10 - HPSBUX02922 SSRT101305

Executive Summary

Summary
Title	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities

Informations
Name	HPSBUX02922 SSRT101305	First vendor Publication	2013-08-19
Vendor	HP	Last vendor Modification	2013-08-16
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	10	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Potential security vulnerabilities have been identified in Java5 Runtime Environment (JRE) and Java Developer Kit (JDK) running on HP-UX. These vulnerabilities could allow remote unauthorized access, disclosure of information, and other vulnerabilities.

Original Source

Url : http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-94	Failure to Control Generation of Code ('Code Injection')

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:15708

Oval ID:	oval:org.mitre.oval:def:15708
Title:	Vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and before, 6 Update 43 and before, 5.0 Update 41 and before and JavaFX 2.2.7 and before. Very difficult to exploit vulnerability allows successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized Operating System takeover including arbitrary code execution.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; JavaFX 2.2.7 and earlier; and OpenJDK 6 and 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "JPEGImageReader state corruption" when using native code.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2430	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment JavaFX
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 AND Java SE Runtime Environment 7 is installed OR Determine if the version of JavaFX is less than or equal to 2.2.7 IF Determine if the version of JavaFX is less than or equal to 2.2.7 AND Determine if the version of JavaFX is less than 2.2.7 (JRE 1.7.0:update_7 and later) AND JavaFX 2.x is installed

Definition Id: oval:org.mitre.oval:def:16162

Oval ID:	oval:org.mitre.oval:def:16162
Title:	Vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and before, 6 Update 43 and before, 5.0 Update 41 and before and JavaFX 2.2.7 and before. Very difficult to exploit vulnerability allows successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized Operating System takeover including arbitrary code execution.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2432 and CVE-2013-1491.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2394	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment JavaFX
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 AND Java SE Runtime Environment 7 is installed OR Determine if the version of JavaFX is less than or equal to 2.2.7 IF Determine if the version of JavaFX is less than or equal to 2.2.7 AND Determine if the version of JavaFX is less than 2.2.7 (JRE 1.7.0:update_7 and later) AND JavaFX 2.x is installed

Definition Id: oval:org.mitre.oval:def:16297

Oval ID:	oval:org.mitre.oval:def:16297
Title:	Vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and before, 6 Update 43 and before, 5.0 Update 41 and before. Difficult to exploit vulnerability allows successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Java Runtime Environment accessible data as well as read access to a subset of Java Runtime Environment accessible data.
Description:	The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to invocation of the system class loader by the sun.awt.datatransfer.ClassLoaderObjectInputStream class, which allows remote attackers to bypass Java sandbox restrictions.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-0401	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16311

Oval ID:	oval:org.mitre.oval:def:16311
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality via vectors related to CORBA.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly enforce access restrictions for CORBA output streams.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2446	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16314

Oval ID:	oval:org.mitre.oval:def:16314
Title:	Vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and before, 6 Update 43 and before, 5.0 Update 41 and before. Easily exploitable vulnerability allows successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java Runtime Environment.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality via vectors related to JMX. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient class access checks" when "creating new instances" using MBeanInstantiator.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2424	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16389

Oval ID:	oval:org.mitre.oval:def:16389
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2463, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, and CVE-2013-2473.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2464	Version:	7
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16446

Oval ID:	oval:org.mitre.oval:def:16446
Title:	Vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and before, 6 Update 43 and before, 5.0 Update 41 and before. Easily exploitable vulnerability allows successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java Runtime Environment.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to Networking. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to an information leak involving InetAddress serialization. CVE has not investigated the apparent discrepancy between vendor reports regarding the impact of this issue.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2417	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16454

Oval ID:	oval:org.mitre.oval:def:16454
Title:	Vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and before and 6 Update 43 and before. Difficult to exploit vulnerability allows successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Java Runtime Environment accessible data.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-1540.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2433	Version:	4
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16527

Oval ID:	oval:org.mitre.oval:def:16527
Title:	Vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and before, 6 Update 43 and before, 5.0 Update 41 and before. Easily exploitable vulnerability allows successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java Runtime Environment.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font processing errors" in the International Components for Unicode (ICU) Layout Engine before 51.2.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2419	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16549

Oval ID:	oval:org.mitre.oval:def:16549
Title:	Vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5 Update 41 and earlier can result in unauthorized update, insert or delete access to some Java Runtime Environment accessible data as well as read access to a subset of Java Runtime Environment accessible data.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2383, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font layout" in the International Components for Unicode (ICU) Layout Engine before 51.2.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2384	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16564

Oval ID:	oval:org.mitre.oval:def:16564
Title:	Vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5 Update 41 and earlier can result in unauthorized update, insert or delete access to some Java Runtime Environment accessible data as well as read access to a subset of Java Runtime Environment accessible data.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2384, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "handling of [a] glyph table" in the International Components for Unicode (ICU) Layout Engine before 51.2.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2383	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16578

Oval ID:	oval:org.mitre.oval:def:16578
Title:	Vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and before, 6 Update 43 and before, 5.0 Update 41 and before. Easily exploitable vulnerability allows successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized Operating System takeover including arbitrary code execution.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to the default java.rmi.server.useCodebaseOnly setting of false, which allows remote attackers to perform "dynamic class downloading" and execute arbitrary code.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-1537	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16580

Oval ID:	oval:org.mitre.oval:def:16580
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2455. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "network address handling in virtual machine identifiers" and the lack of "unique and unpredictable IDs" in the java.rmi.dgc.VMID class.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2452	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16597

Oval ID:	oval:org.mitre.oval:def:16597
Title:	Vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and before, 6 Update 43 and before and 5.0 Update 41 and before. Easily exploitable vulnerability allows successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized Operating System takeover including arbitrary code execution.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient "validation of images" in share/native/sun/awt/image/awt_ImageRep.c, possibly involving offsets.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2420	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16611

Oval ID:	oval:org.mitre.oval:def:16611
Title:	Vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and before, 6 Update 43 and before, 5.0 Update 41 and before and JavaFX 2.2.7 and before. Easily exploitable vulnerability allows successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized Operating System takeover including arbitrary code execution.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2394 and CVE-2013-1491.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2432	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment JavaFX
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 AND Java SE Runtime Environment 7 is installed OR Determine if the version of JavaFX is less than or equal to 2.2.7 IF Determine if the version of JavaFX is less than or equal to 2.2.7 AND Determine if the version of JavaFX is less than 2.2.7 (JRE 1.7.0:update_7 and later) AND JavaFX 2.x is installed

Definition Id: oval:org.mitre.oval:def:16663

Oval ID:	oval:org.mitre.oval:def:16663
Title:	Vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and before, 6 Update 43 and before, 5.0 Update 41 and before and JavaFX 2.2.7 and before. Easily exploitable vulnerability allows successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized Operating System takeover including arbitrary code execution.
Description:	The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via vectors related to 2D, as demonstrated by Joshua Drake during a Pwn2Own competition at CanSecWest 2013.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-1491	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment JavaFX
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 AND Java SE Runtime Environment 7 is installed OR Determine if the version of JavaFX is less than or equal to 2.2.7 IF Determine if the version of JavaFX is less than or equal to 2.2.7 AND Determine if the version of JavaFX is less than 2.2.7 (JRE 1.7.0:update_7 and later) AND JavaFX 2.x is installed

Definition Id: oval:org.mitre.oval:def:16688

Oval ID:	oval:org.mitre.oval:def:16688
Title:	Vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and before, 6 Update 43 and before, 5.0 Update 41 and before. Easily exploitable vulnerability allows successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized Operating System takeover including arbitrary code execution.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "missing security restrictions" in the LogStream.setDefaultStream method.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-1557	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16697

Oval ID:	oval:org.mitre.oval:def:16697
Title:	Vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5 Update 41 and earlier can result in unauthorized update, insert or delete access to some Java Runtime Environment accessible data as well as read access to a subset of Java Runtime Environment accessible data.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "checking of [a] glyph table" in the International Components for Unicode (ICU) Layout Engine before 51.2.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-1569	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16702

Oval ID:	oval:org.mitre.oval:def:16702
Title:	Vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and before, 6 Update 43 and before, 5.0 Update 41 and before. Easily exploitable vulnerability allows successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized Operating System takeover including arbitrary code execution.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXP. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "missing security restrictions."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-1518	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_42 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than or equal to 1.6.0:update_43 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than or equal to 1.7.0:update_17 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16712

Oval ID:	oval:org.mitre.oval:def:16712
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ShortBandedRaster size checks" in 2D.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2472	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16770

Oval ID:	oval:org.mitre.oval:def:16770
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Networking.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to obtain a socket's local address via vectors involving inconsistencies between Socket.getLocalAddress and InetAddress.getLocalHost.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2447	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16806

Oval ID:	oval:org.mitre.oval:def:16806
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "ImagingLib byte lookup processing."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2470	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16840

Oval ID:	oval:org.mitre.oval:def:16840
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect IntegerComponentRaster size checks."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2471	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16851

Oval ID:	oval:org.mitre.oval:def:16851
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, 5.0 Update 45 and earlier, and JavaFX 2.2.21 and earlier allows remote attackers to affect availability via vectors related to AWT.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not "properly manage and restrict certain resources related to the processing of fonts," possibly involving temporary files.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2444	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment JavaFX
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed OR Determine if the version of JavaFX is less than or equal to 2.2.21 Determine if the version of JavaFX is less than or equal to 2.2.21 Determine if the version of JavaFX is less than or equal to 2.2.21 AND Determine if the version of JavaFX is less than or equal to 2.2.21 (JRE 1.7.0:update_6 and later) AND JavaFX 2.x is installed

Definition Id: oval:org.mitre.oval:def:17042

Oval ID:	oval:org.mitre.oval:def:17042
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image layout verification" in 2D.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2469	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17052

Oval ID:	oval:org.mitre.oval:def:17052
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to insufficient "access restrictions" and "robustness of sound classes."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2448	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17090

Oval ID:	oval:org.mitre.oval:def:17090
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect availability via unknown vectors related to Hotspot.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Hotspot. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "handling of memory allocation errors."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2445	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17106

Oval ID:	oval:org.mitre.oval:def:17106
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image channel verification" in 2D.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2465	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17149

Oval ID:	oval:org.mitre.oval:def:17149
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image attribute verification" in 2D.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2463	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17176

Oval ID:	oval:org.mitre.oval:def:17176
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect availability via unknown vectors related to Serialization.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper handling of circular references in ObjectStreamClass.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2450	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17181

Oval ID:	oval:org.mitre.oval:def:17181
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "integer overflow checks."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2459	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17189

Oval ID:	oval:org.mitre.oval:def:17189
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2473	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17202

Oval ID:	oval:org.mitre.oval:def:17202
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 45 and earlier and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 45 and earlier and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3743	Version:	7
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed

Definition Id: oval:org.mitre.oval:def:17214

Oval ID:	oval:org.mitre.oval:def:17214
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2452. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect access checks by the (1) getEnclosingClass, (2) getEnclosingMethod, and (3) getEnclosingConstructor methods.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2455	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17215

Oval ID:	oval:org.mitre.oval:def:17215
Title:	Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, 5.0 Update 45 and earlier, and JavaFX 2.2.21 and earlier allows remote attackers to affect integrity via unknown vectors related to Javadoc.
Description:	Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-1571	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment JavaFX
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed OR Determine if the version of JavaFX is less than or equal to 2.2.21 Determine if the version of JavaFX is less than or equal to 2.2.21 Determine if the version of JavaFX is less than or equal to 2.2.21 AND Determine if the version of JavaFX is less than or equal to 2.2.21 (JRE 1.7.0:update_6 and later) AND JavaFX 2.x is installed

Definition Id: oval:org.mitre.oval:def:17221

Oval ID:	oval:org.mitre.oval:def:17221
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows local users to affect confidentiality and integrity via unknown vectors related to 2D.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality and integrity via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to weak permissions for shared memory.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-1500	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17236

Oval ID:	oval:org.mitre.oval:def:17236
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality and integrity via vectors related to JDBC.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via vectors related to JDBC. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly restrict access to certain class packages in the SerialJavaObject class, which allows remote attackers to bypass the Java sandbox.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2454	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17256

Oval ID:	oval:org.mitre.oval:def:17256
Title:	Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect integrity via vectors related to JMX.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect implementation of "certain class checks" that allows remote attackers to bypass intended class restrictions.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2457	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17267

Oval ID:	oval:org.mitre.oval:def:17267
Title:	USN-1819-1 -- OpenJDK 6 vulnerabilities
Description:	Several security issues were fixed in OpenJDK 6.
Family:	unix	Class:	patch
Reference(s):	usn-1819-1 CVE-2013-0401 CVE-2013-1488 CVE-2013-1518 CVE-2013-1537 CVE-2013-1557 CVE-2013-1558 CVE-2013-1569 CVE-2013-2383 CVE-2013-2384 CVE-2013-2420 CVE-2013-2421 CVE-2013-2422 CVE-2013-2426 CVE-2013-2429 CVE-2013-2430 CVE-2013-2431 CVE-2013-2436 CVE-2013-2415 CVE-2013-2424 CVE-2013-2417 CVE-2013-2419	Version:	7
Platform(s):	Ubuntu 10.04 Ubuntu 12.04 Ubuntu 11.10	Product(s):	openjdk-6
Definition Synopsis:
Release section Ubuntu 11.10 is installed AND Installed architecture is all AND Packages section openjdk-6-jre-lib DPKG is earlier than 6b27-1.12.5-0ubuntu0.11.10.1 AND icedtea-6-jre-cacao DPKG is earlier than 6b27-1.12.5-0ubuntu0.11.10.1 AND icedtea-6-jre-jamvm DPKG is earlier than 6b27-1.12.5-0ubuntu0.11.10.1 AND openjdk-6-jre DPKG is earlier than 6b27-1.12.5-0ubuntu0.11.10.1 AND openjdk-6-jre-headless DPKG is earlier than 6b27-1.12.5-0ubuntu0.11.10.1 AND openjdk-6-jre-zero DPKG is earlier than 6b27-1.12.5-0ubuntu0.11.10.1 OR Release section Ubuntu 12.04 is installed AND Installed architecture is all AND Packages section openjdk-6-jre-lib DPKG is earlier than 6b27-1.12.5-0ubuntu0.12.04.1 AND icedtea-6-jre-cacao DPKG is earlier than 6b27-1.12.5-0ubuntu0.12.04.1 AND icedtea-6-jre-jamvm DPKG is earlier than 6b27-1.12.5-0ubuntu0.12.04.1 AND openjdk-6-jre DPKG is earlier than 6b27-1.12.5-0ubuntu0.12.04.1 AND openjdk-6-jre-headless DPKG is earlier than 6b27-1.12.5-0ubuntu0.12.04.1 AND openjdk-6-jre-zero DPKG is earlier than 6b27-1.12.5-0ubuntu0.12.04.1 OR Release section Ubuntu 10.04 is installed AND Installed architecture is all AND Packages section openjdk-6-jre-lib DPKG is earlier than 6b27-1.12.5-0ubuntu0.10.04.1 AND icedtea-6-jre-cacao DPKG is earlier than 6b27-1.12.5-0ubuntu0.10.04.1 AND icedtea-6-jre-jamvm DPKG is earlier than 6b27-1.12.5-0ubuntu0.10.04.1 AND openjdk-6-jre DPKG is earlier than 6b27-1.12.5-0ubuntu0.10.04.1 AND openjdk-6-jre-headless DPKG is earlier than 6b27-1.12.5-0ubuntu0.10.04.1 AND openjdk-6-jre-zero DPKG is earlier than 6b27-1.12.5-0ubuntu0.10.04.1

Definition Id: oval:org.mitre.oval:def:17294

Oval ID:	oval:org.mitre.oval:def:17294
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Serialization.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper access checks for subclasses in the ObjectOutputStream class.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2456	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:18236

Oval ID:	oval:org.mitre.oval:def:18236
Title:	USN-1907-2 -- icedtea-web update
Description:	IcedTea Web updated to work with new OpenJDK 7.
Family:	unix	Class:	patch
Reference(s):	USN-1907-2 CVE-2013-1500 CVE-2013-2454 CVE-2013-2458 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2446 CVE-2013-2447 CVE-2013-2449 CVE-2013-2452 CVE-2013-2456 CVE-2013-2444 CVE-2013-2445 CVE-2013-2450 CVE-2013-2448 CVE-2013-2451 CVE-2013-2459 CVE-2013-2460 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473 CVE-2013-2453 CVE-2013-2455 CVE-2013-2457	Version:	7
Platform(s):	Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04	Product(s):	icedtea-web
Definition Synopsis:
Release section Ubuntu 13.04 is installed AND icedtea-netx DPKG is earlier than 1.3.2-1ubuntu1.1 AND Release section Ubuntu 12.10 is installed AND icedtea-netx DPKG is earlier than 1.3.2-1ubuntu0.12.10.2 AND Release section Ubuntu 12.04 is installed AND icedtea-netx DPKG is earlier than 1.2.3-0ubuntu0.12.04.3

Definition Id: oval:org.mitre.oval:def:18239

Oval ID:	oval:org.mitre.oval:def:18239
Title:	USN-1908-1 -- openjdk-6 vulnerabilities
Description:	Several security issues were fixed in OpenJDK 6.
Family:	unix	Class:	patch
Reference(s):	USN-1908-1 CVE-2013-1500 CVE-2013-2454 CVE-2013-2458 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2446 CVE-2013-2447 CVE-2013-2449 CVE-2013-2452 CVE-2013-2456 CVE-2013-2444 CVE-2013-2445 CVE-2013-2450 CVE-2013-2448 CVE-2013-2451 CVE-2013-2459 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473 CVE-2013-3743 CVE-2013-2453 CVE-2013-2455 CVE-2013-2457	Version:	7
Platform(s):	Ubuntu 12.04 Ubuntu 10.04	Product(s):	openjdk-6
Definition Synopsis:
Release section Ubuntu 12.04 is installed Packages match section icedtea-6-jre-cacao DPKG is earlier than 6b27-1.12.6-1ubuntu0.12.04.2 AND icedtea-6-jre-jamvm DPKG is earlier than 6b27-1.12.6-1ubuntu0.12.04.2 AND openjdk-6-doc DPKG is earlier than 6b27-1.12.6-1ubuntu0.12.04.2 AND openjdk-6-jre DPKG is earlier than 6b27-1.12.6-1ubuntu0.12.04.2 AND openjdk-6-jre-headless DPKG is earlier than 6b27-1.12.6-1ubuntu0.12.04.2 AND openjdk-6-jre-lib DPKG is earlier than 6b27-1.12.6-1ubuntu0.12.04.2 AND openjdk-6-jre-zero DPKG is earlier than 6b27-1.12.6-1ubuntu0.12.04.2 AND Release section Ubuntu 10.04 is installed Packages match section icedtea-6-jre-cacao DPKG is earlier than 6b27-1.12.6-1ubuntu0.10.04.2 AND openjdk-6-doc DPKG is earlier than 6b27-1.12.6-1ubuntu0.10.04.2 AND openjdk-6-jre DPKG is earlier than 6b27-1.12.6-1ubuntu0.10.04.2 AND openjdk-6-jre-headless DPKG is earlier than 6b27-1.12.6-1ubuntu0.10.04.2 AND openjdk-6-jre-lib DPKG is earlier than 6b27-1.12.6-1ubuntu0.10.04.2 AND openjdk-6-jre-zero DPKG is earlier than 6b27-1.12.6-1ubuntu0.10.04.2

Definition Id: oval:org.mitre.oval:def:18411

Oval ID:	oval:org.mitre.oval:def:18411
Title:	USN-1907-1 -- openjdk-7 vulnerabilities
Description:	Several security issues were fixed in OpenJDK 7.
Family:	unix	Class:	patch
Reference(s):	USN-1907-1 CVE-2013-1500 CVE-2013-2454 CVE-2013-2458 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2446 CVE-2013-2447 CVE-2013-2449 CVE-2013-2452 CVE-2013-2456 CVE-2013-2444 CVE-2013-2445 CVE-2013-2450 CVE-2013-2448 CVE-2013-2451 CVE-2013-2459 CVE-2013-2460 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473 CVE-2013-2453 CVE-2013-2455 CVE-2013-2457	Version:	7
Platform(s):	Ubuntu 13.04 Ubuntu 12.10	Product(s):	openjdk-7
Definition Synopsis:
Release section Ubuntu 13.04 is installed Packages match section icedtea-7-jre-jamvm DPKG is earlier than 7u25-2.3.10-1ubuntu0.13.04.2 AND openjdk-7-doc DPKG is earlier than 7u25-2.3.10-1ubuntu0.13.04.2 AND openjdk-7-jre DPKG is earlier than 7u25-2.3.10-1ubuntu0.13.04.2 AND openjdk-7-jre-headless DPKG is earlier than 7u25-2.3.10-1ubuntu0.13.04.2 AND openjdk-7-jre-lib DPKG is earlier than 7u25-2.3.10-1ubuntu0.13.04.2 AND openjdk-7-jre-zero DPKG is earlier than 7u25-2.3.10-1ubuntu0.13.04.2 AND Release section Ubuntu 12.10 is installed Packages match section icedtea-7-jre-cacao DPKG is earlier than 7u25-2.3.10-1ubuntu0.12.10.2 AND icedtea-7-jre-jamvm DPKG is earlier than 7u25-2.3.10-1ubuntu0.12.10.2 AND openjdk-7-doc DPKG is earlier than 7u25-2.3.10-1ubuntu0.12.10.2 AND openjdk-7-jre DPKG is earlier than 7u25-2.3.10-1ubuntu0.12.10.2 AND openjdk-7-jre-headless DPKG is earlier than 7u25-2.3.10-1ubuntu0.12.10.2 AND openjdk-7-jre-lib DPKG is earlier than 7u25-2.3.10-1ubuntu0.12.10.2 AND openjdk-7-jre-zero DPKG is earlier than 7u25-2.3.10-1ubuntu0.12.10.2

Definition Id: oval:org.mitre.oval:def:18699

Oval ID:	oval:org.mitre.oval:def:18699
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to obtain a socket's local address via vectors involving inconsistencies between Socket.getLocalAddress and InetAddress.getLocalHost.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2447	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:18742

Oval ID:	oval:org.mitre.oval:def:18742
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ShortBandedRaster size checks" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2472	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:18758

Oval ID:	oval:org.mitre.oval:def:18758
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 45 and earlier and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-3743	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:18846

Oval ID:	oval:org.mitre.oval:def:18846
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ShortBandedRaster size checks" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2472	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:18850

Oval ID:	oval:org.mitre.oval:def:18850
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2394 and CVE-2013-1491.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2432	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00

Definition Id: oval:org.mitre.oval:def:18888

Oval ID:	oval:org.mitre.oval:def:18888
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2473	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:18905

Oval ID:	oval:org.mitre.oval:def:18905
Title:	DSA-2727-1 openjdk-6 - several
Description:	Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure or denial of service.
Family:	unix	Class:	patch
Reference(s):	DSA-2727-1 CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2450 CVE-2013-2451 CVE-2013-2452 CVE-2013-2453 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2459 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473	Version:	8
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/Linux 7 Debian GNU/kFreeBSD 6.0 Debian GNU/kFreeBSD 7	Product(s):	openjdk-6
Definition Synopsis:
Release section Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND openjdk-6 DPKG is earlier than 6b27-1.12.6-1~deb6u1 AND Release section Debian 7 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND openjdk-6 DPKG is earlier than 6b27-1.12.6-1~deb7u1

Definition Id: oval:org.mitre.oval:def:18914

Oval ID:	oval:org.mitre.oval:def:18914
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2394 and CVE-2013-1491.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2432	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19059

Oval ID:	oval:org.mitre.oval:def:19059
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Hotspot. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "handling of memory allocation errors."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2445	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19062

Oval ID:	oval:org.mitre.oval:def:19062
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly enforce access restrictions for CORBA output streams.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2446	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19074

Oval ID:	oval:org.mitre.oval:def:19074
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image channel verification" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2465	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19107

Oval ID:	oval:org.mitre.oval:def:19107
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "JPEGImageWriter state corruption" when using native code, which triggers memory corruption.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2429	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19190

Oval ID:	oval:org.mitre.oval:def:19190
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Hotspot. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "handling of memory allocation errors."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2445	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19203

Oval ID:	oval:org.mitre.oval:def:19203
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "JPEGImageWriter state corruption" when using native code, which triggers memory corruption.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2429	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00

Definition Id: oval:org.mitre.oval:def:19213

Oval ID:	oval:org.mitre.oval:def:19213
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2455. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "network address handling in virtual machine identifiers" and the lack of "unique and unpredictable IDs" in the java.rmi.dgc.VMID class.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2452	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19225

Oval ID:	oval:org.mitre.oval:def:19225
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly enforce access restrictions for CORBA output streams.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2446	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19227

Oval ID:	oval:org.mitre.oval:def:19227
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2463, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, and CVE-2013-2473.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2464	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19231

Oval ID:	oval:org.mitre.oval:def:19231
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2455. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "network address handling in virtual machine identifiers" and the lack of "unique and unpredictable IDs" in the java.rmi.dgc.VMID class.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2452	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19237

Oval ID:	oval:org.mitre.oval:def:19237
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via vectors related to JDBC. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly restrict access to certain class packages in the SerialJavaObject class, which allows remote attackers to bypass the Java sandbox.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2454	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19252

Oval ID:	oval:org.mitre.oval:def:19252
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to obtain a socket's local address via vectors involving inconsistencies between Socket.getLocalAddress and InetAddress.getLocalHost.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2447	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19267

Oval ID:	oval:org.mitre.oval:def:19267
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper access checks for subclasses in the ObjectOutputStream class.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2456	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19276

Oval ID:	oval:org.mitre.oval:def:19276
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect implementation of "certain class checks" that allows remote attackers to bypass intended class restrictions.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2457	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19290

Oval ID:	oval:org.mitre.oval:def:19290
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper handling of circular references in ObjectStreamClass.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2450	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19291

Oval ID:	oval:org.mitre.oval:def:19291
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2384, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "handling of [a] glyph table" in the International Components for Unicode (ICU) Layout Engine before 51.2.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2383	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00

Definition Id: oval:org.mitre.oval:def:19294

Oval ID:	oval:org.mitre.oval:def:19294
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "missing security restrictions" in the LogStream.setDefaultStream method.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1557	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00

Definition Id: oval:org.mitre.oval:def:19295

Oval ID:	oval:org.mitre.oval:def:19295
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect IntegerComponentRaster size checks."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2471	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19307

Oval ID:	oval:org.mitre.oval:def:19307
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not "properly manage and restrict certain resources related to the processing of fonts," possibly involving temporary files.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2444	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19310

Oval ID:	oval:org.mitre.oval:def:19310
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "integer overflow checks."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2459	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19314

Oval ID:	oval:org.mitre.oval:def:19314
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image layout verification" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2469	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19324

Oval ID:	oval:org.mitre.oval:def:19324
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to obtain a socket's local address via vectors involving inconsistencies between Socket.getLocalAddress and InetAddress.getLocalHost.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2447	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19327

Oval ID:	oval:org.mitre.oval:def:19327
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "checking of [a] glyph table" in the International Components for Unicode (ICU) Layout Engine before 51.2.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1569	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00

Definition Id: oval:org.mitre.oval:def:19341

Oval ID:	oval:org.mitre.oval:def:19341
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2383, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font layout" in the International Components for Unicode (ICU) Layout Engine before 51.2.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2384	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00

Definition Id: oval:org.mitre.oval:def:19348

Oval ID:	oval:org.mitre.oval:def:19348
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "ImagingLib byte lookup processing."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2470	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19354

Oval ID:	oval:org.mitre.oval:def:19354
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient "validation of images" in share/native/sun/awt/image/awt_ImageRep.c, possibly involving offsets.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2420	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00

Definition Id: oval:org.mitre.oval:def:19373

Oval ID:	oval:org.mitre.oval:def:19373
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image attribute verification" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2463	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19385

Oval ID:	oval:org.mitre.oval:def:19385
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to the default java.rmi.server.useCodebaseOnly setting of false, which allows remote attackers to perform "dynamic class downloading" and execute arbitrary code.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1537	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00

Definition Id: oval:org.mitre.oval:def:19386

Oval ID:	oval:org.mitre.oval:def:19386
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font processing errors" in the International Components for Unicode (ICU) Layout Engine before 51.2.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2419	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19390

Oval ID:	oval:org.mitre.oval:def:19390
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2463, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, and CVE-2013-2473.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2464	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19407

Oval ID:	oval:org.mitre.oval:def:19407
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via vectors related to JDBC. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly restrict access to certain class packages in the SerialJavaObject class, which allows remote attackers to bypass the Java sandbox.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2454	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19413

Oval ID:	oval:org.mitre.oval:def:19413
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect IntegerComponentRaster size checks."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2471	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19435

Oval ID:	oval:org.mitre.oval:def:19435
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2452. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect access checks by the (1) getEnclosingClass, (2) getEnclosingMethod, and (3) getEnclosingConstructor methods.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2455	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19441

Oval ID:	oval:org.mitre.oval:def:19441
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect IntegerComponentRaster size checks."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2471	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19451

Oval ID:	oval:org.mitre.oval:def:19451
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXP. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "missing security restrictions."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1518	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00

Definition Id: oval:org.mitre.oval:def:19453

Oval ID:	oval:org.mitre.oval:def:19453
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 45 and earlier and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-3743	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19455

Oval ID:	oval:org.mitre.oval:def:19455
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image channel verification" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2465	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19461

Oval ID:	oval:org.mitre.oval:def:19461
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-1540.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2433	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19463

Oval ID:	oval:org.mitre.oval:def:19463
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to invocation of the system class loader by the sun.awt.datatransfer.ClassLoaderObjectInputStream class, which allows remote attackers to bypass Java sandbox restrictions.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-0401	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00

Definition Id: oval:org.mitre.oval:def:19470

Oval ID:	oval:org.mitre.oval:def:19470
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via vectors related to JDBC. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly restrict access to certain class packages in the SerialJavaObject class, which allows remote attackers to bypass the Java sandbox.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2454	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19473

Oval ID:	oval:org.mitre.oval:def:19473
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Install.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2439	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00

Definition Id: oval:org.mitre.oval:def:19476

Oval ID:	oval:org.mitre.oval:def:19476
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not "properly manage and restrict certain resources related to the processing of fonts," possibly involving temporary files.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2444	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19482

Oval ID:	oval:org.mitre.oval:def:19482
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via vectors related to 2D, as demonstrated by Joshua Drake during a Pwn2Own competition at CanSecWest 2013.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1491	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19486

Oval ID:	oval:org.mitre.oval:def:19486
Title:	DSA-2722-1 openjdk-7 - several
Description:	Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure or denial of service.
Family:	unix	Class:	patch
Reference(s):	DSA-2722-1 CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2449 CVE-2013-2450 CVE-2013-2451 CVE-2013-2452 CVE-2013-2453 CVE-2013-2454 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2458 CVE-2013-2459 CVE-2013-2460 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473	Version:	5
Platform(s):	Debian GNU/Linux 7 Debian GNU/kFreeBSD 7	Product(s):	openjdk-7
Definition Synopsis:
Debian 7 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND openjdk-7 DPKG is earlier than 0:7u25-2.3.10-1~deb7u1

Definition Id: oval:org.mitre.oval:def:19500

Oval ID:	oval:org.mitre.oval:def:19500
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2432 and CVE-2013-1491.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2394	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19516

Oval ID:	oval:org.mitre.oval:def:19516
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Hotspot. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "handling of memory allocation errors."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2445	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19517

Oval ID:	oval:org.mitre.oval:def:19517
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "ImagingLib byte lookup processing."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2470	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19518

Oval ID:	oval:org.mitre.oval:def:19518
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1571	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19524

Oval ID:	oval:org.mitre.oval:def:19524
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to Networking. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to an information leak involving InetAddress serialization. CVE has not investigated the apparent discrepancy between vendor reports regarding the impact of this issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2417	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19526

Oval ID:	oval:org.mitre.oval:def:19526
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font processing errors" in the International Components for Unicode (ICU) Layout Engine before 51.2.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2419	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00

Definition Id: oval:org.mitre.oval:def:19536

Oval ID:	oval:org.mitre.oval:def:19536
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; JavaFX 2.2.7 and earlier; and OpenJDK 6 and 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "JPEGImageReader state corruption" when using native code.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2430	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00

Definition Id: oval:org.mitre.oval:def:19541

Oval ID:	oval:org.mitre.oval:def:19541
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Install.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2439	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19543

Oval ID:	oval:org.mitre.oval:def:19543
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ShortBandedRaster size checks" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2472	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19549

Oval ID:	oval:org.mitre.oval:def:19549
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2383, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "font layout" in the International Components for Unicode (ICU) Layout Engine before 51.2.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2384	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19550

Oval ID:	oval:org.mitre.oval:def:19550
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to the default java.rmi.server.useCodebaseOnly setting of false, which allows remote attackers to perform "dynamic class downloading" and execute arbitrary code.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1537	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19552

Oval ID:	oval:org.mitre.oval:def:19552
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image layout verification" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2469	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19553

Oval ID:	oval:org.mitre.oval:def:19553
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via vectors related to 2D, as demonstrated by Joshua Drake during a Pwn2Own competition at CanSecWest 2013.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1491	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00

Definition Id: oval:org.mitre.oval:def:19554

Oval ID:	oval:org.mitre.oval:def:19554
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2432 and CVE-2013-1491.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2394	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00

Definition Id: oval:org.mitre.oval:def:19556

Oval ID:	oval:org.mitre.oval:def:19556
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "checking of [a] glyph table" in the International Components for Unicode (ICU) Layout Engine before 51.2.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1569	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19560

Oval ID:	oval:org.mitre.oval:def:19560
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2452. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect access checks by the (1) getEnclosingClass, (2) getEnclosingMethod, and (3) getEnclosingConstructor methods.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2455	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19562

Oval ID:	oval:org.mitre.oval:def:19562
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper handling of circular references in ObjectStreamClass.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2450	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19570

Oval ID:	oval:org.mitre.oval:def:19570
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to Networking. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to an information leak involving InetAddress serialization. CVE has not investigated the apparent discrepancy between vendor reports regarding the impact of this issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2417	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00

Definition Id: oval:org.mitre.oval:def:19577

Oval ID:	oval:org.mitre.oval:def:19577
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-1540.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2433	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19587

Oval ID:	oval:org.mitre.oval:def:19587
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "integer overflow checks."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2459	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19589

Oval ID:	oval:org.mitre.oval:def:19589
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-1540.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2433	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00

Definition Id: oval:org.mitre.oval:def:19591

Oval ID:	oval:org.mitre.oval:def:19591
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 45 and earlier and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-3743	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19594

Oval ID:	oval:org.mitre.oval:def:19594
Title:	HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality via vectors related to JMX. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient class access checks" when "creating new instances" using MBeanInstantiator.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2424	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.19.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.19.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 OR Criteria meets HP Security Bulletin HPSBUX02889 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.19.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-COM version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.19.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.19.00

Definition Id: oval:org.mitre.oval:def:19600

Oval ID:	oval:org.mitre.oval:def:19600
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2473	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19602

Oval ID:	oval:org.mitre.oval:def:19602
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not "properly manage and restrict certain resources related to the processing of fonts," possibly involving temporary files.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2444	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19620

Oval ID:	oval:org.mitre.oval:def:19620
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image attribute verification" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2463	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19622

Oval ID:	oval:org.mitre.oval:def:19622
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2452. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect access checks by the (1) getEnclosingClass, (2) getEnclosingMethod, and (3) getEnclosingConstructor methods.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2455	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19632

Oval ID:	oval:org.mitre.oval:def:19632
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to insufficient "access restrictions" and "robustness of sound classes."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2448	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19638

Oval ID:	oval:org.mitre.oval:def:19638
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect implementation of "certain class checks" that allows remote attackers to bypass intended class restrictions.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2457	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19641

Oval ID:	oval:org.mitre.oval:def:19641
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to invocation of the system class loader by the sun.awt.datatransfer.ClassLoaderObjectInputStream class, which allows remote attackers to bypass Java sandbox restrictions.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-0401	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19643

Oval ID:	oval:org.mitre.oval:def:19643
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper access checks for subclasses in the ObjectOutputStream class.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2456	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19645

Oval ID:	oval:org.mitre.oval:def:19645
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper handling of circular references in ObjectStreamClass.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2450	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19652

Oval ID:	oval:org.mitre.oval:def:19652
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2473	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19655

Oval ID:	oval:org.mitre.oval:def:19655
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "ImagingLib byte lookup processing."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2470	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19656

Oval ID:	oval:org.mitre.oval:def:19656
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality via vectors related to JMX. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient class access checks" when "creating new instances" using MBeanInstantiator.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2424	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19658

Oval ID:	oval:org.mitre.oval:def:19658
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly enforce access restrictions for CORBA output streams.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2446	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19663

Oval ID:	oval:org.mitre.oval:def:19663
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality and integrity via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to weak permissions for shared memory.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1500	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19665

Oval ID:	oval:org.mitre.oval:def:19665
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2455. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "network address handling in virtual machine identifiers" and the lack of "unique and unpredictable IDs" in the java.rmi.dgc.VMID class.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2452	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19667

Oval ID:	oval:org.mitre.oval:def:19667
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1571	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19669

Oval ID:	oval:org.mitre.oval:def:19669
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to insufficient "access restrictions" and "robustness of sound classes."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2448	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19672

Oval ID:	oval:org.mitre.oval:def:19672
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "missing security restrictions" in the LogStream.setDefaultStream method.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1557	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19676

Oval ID:	oval:org.mitre.oval:def:19676
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper access checks for subclasses in the ObjectOutputStream class.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2456	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19685

Oval ID:	oval:org.mitre.oval:def:19685
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image attribute verification" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2463	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19692

Oval ID:	oval:org.mitre.oval:def:19692
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to insufficient "access restrictions" and "robustness of sound classes."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2448	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19696

Oval ID:	oval:org.mitre.oval:def:19696
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect implementation of "certain class checks" that allows remote attackers to bypass intended class restrictions.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2457	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19703

Oval ID:	oval:org.mitre.oval:def:19703
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image channel verification" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2465	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19704

Oval ID:	oval:org.mitre.oval:def:19704
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient "validation of images" in share/native/sun/awt/image/awt_ImageRep.c, possibly involving offsets.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2420	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19705

Oval ID:	oval:org.mitre.oval:def:19705
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXP. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "missing security restrictions."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1518	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19708

Oval ID:	oval:org.mitre.oval:def:19708
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2463, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, and CVE-2013-2473.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2464	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19713

Oval ID:	oval:org.mitre.oval:def:19713
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image layout verification" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2469	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19715

Oval ID:	oval:org.mitre.oval:def:19715
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; JavaFX 2.2.7 and earlier; and OpenJDK 6 and 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to ImageIO. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "JPEGImageReader state corruption" when using native code.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2430	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19718

Oval ID:	oval:org.mitre.oval:def:19718
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1571	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19725

Oval ID:	oval:org.mitre.oval:def:19725
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-1569, CVE-2013-2384, and CVE-2013-2420. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "handling of [a] glyph table" in the International Components for Unicode (ICU) Layout Engine before 51.2.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2383	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19726

Oval ID:	oval:org.mitre.oval:def:19726
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality and integrity via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to weak permissions for shared memory.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1500	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19741

Oval ID:	oval:org.mitre.oval:def:19741
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "integer overflow checks."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2459	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:20807

Oval ID:	oval:org.mitre.oval:def:20807
Title:	RHSA-2013:1014: java-1.6.0-openjdk security update (Important)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:1014-00 CESA-2013:1014 CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2450 CVE-2013-2452 CVE-2013-2453 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2459 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473	Version:	353
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6 CentOS Linux 5 CentOS Linux 6	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Operation system section Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND CentOS Linux 6.x Packages section java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND Operation system section Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x Packages section java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9

Definition Id: oval:org.mitre.oval:def:21135

Oval ID:	oval:org.mitre.oval:def:21135
Title:	RHSA-2013:0957: java-1.7.0-openjdk security update (Critical)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:0957-00 CESA-2013:0957 CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2449 CVE-2013-2450 CVE-2013-2452 CVE-2013-2453 CVE-2013-2454 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2458 CVE-2013-2459 CVE-2013-2460 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473	Version:	409
Platform(s):	Red Hat Enterprise Linux 6 CentOS Linux 6	Product(s):	java-1.7.0-openjdk
Definition Synopsis:
Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND CentOS Linux 6.x Packages section java-1.7.0-openjdk-demo is earlier than 1:1.7.0.25-2.3.10.3.el6_4 AND java-1.7.0-openjdk-src is earlier than 1:1.7.0.25-2.3.10.3.el6_4 AND java-1.7.0-openjdk is earlier than 1:1.7.0.25-2.3.10.3.el6_4 AND java-1.7.0-openjdk-javadoc is earlier than 1:1.7.0.25-2.3.10.3.el6_4 AND java-1.7.0-openjdk-devel is earlier than 1:1.7.0.25-2.3.10.3.el6_4

Definition Id: oval:org.mitre.oval:def:21222

Oval ID:	oval:org.mitre.oval:def:21222
Title:	RHSA-2013:0958: java-1.7.0-openjdk security update (Important)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:0958-00 CESA-2013:0958 CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2449 CVE-2013-2450 CVE-2013-2452 CVE-2013-2453 CVE-2013-2454 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2458 CVE-2013-2459 CVE-2013-2460 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473	Version:	409
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	java-1.7.0-openjdk
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x Packages section java-1.7.0-openjdk-demo is earlier than 1:1.7.0.25-2.3.10.4.el5_9 AND java-1.7.0-openjdk-src is earlier than 1:1.7.0.25-2.3.10.4.el5_9 AND java-1.7.0-openjdk is earlier than 1:1.7.0.25-2.3.10.4.el5_9 AND java-1.7.0-openjdk-javadoc is earlier than 1:1.7.0.25-2.3.10.4.el5_9 AND java-1.7.0-openjdk-devel is earlier than 1:1.7.0.25-2.3.10.4.el5_9

Definition Id: oval:org.mitre.oval:def:21241

Oval ID:	oval:org.mitre.oval:def:21241
Title:	RHSA-2013:0855: java-1.5.0-ibm security update (Important)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2394 and CVE-2013-1491.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:0855-01 CVE-2013-0169 CVE-2013-0401 CVE-2013-1491 CVE-2013-1537 CVE-2013-1557 CVE-2013-1569 CVE-2013-2383 CVE-2013-2384 CVE-2013-2394 CVE-2013-2417 CVE-2013-2419 CVE-2013-2420 CVE-2013-2424 CVE-2013-2429 CVE-2013-2430 CVE-2013-2432	Version:	229
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5	Product(s):	java-1.5.0-ibm
Definition Synopsis:
Red Hat Enterprise Linux 5 release section The operating system installed on the system is Red Hat Enterprise Linux 5 Packages match section java-1.5.0-ibm is earlier than 1:1.5.0.16.2-1jpp.1.el5_9 AND java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.16.2-1jpp.1.el5_9 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.16.2-1jpp.1.el5_9 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.16.2-1jpp.1.el5_9 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.16.2-1jpp.1.el5_9 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.16.2-1jpp.1.el5_9 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.16.2-1jpp.1.el5_9 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.16.2-1jpp.1.el5_9 AND Red Hat Enterprise Linux 6 release section The operating system installed on the system is Red Hat Enterprise Linux 6 Packages match section java-1.5.0-ibm is earlier than 1:1.5.0.16.2-1jpp.1.el6_4 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.16.2-1jpp.1.el6_4 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.16.2-1jpp.1.el6_4 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.16.2-1jpp.1.el6_4 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.16.2-1jpp.1.el6_4 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.16.2-1jpp.1.el6_4 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.16.2-1jpp.1.el6_4

Definition Id: oval:org.mitre.oval:def:23377

Oval ID:	oval:org.mitre.oval:def:23377
Title:	ELSA-2013:0958: java-1.7.0-openjdk security update (Important)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0958-00 CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2449 CVE-2013-2450 CVE-2013-2452 CVE-2013-2453 CVE-2013-2454 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2458 CVE-2013-2459 CVE-2013-2460 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473	Version:	121
Platform(s):	Oracle Linux 5	Product(s):	java-1.7.0-openjdk
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.7.0-openjdk-demo is earlier than 1:1.7.0.25-2.3.10.4.el5_9 AND java-1.7.0-openjdk-src is earlier than 1:1.7.0.25-2.3.10.4.el5_9 AND java-1.7.0-openjdk is earlier than 1:1.7.0.25-2.3.10.4.el5_9 AND java-1.7.0-openjdk-javadoc is earlier than 1:1.7.0.25-2.3.10.4.el5_9 AND java-1.7.0-openjdk-devel is earlier than 1:1.7.0.25-2.3.10.4.el5_9

Definition Id: oval:org.mitre.oval:def:23554

Oval ID:	oval:org.mitre.oval:def:23554
Title:	DEPRECATED: ELSA-2013:1014: java-1.6.0-openjdk security update (Important)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:1014-00 CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2450 CVE-2013-2452 CVE-2013-2453 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2459 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473	Version:	106
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
rpm test Oracle Linux 6.x AND rpm test java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 OR rpm test Oracle Linux 5.x AND rpm test java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9

Definition Id: oval:org.mitre.oval:def:23622

Oval ID:	oval:org.mitre.oval:def:23622
Title:	ELSA-2013:0855: java-1.5.0-ibm security update (Important)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2394 and CVE-2013-1491.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0855-01 CVE-2013-0169 CVE-2013-0401 CVE-2013-1491 CVE-2013-1537 CVE-2013-1557 CVE-2013-1569 CVE-2013-2383 CVE-2013-2384 CVE-2013-2394 CVE-2013-2417 CVE-2013-2419 CVE-2013-2420 CVE-2013-2424 CVE-2013-2429 CVE-2013-2430 CVE-2013-2432	Version:	69
Platform(s):	Oracle Linux 6	Product(s):	java-1.5.0-ibm
Definition Synopsis:
Oracle Linux 6.x rpm test java-1.5.0-ibm-plugin is earlier than 1:1.5.0.16.2-1jpp.1.el6_4 AND java-1.5.0-ibm is earlier than 1:1.5.0.16.2-1jpp.1.el6_4 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.16.2-1jpp.1.el6_4 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.16.2-1jpp.1.el6_4 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.16.2-1jpp.1.el6_4 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.16.2-1jpp.1.el6_4 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.16.2-1jpp.1.el6_4

Definition Id: oval:org.mitre.oval:def:23887

Oval ID:	oval:org.mitre.oval:def:23887
Title:	ELSA-2013:0957: java-1.7.0-openjdk security update (Critical)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0957-00 CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2449 CVE-2013-2450 CVE-2013-2452 CVE-2013-2453 CVE-2013-2454 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2458 CVE-2013-2459 CVE-2013-2460 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473	Version:	121
Platform(s):	Oracle Linux 6	Product(s):	java-1.7.0-openjdk
Definition Synopsis:
Oracle Linux 6.x rpm test java-1.7.0-openjdk-demo is earlier than 1:1.7.0.25-2.3.10.3.el6_4 AND java-1.7.0-openjdk-src is earlier than 1:1.7.0.25-2.3.10.3.el6_4 AND java-1.7.0-openjdk is earlier than 1:1.7.0.25-2.3.10.3.el6_4 AND java-1.7.0-openjdk-javadoc is earlier than 1:1.7.0.25-2.3.10.3.el6_4 AND java-1.7.0-openjdk-devel is earlier than 1:1.7.0.25-2.3.10.3.el6_4

Definition Id: oval:org.mitre.oval:def:24043

Oval ID:	oval:org.mitre.oval:def:24043
Title:	ELSA-2013:1014: java-1.6.0-openjdk security update (Important)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:1014-00 CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2450 CVE-2013-2452 CVE-2013-2453 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2459 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473	Version:	105
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
rpm test Oracle Linux 6.x AND rpm test java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.62.1.11.11.90.el