:a:sun:jdk:1.5.0:update13:::::: cpe:2.3:a:sun:jdk:1.5.0:update1:::::: cpe:2.3:a:sun:jdk:1.5.0:update11_b03:::::: cpe:2.3:a:sun:jdk:1.5.0:update7_b03:::::: cpe:2.3:a:sun:jdk:1.5.0:update26:::::: cpe:2.3:a:sun:jdk:1.5.0:update27:::::: cpe:2.3:a:sun:jdk:1.5.0:update29:::::: cpe:2.3:a:sun:jdk:1.5.0:update33:::::: cpe:2.3:a:sun:jdk:1.5.0:update31:::::: cpe:2.3:a:sun:jdk:1.5.0:update28:::::: cpe:2.3:a:sun:jdk:1.5.0:-::::::	55
Application	Sun Jre cpe:2.3:a:sun:jre:1.6.0:update_4:::::: cpe:2.3:a:sun:jre:1.6.0:update_16:::::: cpe:2.3:a:sun:jre:1.6.0:update_14:::::: cpe:2.3:a:sun:jre:1.6.0:update_10:::::: cpe:2.3:a:sun:jre:1.6.0:update_20:::::: cpe:2.3:a:sun:jre:1.6.0:update_18:::::: cpe:2.3:a:sun:jre:1.6.0:update_11:::::: cpe:2.3:a:sun:jre:1.6.0:update_13:::::: cpe:2.3:a:sun:jre:1.6.0:update_6:::::: cpe:2.3:a:sun:jre:1.6.0:update_1:::::: cpe:2.3:a:sun:jre:1.6.0:update_17:::::: cpe:2.3:a:sun:jre:1.6.0:update_7:::::: cpe:2.3:a:sun:jre:1.6.0:update_12:::::: cpe:2.3:a:sun:jre:1.6.0:update_15:::::: cpe:2.3:a:sun:jre:1.6.0:update_3:::::: cpe:2.3:a:sun:jre:1.6.0:update_2:::::: cpe:2.3:a:sun:jre:1.6.0:update_21:::::: cpe:2.3:a:sun:jre:1.6.0:update_5:::::: cpe:2.3:a:sun:jre:1.6.0:update_19:::::: cpe:2.3:a:sun:jre:1.6.0:update_9:::::: cpe:2.3:a:sun:jre:1.6.0:-:::::: cpe:2.3:a:sun:jre:1.5.0:update16:::::: cpe:2.3:a:sun:jre:1.5.0:update17:::::: cpe:2.3:a:sun:jre:1.5.0:update15:::::: cpe:2.3:a:sun:jre:1.5.0:update22:::::: cpe:2.3:a:sun:jre:1.5.0:update12:::::: cpe:2.3:a:sun:jre:1.5.0:update10:::::: cpe:2.3:a:sun:jre:1.5.0:update6:::::: cpe:2.3:a:sun:jre:1.5.0:update13:::::: cpe:2.3:a:sun:jre:1.5.0:update14:::::: cpe:2.3:a:sun:jre:1.5.0:update24:::::: cpe:2.3:a:sun:jre:1.5.0:update11:::::: cpe:2.3:a:sun:jre:1.5.0:update18:::::: cpe:2.3:a:sun:jre:1.5.0:update8:::::: cpe:2.3:a:sun:jre:1.5.0:update1:::::: cpe:2.3:a:sun:jre:1.5.0:update9:::::: cpe:2.3:a:sun:jre:1.5.0:update21:::::: cpe:2.3:a:sun:jre:1.5.0:update20:::::: cpe:2.3:a:sun:jre:1.5.0:update3:::::: cpe:2.3:a:sun:jre:1.5.0:update25:::::: cpe:2.3:a:sun:jre:1.5.0:update4:::::: cpe:2.3:a:sun:jre:1.5.0:update5:::::: cpe:2.3:a:sun:jre:1.5.0:update2:::::: cpe:2.3:a:sun:jre:1.5.0:update7:::::: cpe:2.3:a:sun:jre:1.5.0:update23:::::: cpe:2.3:a:sun:jre:1.5.0:update19:::::: cpe:2.3:a:sun:jre:1.5.0:update27:::::: cpe:2.3:a:sun:jre:1.5.0:update26:::::: cpe:2.3:a:sun:jre:1.5.0:update28:::::: cpe:2.3:a:sun:jre:1.5.0:update31:::::: cpe:2.3:a:sun:jre:1.5.0:update33:::::: cpe:2.3:a:sun:jre:1.5.0:update29:::::: cpe:2.3:a:sun:jre:1.5.0:-::::::	53

Information Assurance Vulnerability Management (IAVM)

Date	Description
2014-02-27	IAVM : 2014-B-0019 - Multiple Vulnerabilities in Apache Tomcat Severity : Category I - VMSKEY : V0044527

Snort® IPS/IDS

Date	Description
2014-01-10	Oracle Javadoc generated frame replacement attempt RuleID : 26994 - Revision : 4 - Type : BROWSER-PLUGINS

Nessus® Vulnerability Scanner

Date	Description
2016-03-04	Name : The remote VMware ESX / ESXi host is missing a security-related patch. File : vmware_esx_VMSA-2013-0012_remote.nasl - Type : ACT_GATHER_INFO
2015-01-19	Name : The remote Solaris system is missing a security patch for third-party software. File : solaris11_tomcat_20140522.nasl - Type : ACT_GATHER_INFO
2014-11-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2014-0414.nasl - Type : ACT_GATHER_INFO
2014-11-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-1456.nasl - Type : ACT_GATHER_INFO
2014-11-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-1455.nasl - Type : ACT_GATHER_INFO
2014-06-30	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201406-32.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2013-622.nasl - Type : ACT_GATHER_INFO
2014-06-06	Name : The version of IBM Tivoli Directory Server is affected by a frame injection v... File : tivoli_directory_svr_63025.nasl - Type : ACT_GATHER_INFO
2014-02-25	Name : The remote Apache Tomcat server is affected by multiple vulnerabilities. File : tomcat_6_0_39.nasl - Type : ACT_GATHER_INFO
2014-02-20	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2014-042.nasl - Type : ACT_GATHER_INFO
2014-01-27	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201401-30.nasl - Type : ACT_GATHER_INFO
2014-01-08	Name : The remote host has software installed that is affected by multiple vulnerabi... File : lotus_domino_9_0_1.nasl - Type : ACT_GATHER_INFO
2014-01-08	Name : The remote server is affected by multiple vulnerabilities. File : domino_9_0_1.nasl - Type : ACT_GATHER_INFO
2013-11-04	Name : The remote host has software installed that is affected by multiple vulnerabi... File : lotus_notes_8_5_3_fp5.nasl - Type : ACT_GATHER_INFO
2013-11-04	Name : The remote host has software installed that is affected by multiple vulnerabi... File : lotus_domino_8_5_3_fp5.nasl - Type : ACT_GATHER_INFO
2013-11-04	Name : The remote server is affected by multiple vulnerabilities. File : domino_8_5_3fp5.nasl - Type : ACT_GATHER_INFO
2013-10-25	Name : The remote host has a virtualization management application installed that is... File : vmware_vcenter_vmsa-2013-0012.nasl - Type : ACT_GATHER_INFO
2013-09-04	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2013-207.nasl - Type : ACT_GATHER_INFO
2013-09-04	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2013-204.nasl - Type : ACT_GATHER_INFO
2013-07-28	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2727.nasl - Type : ACT_GATHER_INFO
2013-07-26	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_7_0-ibm-130723.nasl - Type : ACT_GATHER_INFO
2013-07-26	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_7_0-openjdk-130719.nasl - Type : ACT_GATHER_INFO
2013-07-26	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-ibm-130723.nasl - Type : ACT_GATHER_INFO
2013-07-24	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1908-1.nasl - Type : ACT_GATHER_INFO
2013-07-24	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-openjdk-130718.nasl - Type : ACT_GATHER_INFO
2013-07-17	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-1081.nasl - Type : ACT_GATHER_INFO
2013-07-17	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1907-2.nasl - Type : ACT_GATHER_INFO
2013-07-17	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1907-1.nasl - Type : ACT_GATHER_INFO
2013-07-16	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2722.nasl - Type : ACT_GATHER_INFO
2013-07-16	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-1059.nasl - Type : ACT_GATHER_INFO
2013-07-16	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-1060.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-0958.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-1014.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2013-0957.nasl - Type : ACT_GATHER_INFO
2013-07-05	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20130703_java_1_6_0_openjdk_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2013-07-05	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-1014.nasl - Type : ACT_GATHER_INFO
2013-07-05	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-1014.nasl - Type : ACT_GATHER_INFO
2013-06-28	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2013-183.nasl - Type : ACT_GATHER_INFO
2013-06-21	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20130620_java_1_7_0_openjdk_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2013-06-21	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20130620_java_1_7_0_openjdk_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2013-06-21	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-0958.nasl - Type : ACT_GATHER_INFO
2013-06-21	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2013-0957.nasl - Type : ACT_GATHER_INFO
2013-06-21	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0963.nasl - Type : ACT_GATHER_INFO
2013-06-20	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0957.nasl - Type : ACT_GATHER_INFO
2013-06-20	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2013-0958.nasl - Type : ACT_GATHER_INFO
2013-06-20	Name : The remote Unix host contains a programming platform that is potentially affe... File : oracle_java_cpu_jun_2013_unix.nasl - Type : ACT_GATHER_INFO
2013-06-19	Name : The remote Windows host contains a programming platform that is potentially a... File : oracle_java_cpu_jun_2013.nasl - Type : ACT_GATHER_INFO
2013-06-19	Name : The remote host has a version of Java that is affected by multiple vulnerabil... File : macosx_java_2013-004.nasl - Type : ACT_GATHER_INFO
2013-06-19	Name : The remote host has a version of Java that is affected by multiple vulnerabil... File : macosx_java_10_6_update16.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2016-03-05 13:26:43	Multiple Updates
2014-06-07 13:23:25	Multiple Updates
2014-02-17 12:07:37	Multiple Updates
2013-10-31 13:25:56	Multiple Updates
2013-06-27 05:18:06	Multiple Updates
2013-06-20 21:18:27	Multiple Updates
2013-06-20 17:18:44	Multiple Updates
2013-06-20 00:21:24	Multiple Updates
2013-06-20 00:18:18	Multiple Updates
2013-06-19 21:17:10	Multiple Updates
2013-06-19 13:21:51	Multiple Updates
2013-06-19 00:18:16	First insertion

Global Informations

Type	Count
Oval ID(s)	4
CPE ID(s)	581
IAVM(s)	1
Snort® Rule(s)	1
Nessus® Exploit(s)	49

	Related
10	TA13-169A
4.3	CVE-2013-1571
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 2 more Alert(s)