10 - RHSA-2013:1060

Executive Summary

Summary
Title	java-1.7.0-ibm security update

Informations
Name	RHSA-2013:1060	First vendor Publication	2013-07-15
Vendor	RedHat	Last vendor Modification	2013-07-15
Severity (Vendor)	Critical	Revision	01

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	10	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Problem Description:

Updated java-1.7.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary.

The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node Supplementary (v. 6) - x86_64 Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, ppc, s390x, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64

3. Description:

IBM Java SE version 7 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBM Security alerts page, listed in the References section. (CVE-2013-1500, CVE-2013-1571, CVE-2013-2400, CVE-2013-2407, CVE-2013-2412, CVE-2013-2437, CVE-2013-2442, CVE-2013-2444, CVE-2013-2446, CVE-2013-2447, CVE-2013-2448, CVE-2013-2449, CVE-2013-2450, CVE-2013-2451, CVE-2013-2452, CVE-2013-2453, CVE-2013-2454, CVE-2013-2455, CVE-2013-2456, CVE-2013-2457, CVE-2013-2458, CVE-2013-2459, CVE-2013-2460, CVE-2013-2462, CVE-2013-2463, CVE-2013-2464, CVE-2013-2465, CVE-2013-2466, CVE-2013-2468, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, CVE-2013-2473, CVE-2013-3744)

Red Hat would like to thank Tim Brown for reporting CVE-2013-1500, and US-CERT for reporting CVE-2013-1571. US-CERT acknowledges Oracle as the original reporter of CVE-2013-1571.

All users of java-1.7.0-ibm are advised to upgrade to these updated packages, containing the IBM Java SE 7 SR5 release. All running instances of IBM Java must be restarted for the update to take effect.

4. Solution:

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258

5. Bugs fixed (http://bugzilla.redhat.com/):

973474 - CVE-2013-1571 OpenJDK: Frame injection in generated HTML (Javadoc, 8012375) 975099 - CVE-2013-2470 OpenJDK: ImagingLib byte lookup processing (2D, 8011243) 975102 - CVE-2013-2471 OpenJDK: Incorrect IntegerComponentRaster size checks (2D, 8011248) 975107 - CVE-2013-2472 OpenJDK: Incorrect ShortBandedRaster size checks (2D, 8011253) 975110 - CVE-2013-2473 OpenJDK: Incorrect ByteBandedRaster size checks (2D, 8011257) 975115 - CVE-2013-2463 OpenJDK: Incorrect image attribute verification (2D, 8012438) 975118 - CVE-2013-2465 OpenJDK: Incorrect image channel verification (2D, 8012597) 975120 - CVE-2013-2469 OpenJDK: Incorrect image layout verification (2D, 8012601) 975121 - CVE-2013-2459 OpenJDK: Various AWT integer overflow checks (AWT, 8009071) 975122 - CVE-2013-2460 OpenJDK: tracing insufficient access checks (Serviceability, 8010209) 975125 - CVE-2013-2448 OpenJDK: Better access restrictions (Sound, 8006328) 975127 - CVE-2013-2407 OpenJDK: Integrate Apache Santuario, rework class loader (Libraries, 6741606, 8008744) 975129 - CVE-2013-2454 OpenJDK: SerialJavaObject package restriction (JDBC, 8009554) 975130 - CVE-2013-2458 OpenJDK: Method handles (Libraries, 8009424) 975131 - CVE-2013-2444 OpenJDK: Resource denial of service (AWT, 8001038) 975132 - CVE-2013-2446 OpenJDK: output stream access restrictions (CORBA, 8000642) 975133 - CVE-2013-2457 OpenJDK: Proper class checking (JMX, 8008120) 975134 - CVE-2013-2453 OpenJDK: MBeanServer Introspector package access (JMX, 8008124) 975138 - CVE-2013-2452 OpenJDK: Unique VMIDs (Libraries, 8001033) 975139 - CVE-2013-2455 OpenJDK: getEnclosing* checks (Libraries, 8007812) 975140 - CVE-2013-2447 OpenJDK: Prevent revealing the local address (Networking, 8001318) 975141 - CVE-2013-2450 OpenJDK: ObjectStreamClass circular reference denial of service (Serialization, 8000638) 975142 - CVE-2013-2456 OpenJDK: ObjectOutputStream access checks (Serialization, 8008132) 975144 - CVE-2013-2412 OpenJDK: JConsole SSL support (Serviceability, 8003703) 975145 - CVE-2013-2449 OpenJDK: GnomeFileTypeDetector path access check (Libraries, 8004288) 975146 - CVE-2013-2451 OpenJDK: exclusive port binding (Networking, 7170730) 975148 - CVE-2013-1500 OpenJDK: Insecure shared memory permissions (2D, 8001034) 975757 - CVE-2013-2464 Oracle JDK: unspecified vulnerability fixed in 7u25 (2D) 975761 - CVE-2013-2468 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment) 975764 - CVE-2013-2466 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment) 975769 - CVE-2013-2462 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment) 975770 - CVE-2013-2442 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment) 975773 - CVE-2013-2437 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment) 975774 - CVE-2013-2400 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment) 975775 - CVE-2013-3744 Oracle JDK: unspecified vulnerability fixed in 7u25 (Deployment)

Original Source

Url : https://rhn.redhat.com/errata/RHSA-2013-1060.html

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:16311

Oval ID:	oval:org.mitre.oval:def:16311
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality via vectors related to CORBA.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly enforce access restrictions for CORBA output streams.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2446	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16389

Oval ID:	oval:org.mitre.oval:def:16389
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2463, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, and CVE-2013-2473.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2464	Version:	7
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16545

Oval ID:	oval:org.mitre.oval:def:16545
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect integrity via vectors related to JMX.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to a missing check for "package access" by the MBeanServer Introspector.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2453	Version:	7
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16580

Oval ID:	oval:org.mitre.oval:def:16580
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2455. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "network address handling in virtual machine identifiers" and the lack of "unique and unpredictable IDs" in the java.rmi.dgc.VMID class.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2452	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16617

Oval ID:	oval:org.mitre.oval:def:16617
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Deployment.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Deployment.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2437	Version:	6
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16712

Oval ID:	oval:org.mitre.oval:def:16712
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ShortBandedRaster size checks" in 2D.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2472	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16770

Oval ID:	oval:org.mitre.oval:def:16770
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Networking.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to obtain a socket's local address via vectors involving inconsistencies between Socket.getLocalAddress and InetAddress.getLocalHost.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2447	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16803

Oval ID:	oval:org.mitre.oval:def:16803
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2466 and CVE-2013-2468.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2442	Version:	6
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16806

Oval ID:	oval:org.mitre.oval:def:16806
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "ImagingLib byte lookup processing."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2470	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16840

Oval ID:	oval:org.mitre.oval:def:16840
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect IntegerComponentRaster size checks."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2471	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16851

Oval ID:	oval:org.mitre.oval:def:16851
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, 5.0 Update 45 and earlier, and JavaFX 2.2.21 and earlier allows remote attackers to affect availability via vectors related to AWT.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not "properly manage and restrict certain resources related to the processing of fonts," possibly involving temporary files.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2444	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment JavaFX
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed OR Determine if the version of JavaFX is less than or equal to 2.2.21 Determine if the version of JavaFX is less than or equal to 2.2.21 Determine if the version of JavaFX is less than or equal to 2.2.21 AND Determine if the version of JavaFX is less than or equal to 2.2.21 (JRE 1.7.0:update_6 and later) AND JavaFX 2.x is installed

Definition Id: oval:org.mitre.oval:def:16899

Oval ID:	oval:org.mitre.oval:def:16899
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-3744.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2400	Version:	6
Platform(s):	Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:16982

Oval ID:	oval:org.mitre.oval:def:16982
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2442 and CVE-2013-2468.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2466	Version:	6
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17042

Oval ID:	oval:org.mitre.oval:def:17042
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image layout verification" in 2D.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2469	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17052

Oval ID:	oval:org.mitre.oval:def:17052
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to insufficient "access restrictions" and "robustness of sound classes."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2448	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17069

Oval ID:	oval:org.mitre.oval:def:17069
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via "an error related to method handles."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2458	Version:	7
Platform(s):	Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17098

Oval ID:	oval:org.mitre.oval:def:17098
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Serviceability.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serviceability. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient indication of an SSL connection failure by JConsole, related to RMI connection dialog box.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2412	Version:	7
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17106

Oval ID:	oval:org.mitre.oval:def:17106
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image channel verification" in 2D.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2465	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17116

Oval ID:	oval:org.mitre.oval:def:17116
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "insufficient access checks" in the tracing component.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2460	Version:	7
Platform(s):	Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17149

Oval ID:	oval:org.mitre.oval:def:17149
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image attribute verification" in 2D.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2463	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17176

Oval ID:	oval:org.mitre.oval:def:17176
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect availability via unknown vectors related to Serialization.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper handling of circular references in ObjectStreamClass.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2450	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17180

Oval ID:	oval:org.mitre.oval:def:17180
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2400.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-3744	Version:	6
Platform(s):	Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17181

Oval ID:	oval:org.mitre.oval:def:17181
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "integer overflow checks."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2459	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17189

Oval ID:	oval:org.mitre.oval:def:17189
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2473	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17192

Oval ID:	oval:org.mitre.oval:def:17192
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to GnomeFileTypeDetector and a missing check for read permissions for a path.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2449	Version:	7
Platform(s):	Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17195

Oval ID:	oval:org.mitre.oval:def:17195
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality and availability via unknown vectors related to Libraries.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and availability via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "XML security and the class loader."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2407	Version:	7
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17206

Oval ID:	oval:org.mitre.oval:def:17206
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2442 and CVE-2013-2466.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2468	Version:	6
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17214

Oval ID:	oval:org.mitre.oval:def:17214
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2452. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect access checks by the (1) getEnclosingClass, (2) getEnclosingMethod, and (3) getEnclosingConstructor methods.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2455	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17215

Oval ID:	oval:org.mitre.oval:def:17215
Title:	Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, 5.0 Update 45 and earlier, and JavaFX 2.2.21 and earlier allows remote attackers to affect integrity via unknown vectors related to Javadoc.
Description:	Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-1571	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment JavaFX
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed OR Determine if the version of JavaFX is less than or equal to 2.2.21 Determine if the version of JavaFX is less than or equal to 2.2.21 Determine if the version of JavaFX is less than or equal to 2.2.21 AND Determine if the version of JavaFX is less than or equal to 2.2.21 (JRE 1.7.0:update_6 and later) AND JavaFX 2.x is installed

Definition Id: oval:org.mitre.oval:def:17221

Oval ID:	oval:org.mitre.oval:def:17221
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows local users to affect confidentiality and integrity via unknown vectors related to 2D.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality and integrity via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to weak permissions for shared memory.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-1500	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17236

Oval ID:	oval:org.mitre.oval:def:17236
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality and integrity via vectors related to JDBC.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via vectors related to JDBC. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly restrict access to certain class packages in the SerialJavaObject class, which allows remote attackers to bypass the Java sandbox.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2454	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17256

Oval ID:	oval:org.mitre.oval:def:17256
Title:	Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect integrity via vectors related to JMX.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect implementation of "certain class checks" that allows remote attackers to bypass intended class restrictions.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2457	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17257

Oval ID:	oval:org.mitre.oval:def:17257
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2462	Version:	6
Platform(s):	Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17265

Oval ID:	oval:org.mitre.oval:def:17265
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Networking.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Networking. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper enforcement of exclusive port binds when running on Windows, which allows attackers to bind to ports that are already in use.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2451	Version:	7
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:17294

Oval ID:	oval:org.mitre.oval:def:17294
Title:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Serialization.
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper access checks for subclasses in the ObjectOutputStream class.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-2456	Version:	8
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update_46 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_46 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 and is greater than or equal to 1.7.0 Determine if the version of Java Runtime Environment is less than 1.7.0:update_22 AND Java SE Runtime Environment 7 is installed

Definition Id: oval:org.mitre.oval:def:18236

Oval ID:	oval:org.mitre.oval:def:18236
Title:	USN-1907-2 -- icedtea-web update
Description:	IcedTea Web updated to work with new OpenJDK 7.
Family:	unix	Class:	patch
Reference(s):	USN-1907-2 CVE-2013-1500 CVE-2013-2454 CVE-2013-2458 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2446 CVE-2013-2447 CVE-2013-2449 CVE-2013-2452 CVE-2013-2456 CVE-2013-2444 CVE-2013-2445 CVE-2013-2450 CVE-2013-2448 CVE-2013-2451 CVE-2013-2459 CVE-2013-2460 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473 CVE-2013-2453 CVE-2013-2455 CVE-2013-2457	Version:	7
Platform(s):	Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04	Product(s):	icedtea-web
Definition Synopsis:
Release section Ubuntu 13.04 is installed AND icedtea-netx DPKG is earlier than 1.3.2-1ubuntu1.1 AND Release section Ubuntu 12.10 is installed AND icedtea-netx DPKG is earlier than 1.3.2-1ubuntu0.12.10.2 AND Release section Ubuntu 12.04 is installed AND icedtea-netx DPKG is earlier than 1.2.3-0ubuntu0.12.04.3

Definition Id: oval:org.mitre.oval:def:18239

Oval ID:	oval:org.mitre.oval:def:18239
Title:	USN-1908-1 -- openjdk-6 vulnerabilities
Description:	Several security issues were fixed in OpenJDK 6.
Family:	unix	Class:	patch
Reference(s):	USN-1908-1 CVE-2013-1500 CVE-2013-2454 CVE-2013-2458 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2446 CVE-2013-2447 CVE-2013-2449 CVE-2013-2452 CVE-2013-2456 CVE-2013-2444 CVE-2013-2445 CVE-2013-2450 CVE-2013-2448 CVE-2013-2451 CVE-2013-2459 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473 CVE-2013-3743 CVE-2013-2453 CVE-2013-2455 CVE-2013-2457	Version:	7
Platform(s):	Ubuntu 12.04 Ubuntu 10.04	Product(s):	openjdk-6
Definition Synopsis:
Release section Ubuntu 12.04 is installed Packages match section icedtea-6-jre-cacao DPKG is earlier than 6b27-1.12.6-1ubuntu0.12.04.2 AND icedtea-6-jre-jamvm DPKG is earlier than 6b27-1.12.6-1ubuntu0.12.04.2 AND openjdk-6-doc DPKG is earlier than 6b27-1.12.6-1ubuntu0.12.04.2 AND openjdk-6-jre DPKG is earlier than 6b27-1.12.6-1ubuntu0.12.04.2 AND openjdk-6-jre-headless DPKG is earlier than 6b27-1.12.6-1ubuntu0.12.04.2 AND openjdk-6-jre-lib DPKG is earlier than 6b27-1.12.6-1ubuntu0.12.04.2 AND openjdk-6-jre-zero DPKG is earlier than 6b27-1.12.6-1ubuntu0.12.04.2 AND Release section Ubuntu 10.04 is installed Packages match section icedtea-6-jre-cacao DPKG is earlier than 6b27-1.12.6-1ubuntu0.10.04.2 AND openjdk-6-doc DPKG is earlier than 6b27-1.12.6-1ubuntu0.10.04.2 AND openjdk-6-jre DPKG is earlier than 6b27-1.12.6-1ubuntu0.10.04.2 AND openjdk-6-jre-headless DPKG is earlier than 6b27-1.12.6-1ubuntu0.10.04.2 AND openjdk-6-jre-lib DPKG is earlier than 6b27-1.12.6-1ubuntu0.10.04.2 AND openjdk-6-jre-zero DPKG is earlier than 6b27-1.12.6-1ubuntu0.10.04.2

Definition Id: oval:org.mitre.oval:def:18411

Oval ID:	oval:org.mitre.oval:def:18411
Title:	USN-1907-1 -- openjdk-7 vulnerabilities
Description:	Several security issues were fixed in OpenJDK 7.
Family:	unix	Class:	patch
Reference(s):	USN-1907-1 CVE-2013-1500 CVE-2013-2454 CVE-2013-2458 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2446 CVE-2013-2447 CVE-2013-2449 CVE-2013-2452 CVE-2013-2456 CVE-2013-2444 CVE-2013-2445 CVE-2013-2450 CVE-2013-2448 CVE-2013-2451 CVE-2013-2459 CVE-2013-2460 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473 CVE-2013-2453 CVE-2013-2455 CVE-2013-2457	Version:	7
Platform(s):	Ubuntu 13.04 Ubuntu 12.10	Product(s):	openjdk-7
Definition Synopsis:
Release section Ubuntu 13.04 is installed Packages match section icedtea-7-jre-jamvm DPKG is earlier than 7u25-2.3.10-1ubuntu0.13.04.2 AND openjdk-7-doc DPKG is earlier than 7u25-2.3.10-1ubuntu0.13.04.2 AND openjdk-7-jre DPKG is earlier than 7u25-2.3.10-1ubuntu0.13.04.2 AND openjdk-7-jre-headless DPKG is earlier than 7u25-2.3.10-1ubuntu0.13.04.2 AND openjdk-7-jre-lib DPKG is earlier than 7u25-2.3.10-1ubuntu0.13.04.2 AND openjdk-7-jre-zero DPKG is earlier than 7u25-2.3.10-1ubuntu0.13.04.2 AND Release section Ubuntu 12.10 is installed Packages match section icedtea-7-jre-cacao DPKG is earlier than 7u25-2.3.10-1ubuntu0.12.10.2 AND icedtea-7-jre-jamvm DPKG is earlier than 7u25-2.3.10-1ubuntu0.12.10.2 AND openjdk-7-doc DPKG is earlier than 7u25-2.3.10-1ubuntu0.12.10.2 AND openjdk-7-jre DPKG is earlier than 7u25-2.3.10-1ubuntu0.12.10.2 AND openjdk-7-jre-headless DPKG is earlier than 7u25-2.3.10-1ubuntu0.12.10.2 AND openjdk-7-jre-lib DPKG is earlier than 7u25-2.3.10-1ubuntu0.12.10.2 AND openjdk-7-jre-zero DPKG is earlier than 7u25-2.3.10-1ubuntu0.12.10.2

Definition Id: oval:org.mitre.oval:def:18622

Oval ID:	oval:org.mitre.oval:def:18622
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and availability via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "XML security and the class loader."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2407	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:18699

Oval ID:	oval:org.mitre.oval:def:18699
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to obtain a socket's local address via vectors involving inconsistencies between Socket.getLocalAddress and InetAddress.getLocalHost.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2447	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:18717

Oval ID:	oval:org.mitre.oval:def:18717
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to GnomeFileTypeDetector and a missing check for read permissions for a path.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2449	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:18742

Oval ID:	oval:org.mitre.oval:def:18742
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ShortBandedRaster size checks" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2472	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:18846

Oval ID:	oval:org.mitre.oval:def:18846
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ShortBandedRaster size checks" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2472	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:18888

Oval ID:	oval:org.mitre.oval:def:18888
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2473	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:18905

Oval ID:	oval:org.mitre.oval:def:18905
Title:	DSA-2727-1 openjdk-6 - several
Description:	Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure or denial of service.
Family:	unix	Class:	patch
Reference(s):	DSA-2727-1 CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2450 CVE-2013-2451 CVE-2013-2452 CVE-2013-2453 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2459 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473	Version:	8
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/Linux 7 Debian GNU/kFreeBSD 6.0 Debian GNU/kFreeBSD 7	Product(s):	openjdk-6
Definition Synopsis:
Release section Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND openjdk-6 DPKG is earlier than 6b27-1.12.6-1~deb6u1 AND Release section Debian 7 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND openjdk-6 DPKG is earlier than 6b27-1.12.6-1~deb7u1

Definition Id: oval:org.mitre.oval:def:19019

Oval ID:	oval:org.mitre.oval:def:19019
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-3744.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2400	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19062

Oval ID:	oval:org.mitre.oval:def:19062
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly enforce access restrictions for CORBA output streams.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2446	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19074

Oval ID:	oval:org.mitre.oval:def:19074
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image channel verification" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2465	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19129

Oval ID:	oval:org.mitre.oval:def:19129
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "insufficient access checks" in the tracing component.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2460	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19213

Oval ID:	oval:org.mitre.oval:def:19213
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2455. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "network address handling in virtual machine identifiers" and the lack of "unique and unpredictable IDs" in the java.rmi.dgc.VMID class.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2452	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19225

Oval ID:	oval:org.mitre.oval:def:19225
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly enforce access restrictions for CORBA output streams.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2446	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19227

Oval ID:	oval:org.mitre.oval:def:19227
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2463, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, and CVE-2013-2473.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2464	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19231

Oval ID:	oval:org.mitre.oval:def:19231
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2455. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "network address handling in virtual machine identifiers" and the lack of "unique and unpredictable IDs" in the java.rmi.dgc.VMID class.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2452	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19234

Oval ID:	oval:org.mitre.oval:def:19234
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2442 and CVE-2013-2468.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2466	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19237

Oval ID:	oval:org.mitre.oval:def:19237
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via vectors related to JDBC. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly restrict access to certain class packages in the SerialJavaObject class, which allows remote attackers to bypass the Java sandbox.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2454	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19252

Oval ID:	oval:org.mitre.oval:def:19252
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to obtain a socket's local address via vectors involving inconsistencies between Socket.getLocalAddress and InetAddress.getLocalHost.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2447	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19267

Oval ID:	oval:org.mitre.oval:def:19267
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper access checks for subclasses in the ObjectOutputStream class.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2456	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19276

Oval ID:	oval:org.mitre.oval:def:19276
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect implementation of "certain class checks" that allows remote attackers to bypass intended class restrictions.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2457	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19290

Oval ID:	oval:org.mitre.oval:def:19290
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper handling of circular references in ObjectStreamClass.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2450	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19295

Oval ID:	oval:org.mitre.oval:def:19295
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect IntegerComponentRaster size checks."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2471	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19307

Oval ID:	oval:org.mitre.oval:def:19307
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not "properly manage and restrict certain resources related to the processing of fonts," possibly involving temporary files.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2444	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19310

Oval ID:	oval:org.mitre.oval:def:19310
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "integer overflow checks."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2459	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19314

Oval ID:	oval:org.mitre.oval:def:19314
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image layout verification" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2469	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19324

Oval ID:	oval:org.mitre.oval:def:19324
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to obtain a socket's local address via vectors involving inconsistencies between Socket.getLocalAddress and InetAddress.getLocalHost.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2447	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19348

Oval ID:	oval:org.mitre.oval:def:19348
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "ImagingLib byte lookup processing."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2470	Version:	13
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19373

Oval ID:	oval:org.mitre.oval:def:19373
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image attribute verification" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2463	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19375

Oval ID:	oval:org.mitre.oval:def:19375
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serviceability. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient indication of an SSL connection failure by JConsole, related to RMI connection dialog box.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2412	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19378

Oval ID:	oval:org.mitre.oval:def:19378
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2462	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19390

Oval ID:	oval:org.mitre.oval:def:19390
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2463, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, and CVE-2013-2473.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2464	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19407

Oval ID:	oval:org.mitre.oval:def:19407
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via vectors related to JDBC. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly restrict access to certain class packages in the SerialJavaObject class, which allows remote attackers to bypass the Java sandbox.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2454	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19413

Oval ID:	oval:org.mitre.oval:def:19413
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect IntegerComponentRaster size checks."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2471	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19435

Oval ID:	oval:org.mitre.oval:def:19435
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2452. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect access checks by the (1) getEnclosingClass, (2) getEnclosingMethod, and (3) getEnclosingConstructor methods.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2455	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19441

Oval ID:	oval:org.mitre.oval:def:19441
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect IntegerComponentRaster size checks."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2471	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19455

Oval ID:	oval:org.mitre.oval:def:19455
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image channel verification" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2465	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19460

Oval ID:	oval:org.mitre.oval:def:19460
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2466 and CVE-2013-2468.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2442	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19470

Oval ID:	oval:org.mitre.oval:def:19470
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via vectors related to JDBC. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly restrict access to certain class packages in the SerialJavaObject class, which allows remote attackers to bypass the Java sandbox.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2454	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19476

Oval ID:	oval:org.mitre.oval:def:19476
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not "properly manage and restrict certain resources related to the processing of fonts," possibly involving temporary files.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2444	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19478

Oval ID:	oval:org.mitre.oval:def:19478
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2442 and CVE-2013-2466.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2468	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19486

Oval ID:	oval:org.mitre.oval:def:19486
Title:	DSA-2722-1 openjdk-7 - several
Description:	Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure or denial of service.
Family:	unix	Class:	patch
Reference(s):	DSA-2722-1 CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2449 CVE-2013-2450 CVE-2013-2451 CVE-2013-2452 CVE-2013-2453 CVE-2013-2454 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2458 CVE-2013-2459 CVE-2013-2460 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473	Version:	5
Platform(s):	Debian GNU/Linux 7 Debian GNU/kFreeBSD 7	Product(s):	openjdk-7
Definition Synopsis:
Debian 7 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND openjdk-7 DPKG is earlier than 0:7u25-2.3.10-1~deb7u1

Definition Id: oval:org.mitre.oval:def:19517

Oval ID:	oval:org.mitre.oval:def:19517
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "ImagingLib byte lookup processing."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2470	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19518

Oval ID:	oval:org.mitre.oval:def:19518
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1571	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19521

Oval ID:	oval:org.mitre.oval:def:19521
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Deployment.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2437	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19535

Oval ID:	oval:org.mitre.oval:def:19535
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Networking. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper enforcement of exclusive port binds when running on Windows, which allows attackers to bind to ports that are already in use.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2451	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19543

Oval ID:	oval:org.mitre.oval:def:19543
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ShortBandedRaster size checks" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2472	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19551

Oval ID:	oval:org.mitre.oval:def:19551
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Deployment.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2437	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19552

Oval ID:	oval:org.mitre.oval:def:19552
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image layout verification" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2469	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19560

Oval ID:	oval:org.mitre.oval:def:19560
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2452. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect access checks by the (1) getEnclosingClass, (2) getEnclosingMethod, and (3) getEnclosingConstructor methods.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2455	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19562

Oval ID:	oval:org.mitre.oval:def:19562
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper handling of circular references in ObjectStreamClass.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2450	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19568

Oval ID:	oval:org.mitre.oval:def:19568
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and availability via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "XML security and the class loader."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2407	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19569

Oval ID:	oval:org.mitre.oval:def:19569
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2466 and CVE-2013-2468.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2442	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19587

Oval ID:	oval:org.mitre.oval:def:19587
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "integer overflow checks."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2459	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19588

Oval ID:	oval:org.mitre.oval:def:19588
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to a missing check for "package access" by the MBeanServer Introspector.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2453	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19600

Oval ID:	oval:org.mitre.oval:def:19600
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2473	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19602

Oval ID:	oval:org.mitre.oval:def:19602
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not "properly manage and restrict certain resources related to the processing of fonts," possibly involving temporary files.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2444	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19605

Oval ID:	oval:org.mitre.oval:def:19605
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2442 and CVE-2013-2466.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2468	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19611

Oval ID:	oval:org.mitre.oval:def:19611
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to a missing check for "package access" by the MBeanServer Introspector.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2453	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19620

Oval ID:	oval:org.mitre.oval:def:19620
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image attribute verification" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2463	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19622

Oval ID:	oval:org.mitre.oval:def:19622
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2452. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect access checks by the (1) getEnclosingClass, (2) getEnclosingMethod, and (3) getEnclosingConstructor methods.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2455	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19632

Oval ID:	oval:org.mitre.oval:def:19632
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to insufficient "access restrictions" and "robustness of sound classes."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2448	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19633

Oval ID:	oval:org.mitre.oval:def:19633
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serviceability. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to insufficient indication of an SSL connection failure by JConsole, related to RMI connection dialog box.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2412	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19638

Oval ID:	oval:org.mitre.oval:def:19638
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect implementation of "certain class checks" that allows remote attackers to bypass intended class restrictions.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2457	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19643

Oval ID:	oval:org.mitre.oval:def:19643
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper access checks for subclasses in the ObjectOutputStream class.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2456	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19645

Oval ID:	oval:org.mitre.oval:def:19645
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper handling of circular references in ObjectStreamClass.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2450	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19649

Oval ID:	oval:org.mitre.oval:def:19649
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2442 and CVE-2013-2468.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2466	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19652

Oval ID:	oval:org.mitre.oval:def:19652
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2473	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19655

Oval ID:	oval:org.mitre.oval:def:19655
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "ImagingLib byte lookup processing."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2470	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19658

Oval ID:	oval:org.mitre.oval:def:19658
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly enforce access restrictions for CORBA output streams.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2446	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19663

Oval ID:	oval:org.mitre.oval:def:19663
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality and integrity via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to weak permissions for shared memory.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1500	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19665

Oval ID:	oval:org.mitre.oval:def:19665
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Libraries, a different vulnerability than CVE-2013-2443 and CVE-2013-2455. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "network address handling in virtual machine identifiers" and the lack of "unique and unpredictable IDs" in the java.rmi.dgc.VMID class.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2452	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19667

Oval ID:	oval:org.mitre.oval:def:19667
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1571	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19669

Oval ID:	oval:org.mitre.oval:def:19669
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to insufficient "access restrictions" and "robustness of sound classes."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2448	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19676

Oval ID:	oval:org.mitre.oval:def:19676
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serialization. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper access checks for subclasses in the ObjectOutputStream class.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2456	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19684

Oval ID:	oval:org.mitre.oval:def:19684
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2400.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-3744	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19685

Oval ID:	oval:org.mitre.oval:def:19685
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image attribute verification" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2463	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19692

Oval ID:	oval:org.mitre.oval:def:19692
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to insufficient "access restrictions" and "robustness of sound classes."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2448	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19696

Oval ID:	oval:org.mitre.oval:def:19696
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is due to an incorrect implementation of "certain class checks" that allows remote attackers to bypass intended class restrictions.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2457	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19703

Oval ID:	oval:org.mitre.oval:def:19703
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image channel verification" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2465	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19708

Oval ID:	oval:org.mitre.oval:def:19708
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-2463, CVE-2013-2465, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, and CVE-2013-2473.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2464	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19709

Oval ID:	oval:org.mitre.oval:def:19709
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via "an error related to method handles."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2458	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.07.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.07.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-COM version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.07.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.07.00

Definition Id: oval:org.mitre.oval:def:19713

Oval ID:	oval:org.mitre.oval:def:19713
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image layout verification" in 2D.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2469	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19718

Oval ID:	oval:org.mitre.oval:def:19718
Title:	HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1571	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20 version is less than 1.6.0.20.00 AND Jdk60.JDK60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-COM-DOC version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20 version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W version is less than 1.6.0.20.00 AND Jre60.JRE60-PA20W-HS version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 OR Criteria meets HP Security Bulletin HPSBUX02908 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk60.JDK60-COM version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF32 version is less than 1.6.0.20.00 AND Jdk60.JDK60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-COM version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF32-HS version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64 version is less than 1.6.0.20.00 AND Jre60.JRE60-IPF64-HS version is less than 1.6.0.20.00

Definition Id: oval:org.mitre.oval:def:19726

Oval ID:	oval:org.mitre.oval:def:19726
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality and integrity via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to weak permissions for shared memory.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-1500	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:19741

Oval ID:	oval:org.mitre.oval:def:19741
Title:	HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "integer overflow checks."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-2459	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF32 version is less than 1.5.0.29.00 AND Jdk15.JDK15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF32-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64 version is less than 1.5.0.29.00 AND Jre15.JRE15-IPF64-HS version is less than 1.5.0.29.00 OR Criteria meets HP Security Bulletin HPSBUX02922 platforms HP Release B.11.11 AND HP Release B.11.23 AND filesets tests Jdk15.JDK15-COM version is less than 1.5.0.29.00 AND Jdk15.JDK15-DEMO version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20 version is less than 1.5.0.29.00 AND Jdk15.JDK15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-COM version is less than 1.5.0.29.00 AND Jre15.JRE15-COM-DOC version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20 version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20-HS version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W version is less than 1.5.0.29.00 AND Jre15.JRE15-PA20W-HS version is less than 1.5.0.29.00

Definition Id: oval:org.mitre.oval:def:20713

Oval ID:	oval:org.mitre.oval:def:20713
Title:	RHSA-2013:0752: java-1.7.0-openjdk security update (Important)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Deployment.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:0752-01 CESA-2013:0752 CVE-2013-0401 CVE-2013-1488 CVE-2013-1518 CVE-2013-1537 CVE-2013-1557 CVE-2013-1558 CVE-2013-1569 CVE-2013-2383 CVE-2013-2384 CVE-2013-2415 CVE-2013-2417 CVE-2013-2419 CVE-2013-2420 CVE-2013-2421 CVE-2013-2422 CVE-2013-2423 CVE-2013-2424 CVE-2013-2426 CVE-2013-2429 CVE-2013-2430 CVE-2013-2431 CVE-2013-2437	Version:	311
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	java-1.7.0-openjdk
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x Packages section java-1.7.0-openjdk-javadoc is earlier than 1:1.7.0.19-2.3.9.1.el5_9 AND java-1.7.0-openjdk-demo is earlier than 1:1.7.0.19-2.3.9.1.el5_9 AND java-1.7.0-openjdk is earlier than 1:1.7.0.19-2.3.9.1.el5_9 AND java-1.7.0-openjdk-src is earlier than 1:1.7.0.19-2.3.9.1.el5_9 AND java-1.7.0-openjdk-devel is earlier than 1:1.7.0.19-2.3.9.1.el5_9

Definition Id: oval:org.mitre.oval:def:20743

Oval ID:	oval:org.mitre.oval:def:20743
Title:	RHSA-2013:0963: java-1.7.0-oracle security update (Critical)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2400.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:0963-01 CVE-2013-1500 CVE-2013-1571 CVE-2013-2400 CVE-2013-2407 CVE-2013-2412 CVE-2013-2437 CVE-2013-2442 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2449 CVE-2013-2450 CVE-2013-2451 CVE-2013-2452 CVE-2013-2453 CVE-2013-2454 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2458 CVE-2013-2459 CVE-2013-2460 CVE-2013-2461 CVE-2013-2462 CVE-2013-2463 CVE-2013-2464 CVE-2013-2465 CVE-2013-2466 CVE-2013-2468 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473 CVE-2013-3744	Version:	535
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	java-1.7.0-oracle
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section java-1.7.0-oracle-javafx is earlier than 1:1.7.0.25-1jpp.1.el6_4 AND java-1.7.0-oracle-src is earlier than 1:1.7.0.25-1jpp.1.el6_4 AND java-1.7.0-oracle-plugin is earlier than 1:1.7.0.25-1jpp.1.el6_4 AND java-1.7.0-oracle-devel is earlier than 1:1.7.0.25-1jpp.1.el6_4 AND java-1.7.0-oracle-jdbc is earlier than 1:1.7.0.25-1jpp.1.el6_4 AND java-1.7.0-oracle is earlier than 1:1.7.0.25-1jpp.1.el6_4

Definition Id: oval:org.mitre.oval:def:20807

Oval ID:	oval:org.mitre.oval:def:20807
Title:	RHSA-2013:1014: java-1.6.0-openjdk security update (Important)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:1014-00 CESA-2013:1014 CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2450 CVE-2013-2452 CVE-2013-2453 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2459 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473	Version:	353
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6 CentOS Linux 5 CentOS Linux 6	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Operation system section Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND CentOS Linux 6.x Packages section java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND Operation system section Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x Packages section java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9

Definition Id: oval:org.mitre.oval:def:21131

Oval ID:	oval:org.mitre.oval:def:21131
Title:	RHSA-2013:1060: java-1.7.0-ibm security update (Critical)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect availability via unknown vectors.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:1060-01 CVE-2013-1500 CVE-2013-1571 CVE-2013-2400 CVE-2013-2407 CVE-2013-2412 CVE-2013-2437 CVE-2013-2442 CVE-2013-2444 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2449 CVE-2013-2450 CVE-2013-2451 CVE-2013-2452 CVE-2013-2453 CVE-2013-2454 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2458 CVE-2013-2459 CVE-2013-2460 CVE-2013-2462 CVE-2013-2463 CVE-2013-2464 CVE-2013-2465 CVE-2013-2466 CVE-2013-2468 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473 CVE-2013-3006 CVE-2013-3007 CVE-2013-3008 CVE-2013-3009 CVE-2013-3010 CVE-2013-3011 CVE-2013-3012 CVE-2013-3744 CVE-2013-4002	Version:	607
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5	Product(s):	java-1.7.0-ibm
Definition Synopsis:
Red Hat Enterprise Linux 5 release section The operating system installed on the system is Red Hat Enterprise Linux 5 Packages match section java-1.7.0-ibm is earlier than 1:1.7.0.5.0-1jpp.2.el5_9 AND java-1.7.0-ibm-demo is earlier than 1:1.7.0.5.0-1jpp.2.el5_9 AND java-1.7.0-ibm-devel is earlier than 1:1.7.0.5.0-1jpp.2.el5_9 AND java-1.7.0-ibm-jdbc is earlier than 1:1.7.0.5.0-1jpp.2.el5_9 AND java-1.7.0-ibm-plugin is earlier than 1:1.7.0.5.0-1jpp.2.el5_9 AND java-1.7.0-ibm-src is earlier than 1:1.7.0.5.0-1jpp.2.el5_9 AND Red Hat Enterprise Linux 6 release section The operating system installed on the system is Red Hat Enterprise Linux 6 Packages match section java-1.7.0-ibm is earlier than 1:1.7.0.5.0-1jpp.2.el6_4 AND java-1.7.0-ibm-demo is earlier than 1:1.7.0.5.0-1jpp.2.el6_4 AND java-1.7.0-ibm-devel is earlier than 1:1.7.0.5.0-1jpp.2.el6_4 AND java-1.7.0-ibm-jdbc is earlier than 1:1.7.0.5.0-1jpp.2.el6_4 AND java-1.7.0-ibm-plugin is earlier than 1:1.7.0.5.0-1jpp.2.el6_4 AND java-1.7.0-ibm-src is earlier than 1:1.7.0.5.0-1jpp.2.el6_4

Definition Id: oval:org.mitre.oval:def:21135

Oval ID:	oval:org.mitre.oval:def:21135
Title:	RHSA-2013:0957: java-1.7.0-openjdk security update (Critical)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:0957-00 CESA-2013:0957 CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2449 CVE-2013-2450 CVE-2013-2452 CVE-2013-2453 CVE-2013-2454 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2458 CVE-2013-2459 CVE-2013-2460 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473	Version:	409
Platform(s):	Red Hat Enterprise Linux 6 CentOS Linux 6	Product(s):	java-1.7.0-openjdk
Definition Synopsis:
Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND CentOS Linux 6.x Packages section java-1.7.0-openjdk-demo is earlier than 1:1.7.0.25-2.3.10.3.el6_4 AND java-1.7.0-openjdk-src is earlier than 1:1.7.0.25-2.3.10.3.el6_4 AND java-1.7.0-openjdk is earlier than 1:1.7.0.25-2.3.10.3.el6_4 AND java-1.7.0-openjdk-javadoc is earlier than 1:1.7.0.25-2.3.10.3.el6_4 AND java-1.7.0-openjdk-devel is earlier than 1:1.7.0.25-2.3.10.3.el6_4

Definition Id: oval:org.mitre.oval:def:21196

Oval ID:	oval:org.mitre.oval:def:21196
Title:	RHSA-2013:1081: java-1.5.0-ibm security update (Important)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect availability via unknown vectors.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:1081-01 CVE-2013-1500 CVE-2013-1571 CVE-2013-2443 CVE-2013-2444 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2450 CVE-2013-2452 CVE-2013-2454 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2459 CVE-2013-2463 CVE-2013-2464 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473 CVE-2013-3009 CVE-2013-3011 CVE-2013-3012 CVE-2013-3743 CVE-2013-4002	Version:	383
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5	Product(s):	java-1.5.0-ibm
Definition Synopsis:
Red Hat Enterprise Linux 5 release section The operating system installed on the system is Red Hat Enterprise Linux 5 Packages match section java-1.5.0-ibm is earlier than 1:1.5.0.16.3-1jpp.1.el5_9 AND java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.16.3-1jpp.1.el5_9 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.16.3-1jpp.1.el5_9 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.16.3-1jpp.1.el5_9 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.16.3-1jpp.1.el5_9 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.16.3-1jpp.1.el5_9 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.16.3-1jpp.1.el5_9 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.16.3-1jpp.1.el5_9 AND Red Hat Enterprise Linux 6 release section The operating system installed on the system is Red Hat Enterprise Linux 6 Packages match section java-1.5.0-ibm is earlier than 1:1.5.0.16.3-1jpp.1.el6_4 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.16.3-1jpp.1.el6_4 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.16.3-1jpp.1.el6_4 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.16.3-1jpp.1.el6_4 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.16.3-1jpp.1.el6_4 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.16.3-1jpp.1.el6_4 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.16.3-1jpp.1.el6_4

Definition Id: oval:org.mitre.oval:def:21219

Oval ID:	oval:org.mitre.oval:def:21219
Title:	RHSA-2013:1059: java-1.6.0-ibm security update (Critical)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect availability via unknown vectors.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:1059-01 CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2437 CVE-2013-2442 CVE-2013-2443 CVE-2013-2444 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2450 CVE-2013-2451 CVE-2013-2452 CVE-2013-2453 CVE-2013-2454 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2459 CVE-2013-2463 CVE-2013-2464 CVE-2013-2465 CVE-2013-2466 CVE-2013-2468 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473 CVE-2013-3009 CVE-2013-3011 CVE-2013-3012 CVE-2013-3743 CVE-2013-4002	Version:	495
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5	Product(s):	java-1.6.0-ibm
Definition Synopsis:
Red Hat Enterprise Linux 5 release section The operating system installed on the system is Red Hat Enterprise Linux 5 Packages match section java-1.6.0-ibm is earlier than 1:1.6.0.14.0-1jpp.1.el5_9 AND java-1.6.0-ibm-accessibility is earlier than 1:1.6.0.14.0-1jpp.1.el5_9 AND java-1.6.0-ibm-demo is earlier than 1:1.6.0.14.0-1jpp.1.el5_9 AND java-1.6.0-ibm-devel is earlier than 1:1.6.0.14.0-1jpp.1.el5_9 AND java-1.6.0-ibm-javacomm is earlier than 1:1.6.0.14.0-1jpp.1.el5_9 AND java-1.6.0-ibm-jdbc is earlier than 1:1.6.0.14.0-1jpp.1.el5_9 AND java-1.6.0-ibm-plugin is earlier than 1:1.6.0.14.0-1jpp.1.el5_9 AND java-1.6.0-ibm-src is earlier than 1:1.6.0.14.0-1jpp.1.el5_9 AND Red Hat Enterprise Linux 6 release section The operating system installed on the system is Red Hat Enterprise Linux 6 Packages match section java-1.6.0-ibm is earlier than 1:1.6.0.14.0-1jpp.1.el6_4 AND java-1.6.0-ibm-demo is earlier than 1:1.6.0.14.0-1jpp.1.el6_4 AND java-1.6.0-ibm-devel is earlier than 1:1.6.0.14.0-1jpp.1.el6_4 AND java-1.6.0-ibm-javacomm is earlier than 1:1.6.0.14.0-1jpp.1.el6_4 AND java-1.6.0-ibm-jdbc is earlier than 1:1.6.0.14.0-1jpp.1.el6_4 AND java-1.6.0-ibm-plugin is earlier than 1:1.6.0.14.0-1jpp.1.el6_4 AND java-1.6.0-ibm-src is earlier than 1:1.6.0.14.0-1jpp.1.el6_4

Definition Id: oval:org.mitre.oval:def:21222

Oval ID:	oval:org.mitre.oval:def:21222
Title:	RHSA-2013:0958: java-1.7.0-openjdk security update (Important)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:0958-00 CESA-2013:0958 CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2449 CVE-2013-2450 CVE-2013-2452 CVE-2013-2453 CVE-2013-2454 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2458 CVE-2013-2459 CVE-2013-2460 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473	Version:	409
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	java-1.7.0-openjdk
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x Packages section java-1.7.0-openjdk-demo is earlier than 1:1.7.0.25-2.3.10.4.el5_9 AND java-1.7.0-openjdk-src is earlier than 1:1.7.0.25-2.3.10.4.el5_9 AND java-1.7.0-openjdk is earlier than 1:1.7.0.25-2.3.10.4.el5_9 AND java-1.7.0-openjdk-javadoc is earlier than 1:1.7.0.25-2.3.10.4.el5_9 AND java-1.7.0-openjdk-devel is earlier than 1:1.7.0.25-2.3.10.4.el5_9

Definition Id: oval:org.mitre.oval:def:21576

Oval ID:	oval:org.mitre.oval:def:21576
Title:	HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect availability via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2013-4002	Version:	9
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP-UX B.11.23 AND HP-UX B.11.31 AND filesets test Jdk70.JDK70-COM version is less than 1.7.0.08.00 AND Jdk70.JDK70-DEMO version is less than 1.7.0.08.00 AND Jdk70.JDK70-IPF32 version is less than 1.7.0.08.00 AND Jdk70.JDK70-IPF64 version is less than 1.7.0.08.00 AND Jre70.JRE70-COM version is less than 1.7.0.08.00 AND Jre70.JRE70-IPF32 version is less than 1.7.0.08.00 AND Jre70.JRE70-IPF32-HS version is less than 1.7.0.08.00 AND Jre70.JRE70-IPF64 version is less than 1.7.0.08.00 AND Jre70.JRE70-IPF64-HS version is less than 1.7.0.08.00

Definition Id: oval:org.mitre.oval:def:22603

Oval ID:	oval:org.mitre.oval:def:22603
Title:	ELSA-2013:0752: java-1.7.0-openjdk security update (Important)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Deployment.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0752-01 CVE-2013-0401 CVE-2013-1488 CVE-2013-1518 CVE-2013-1537 CVE-2013-1557 CVE-2013-1558 CVE-2013-1569 CVE-2013-2383 CVE-2013-2384 CVE-2013-2415 CVE-2013-2417 CVE-2013-2419 CVE-2013-2420 CVE-2013-2421 CVE-2013-2422 CVE-2013-2423 CVE-2013-2424 CVE-2013-2426 CVE-2013-2429 CVE-2013-2430 CVE-2013-2431 CVE-2013-2437	Version:	93
Platform(s):	Oracle Linux 5	Product(s):	java-1.7.0-openjdk
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.7.0-openjdk-javadoc is earlier than 1:1.7.0.19-2.3.9.1.el5_9 AND java-1.7.0-openjdk-demo is earlier than 1:1.7.0.19-2.3.9.1.el5_9 AND java-1.7.0-openjdk is earlier than 1:1.7.0.19-2.3.9.1.el5_9 AND java-1.7.0-openjdk-src is earlier than 1:1.7.0.19-2.3.9.1.el5_9 AND java-1.7.0-openjdk-devel is earlier than 1:1.7.0.19-2.3.9.1.el5_9

Definition Id: oval:org.mitre.oval:def:23377

Oval ID:	oval:org.mitre.oval:def:23377
Title:	ELSA-2013:0958: java-1.7.0-openjdk security update (Important)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0958-00 CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2449 CVE-2013-2450 CVE-2013-2452 CVE-2013-2453 CVE-2013-2454 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2458 CVE-2013-2459 CVE-2013-2460 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473	Version:	121
Platform(s):	Oracle Linux 5	Product(s):	java-1.7.0-openjdk
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.7.0-openjdk-demo is earlier than 1:1.7.0.25-2.3.10.4.el5_9 AND java-1.7.0-openjdk-src is earlier than 1:1.7.0.25-2.3.10.4.el5_9 AND java-1.7.0-openjdk is earlier than 1:1.7.0.25-2.3.10.4.el5_9 AND java-1.7.0-openjdk-javadoc is earlier than 1:1.7.0.25-2.3.10.4.el5_9 AND java-1.7.0-openjdk-devel is earlier than 1:1.7.0.25-2.3.10.4.el5_9

Definition Id: oval:org.mitre.oval:def:23554

Oval ID:	oval:org.mitre.oval:def:23554
Title:	DEPRECATED: ELSA-2013:1014: java-1.6.0-openjdk security update (Important)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:1014-00 CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2450 CVE-2013-2452 CVE-2013-2453 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2459 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473	Version:	106
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
rpm test Oracle Linux 6.x AND rpm test java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 OR rpm test Oracle Linux 5.x AND rpm test java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9

Definition Id: oval:org.mitre.oval:def:23596

Oval ID:	oval:org.mitre.oval:def:23596
Title:	ELSA-2013:1060: java-1.7.0-ibm security update (Critical)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect availability via unknown vectors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:1060-01 CVE-2013-1500 CVE-2013-1571 CVE-2013-2400 CVE-2013-2407 CVE-2013-2412 CVE-2013-2437 CVE-2013-2442 CVE-2013-2444 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2449 CVE-2013-2450 CVE-2013-2451 CVE-2013-2452 CVE-2013-2453 CVE-2013-2454 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2458 CVE-2013-2459 CVE-2013-2460 CVE-2013-2462 CVE-2013-2463 CVE-2013-2464 CVE-2013-2465 CVE-2013-2466 CVE-2013-2468 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473 CVE-2013-3006 CVE-2013-3007 CVE-2013-3008 CVE-2013-3009 CVE-2013-3010 CVE-2013-3011 CVE-2013-3012 CVE-2013-3744 CVE-2013-4002	Version:	177
Platform(s):	Oracle Linux 6	Product(s):	java-1.7.0-ibm
Definition Synopsis:
Oracle Linux 6.x rpm test java-1.7.0-ibm-devel is earlier than 1:1.7.0.5.0-1jpp.2.el6_4 AND java-1.7.0-ibm is earlier than 1:1.7.0.5.0-1jpp.2.el6_4 AND java-1.7.0-ibm-demo is earlier than 1:1.7.0.5.0-1jpp.2.el6_4 AND java-1.7.0-ibm-plugin is earlier than 1:1.7.0.5.0-1jpp.2.el6_4 AND java-1.7.0-ibm-jdbc is earlier than 1:1.7.0.5.0-1jpp.2.el6_4 AND java-1.7.0-ibm-src is earlier than 1:1.7.0.5.0-1jpp.2.el6_4

Definition Id: oval:org.mitre.oval:def:23756

Oval ID:	oval:org.mitre.oval:def:23756
Title:	ELSA-2013:0963: java-1.7.0-oracle security update (Critical)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2400.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0963-01 CVE-2013-1500 CVE-2013-1571 CVE-2013-2400 CVE-2013-2407 CVE-2013-2412 CVE-2013-2437 CVE-2013-2442 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2449 CVE-2013-2450 CVE-2013-2451 CVE-2013-2452 CVE-2013-2453 CVE-2013-2454 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2458 CVE-2013-2459 CVE-2013-2460 CVE-2013-2461 CVE-2013-2462 CVE-2013-2463 CVE-2013-2464 CVE-2013-2465 CVE-2013-2466 CVE-2013-2468 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473 CVE-2013-3744	Version:	157
Platform(s):	Oracle Linux 6	Product(s):	java-1.7.0-oracle
Definition Synopsis:
Oracle Linux 6.x rpm test java-1.7.0-oracle-javafx is earlier than 1:1.7.0.25-1jpp.1.el6_4 AND java-1.7.0-oracle-src is earlier than 1:1.7.0.25-1jpp.1.el6_4 AND java-1.7.0-oracle-plugin is earlier than 1:1.7.0.25-1jpp.1.el6_4 AND java-1.7.0-oracle-devel is earlier than 1:1.7.0.25-1jpp.1.el6_4 AND java-1.7.0-oracle-jdbc is earlier than 1:1.7.0.25-1jpp.1.el6_4 AND java-1.7.0-oracle is earlier than 1:1.7.0.25-1jpp.1.el6_4

Definition Id: oval:org.mitre.oval:def:23887

Oval ID:	oval:org.mitre.oval:def:23887
Title:	ELSA-2013:0957: java-1.7.0-openjdk security update (Critical)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:0957-00 CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2449 CVE-2013-2450 CVE-2013-2452 CVE-2013-2453 CVE-2013-2454 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2458 CVE-2013-2459 CVE-2013-2460 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473	Version:	121
Platform(s):	Oracle Linux 6	Product(s):	java-1.7.0-openjdk
Definition Synopsis:
Oracle Linux 6.x rpm test java-1.7.0-openjdk-demo is earlier than 1:1.7.0.25-2.3.10.3.el6_4 AND java-1.7.0-openjdk-src is earlier than 1:1.7.0.25-2.3.10.3.el6_4 AND java-1.7.0-openjdk is earlier than 1:1.7.0.25-2.3.10.3.el6_4 AND java-1.7.0-openjdk-javadoc is earlier than 1:1.7.0.25-2.3.10.3.el6_4 AND java-1.7.0-openjdk-devel is earlier than 1:1.7.0.25-2.3.10.3.el6_4

Definition Id: oval:org.mitre.oval:def:24028

Oval ID:	oval:org.mitre.oval:def:24028
Title:	ELSA-2013:1081: java-1.5.0-ibm security update (Important)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect availability via unknown vectors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:1081-01 CVE-2013-1500 CVE-2013-1571 CVE-2013-2443 CVE-2013-2444 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2450 CVE-2013-2452 CVE-2013-2454 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2459 CVE-2013-2463 CVE-2013-2464 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473 CVE-2013-3009 CVE-2013-3011 CVE-2013-3012 CVE-2013-3743 CVE-2013-4002	Version:	113
Platform(s):	Oracle Linux 6	Product(s):	java-1.5.0-ibm
Definition Synopsis:
Oracle Linux 6.x rpm test java-1.5.0-ibm-plugin is earlier than 1:1.5.0.16.3-1jpp.1.el6_4 AND java-1.5.0-ibm is earlier than 1:1.5.0.16.3-1jpp.1.el6_4 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.16.3-1jpp.1.el6_4 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.16.3-1jpp.1.el6_4 AND java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.16.3-1jpp.1.el6_4 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.16.3-1jpp.1.el6_4 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.16.3-1jpp.1.el6_4

Definition Id: oval:org.mitre.oval:def:24043

Oval ID:	oval:org.mitre.oval:def:24043
Title:	ELSA-2013:1014: java-1.6.0-openjdk security update (Important)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ByteBandedRaster size checks" in 2D.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:1014-00 CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2450 CVE-2013-2452 CVE-2013-2453 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2459 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473	Version:	105
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
rpm test Oracle Linux 6.x AND rpm test java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.62.1.11.11.90.el6_4 OR rpm test Oracle Linux 5.x AND rpm test java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.41.1.11.11.90.el5_9

Definition Id: oval:org.mitre.oval:def:24095

Oval ID:	oval:org.mitre.oval:def:24095
Title:	ELSA-2013:1059: java-1.6.0-ibm security update (Critical)
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect availability via unknown vectors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:1059-01 CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2437 CVE-2013-2442 CVE-2013-2443 CVE-2013-2444 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2450 CVE-2013-2451 CVE-2013-2452 CVE-2013-2453 CVE-2013-2454 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2459 CVE-2013-2463 CVE-2013-2464 CVE-2013-2465 CVE-2013-2466 CVE-2013-2468 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473 CVE-2013-3009 CVE-2013-3011 CVE-2013-3012 CVE-2013-3743 CVE-2013-4002	Version:	145
Platform(s):	Oracle Linux 6	Product(s):	java-1.6.0-ibm
Definition Synopsis:
Oracle Linux 6.x rpm test java-1.6.0-ibm-jdbc is earlier than 1:1.6.0.14.0-1jpp.1.el6_4 AND java-1.6.0-ibm-demo is earlier than 1:1.6.0.14.0-1jpp.1.el6_4 AND java-1.6.0-ibm is earlier than 1:1.6.0.14.0-1jpp.1.el6_4 AND java-1.6.0-ibm-src is earlier than 1:1.6.0.14.0-1jpp.1.el6_4 AND java-1.6.0-ibm-devel is earlier than 1:1.6.0.14.0-1jpp.1.el6_4 AND java-1.6.0-ibm-javacomm is earlier than 1:1.6.0.14.0-1jpp.1.el6_4 AND java-1.6.0-ibm-plugin is earlier than 1:1.6.0.14.0-1jpp.1.el6_4

Definition Id: oval:org.mitre.oval:def:25263

Oval ID:	oval:org.mitre.oval:def:25263
Title:	SUSE-SU-2013:1263-1 -- Security update for java-1_5_0-ibm
Description:	IBM Java 1.5.0 has been updated to SR16-FP3 to fix bugs and security issues. Please see also http://www.ibm.com/developerworks/java/jdk/alerts/ <http://www.ibm.com/developerworks/java/jdk/alerts/> Also the following bug has been fixed: * add Europe/Busingen to tzmappings (bnc#817062) * mark files in jre/bin and bin/ as executable (bnc#823034)
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:1263-1 CVE-2013-3009 CVE-2013-3011 CVE-2013-3012 CVE-2013-4002 CVE-2013-2469 CVE-2013-2465 CVE-2013-2464 CVE-2013-2463 CVE-2013-2473 CVE-2013-2472 CVE-2013-2471 CVE-2013-2470 CVE-2013-2459 CVE-2013-3743 CVE-2013-2448 CVE-2013-2454 CVE-2013-2456 CVE-2013-2457 CVE-2013-2455 CVE-2013-2443 CVE-2013-2447 CVE-2013-2444 CVE-2013-2452 CVE-2013-2446 CVE-2013-2450 CVE-2013-1571 CVE-2013-1500	Version:	3
Platform(s):	SUSE Linux Enterprise Server 10 SUSE Linux Enterprise Desktop 10	Product(s):	java-1_5_0-ibm
Definition Synopsis:
SUSE Linux Enterprise Server 10 and SUSE Linux Enterprise Desktop 10 release section Operation system section SUSE Linux Enterprise Server 10 is installed AND SUSE Linux Enterprise Desktop 10 is installed Packages match section java-1_5_0-ibm RPM is earlier than 0:1.5.0_sr16.3-0.5.1 AND java-1_5_0-ibm-devel RPM is earlier than 0:1.5.0_sr16.3-0.5.1 AND java-1_5_0-ibm-fonts RPM is earlier than 0:1.5.0_sr16.3-0.5.1 AND java-1_5_0-ibm-32bit RPM is earlier than 0:1.5.0_sr16.3-0.5.1 AND java-1_5_0-ibm-devel-32bit RPM is earlier than 0:1.5.0_sr16.3-0.5.1 AND java-1_5_0-ibm-jdbc RPM is earlier than 0:1.5.0_sr16.3-0.5.1 AND java-1_5_0-ibm-plugin RPM is earlier than 0:1.5.0_sr16.3-0.5.1 AND java-1_5_0-ibm-alsa-32bit RPM is earlier than 0:1.5.0_sr16.3-0.5.1 AND java-1_5_0-ibm-alsa RPM is earlier than 0:1.5.0_sr16.3-0.5.1 AND SUSE Linux Enterprise Desktop 10 release section SUSE Linux Enterprise Desktop 10 is installed Packages match section java-1_5_0-ibm-demo RPM is earlier than 0:1.5.0_sr16.3-0.5.1 AND java-1_5_0-ibm-src RPM is earlier than 0:1.5.0_sr16.3-0.5.1

Definition Id: oval:org.mitre.oval:def:25636

Oval ID:	oval:org.mitre.oval:def:25636
Title:	SUSE-SU-2013:1255-3 -- Security update for IBM Java 1.6.0
Description:	IBM Java 1.6.0 was updated to SR14 to fix bugs and security issues. Please see also http://www.ibm.com/developerworks/java/jdk/alerts/ <http://www.ibm.com/developerworks/java/jdk/alerts/> Also the following bugs have been fixed: * add Europe/Busingen to tzmappings (bnc#817062) * mark files in jre/bin and bin/ as executable (bnc#823034)
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:1255-3 CVE-2013-3009 CVE-2013-3011 CVE-2013-3012 CVE-2013-4002 CVE-2013-2468 CVE-2013-2469 CVE-2013-2465 CVE-2013-2464 CVE-2013-2463 CVE-2013-2473 CVE-2013-2472 CVE-2013-2471 CVE-2013-2470 CVE-2013-2459 CVE-2013-2466 CVE-2013-3743 CVE-2013-2448 CVE-2013-2442 CVE-2013-2407 CVE-2013-2454 CVE-2013-2456 CVE-2013-2453 CVE-2013-2457 CVE-2013-2455 CVE-2013-2412 CVE-2013-2443 CVE-2013-2447 CVE-2013-2437 CVE-2013-2444 CVE-2013-2452 CVE-2013-2446 CVE-2013-2450 CVE-2013-1571 CVE-2013-2451 CVE-2013-1500	Version:	3
Platform(s):	SUSE Linux Enterprise Server 11	Product(s):	IBM Java 1.6.0
Definition Synopsis:
SUSE Linux Enterprise Server 11.x is installed Packages match section java-1_6_0-ibm RPM is earlier than 0:1.6.0_sr14.0-0.3.1 AND java-1_6_0-ibm-fonts RPM is earlier than 0:1.6.0_sr14.0-0.3.1 AND java-1_6_0-ibm-jdbc RPM is earlier than 0:1.6.0_sr14.0-0.3.1 AND java-1_6_0-ibm-plugin RPM is earlier than 0:1.6.0_sr14.0-0.3.1 AND java-1_6_0-ibm-alsa RPM is earlier than 0:1.6.0_sr14.0-0.3.1

Definition Id: oval:org.mitre.oval:def:25638

Oval ID:	oval:org.mitre.oval:def:25638
Title:	SUSE-SU-2013:1305-1 -- Security update for IBM Java 1.6.0
Description:	IBM Java 1.6.0 has been updated to SR14 to fix bugs and security issues. Please see also http://www.ibm.com/developerworks/java/jdk/alerts/ <http://www.ibm.com/developerworks/java/jdk/alerts/> Also the following bugs have been fixed: * add Europe/Busingen to tzmappings (bnc#817062) * mark files in jre/bin and bin/ as executable (bnc#823034) * check if installed qa_filelist is not empty (bnc#831936)
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:1305-1 CVE-2013-3009 CVE-2013-3011 CVE-2013-3012 CVE-2013-4002 CVE-2013-2468 CVE-2013-2469 CVE-2013-2465 CVE-2013-2464 CVE-2013-2463 CVE-2013-2473 CVE-2013-2472 CVE-2013-2471 CVE-2013-2470 CVE-2013-2459 CVE-2013-2466 CVE-2013-3743 CVE-2013-2448 CVE-2013-2442 CVE-2013-2407 CVE-2013-2454 CVE-2013-2456 CVE-2013-2453 CVE-2013-2457 CVE-2013-2455 CVE-2013-2412 CVE-2013-2443 CVE-2013-2447 CVE-2013-2437 CVE-2013-2444 CVE-2013-2452 CVE-2013-2446 CVE-2013-2450 CVE-2013-1571 CVE-2013-2451 CVE-2013-1500	Version:	3
Platform(s):	SUSE Linux Enterprise Server 10	Product(s):	IBM Java 1.6.0
Definition Synopsis:
SUSE Linux Enterprise Server 10 is installed Packages match section java-1_6_0-ibm RPM is earlier than 0:1.6.0_sr14.0-0.6.6.1 AND java-1_6_0-ibm-devel RPM is earlier than 0:1.6.0_sr14.0-0.6.6.1 AND java-1_6_0-ibm-fonts RPM is earlier than 0:1.6.0_sr14.0-0.6.6.1 AND java-1_6_0-ibm-jdbc RPM is earlier than 0:1.6.0_sr14.0-0.6.6.1 AND java-1_6_0-ibm-32bit RPM is earlier than 0:1.6.0_sr14.0-0.6.6.1 AND java-1_6_0-ibm-devel-32bit RPM is earlier than 0:1.6.0_sr14.0-0.6.6.1 AND java-1_6_0-ibm-plugin RPM is earlier than 0:1.6.0_sr14.0-0.6.6.1 AND java-1_6_0-ibm-alsa-32bit RPM is earlier than 0:1.6.0_sr14.0-0.6.6.1 AND java-1_6_0-ibm-plugin-32bit RPM is earlier than 0:1.6.0_sr14.0-0.6.6.1 AND java-1_6_0-ibm-alsa RPM is earlier than 0:1.6.0_sr14.0-0.6.6.1

Definition Id: oval:org.mitre.oval:def:25723

Oval ID:	oval:org.mitre.oval:def:25723
Title:	SUSE-SU-2013:1255-2 -- Security update for java-1_6_0-ibm
Description:	IBM Java 1.6.0 has been updated to SR14 to fix bugs and security issues. Please see also http://www.ibm.com/developerworks/java/jdk/alerts/ <http://www.ibm.com/developerworks/java/jdk/alerts/> Also the following bugs have been fixed: * add Europe/Busingen to tzmappings (bnc#817062) * mark files in jre/bin and bin/ as executable (bnc#823034)
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:1255-2 CVE-2013-3009 CVE-2013-3011 CVE-2013-3012 CVE-2013-4002 CVE-2013-2468 CVE-2013-2469 CVE-2013-2465 CVE-2013-2464 CVE-2013-2463 CVE-2013-2473 CVE-2013-2472 CVE-2013-2471 CVE-2013-2470 CVE-2013-2459 CVE-2013-2466 CVE-2013-3743 CVE-2013-2448 CVE-2013-2442 CVE-2013-2407 CVE-2013-2454 CVE-2013-2456 CVE-2013-2453 CVE-2013-2457 CVE-2013-2455 CVE-2013-2412 CVE-2013-2443 CVE-2013-2447 CVE-2013-2437 CVE-2013-2444 CVE-2013-2452 CVE-2013-2446 CVE-2013-2450 CVE-2013-1571 CVE-2013-2451 CVE-2013-1500	Version:	3
Platform(s):	SUSE Linux Enterprise Server 11	Product(s):	java-1_6_0-ibm
Definition Synopsis:
SUSE Linux Enterprise Server 11.x is installed Packages match section java-1_6_0-ibm RPM is earlier than 0:1.6.0_sr14.0-0.3.1 AND java-1_6_0-ibm-fonts RPM is earlier than 0:1.6.0_sr14.0-0.3.1 AND java-1_6_0-ibm-jdbc RPM is earlier than 0:1.6.0_sr14.0-0.3.1 AND java-1_6_0-ibm-plugin RPM is earlier than 0:1.6.0_sr14.0-0.3.1 AND java-1_6_0-ibm-alsa RPM is earlier than 0:1.6.0_sr14.0-0.3.1

Definition Id: oval:org.mitre.oval:def:25758

Oval ID:	oval:org.mitre.oval:def:25758
Title:	SUSE-SU-2013:1257-1 -- Security update for java-1_7_0-ibm
Description:	IBM Java 1.7.0 has been updated to SR5 to fix bugs and security issues.
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:1257-1 CVE-2013-3006 CVE-2013-3007 CVE-2013-3008 CVE-2013-3009 CVE-2013-3010 CVE-2013-3011 CVE-2013-3012 CVE-2013-4002 CVE-2013-2468 CVE-2013-2469 CVE-2013-2465 CVE-2013-2464 CVE-2013-2463 CVE-2013-2473 CVE-2013-2472 CVE-2013-2471 CVE-2013-2470 CVE-2013-2459 CVE-2013-2466 CVE-2013-2462 CVE-2013-2460 CVE-2013-3743 CVE-2013-2448 CVE-2013-2442 CVE-2013-2407 CVE-2013-2454 CVE-2013-2458 CVE-2013-3744 CVE-2013-2400 CVE-2013-2456 CVE-2013-2453 CVE-2013-2457 CVE-2013-2455 CVE-2013-2412 CVE-2013-2443 CVE-2013-2447 CVE-2013-2437 CVE-2013-2444 CVE-2013-2452 CVE-2013-2446 CVE-2013-2450 CVE-2013-1571 CVE-2013-2449 CVE-2013-2451 CVE-2013-1500	Version:	3
Platform(s):	SUSE Linux Enterprise Server 11	Product(s):	java-1_7_0-ibm
Definition Synopsis:
SUSE Linux Enterprise Server 11.x is installed Packages match section java-1_7_0-ibm RPM is earlier than 0:1.7.0_sr5.0-0.5.1 AND java-1_7_0-ibm-jdbc RPM is earlier than 0:1.7.0_sr5.0-0.5.1 AND java-1_7_0-ibm-alsa RPM is earlier than 0:1.7.0_sr5.0-0.5.1 AND java-1_7_0-ibm-plugin RPM is earlier than 0:1.7.0_sr5.0-0.5.1

Definition Id: oval:org.mitre.oval:def:25772

Oval ID:	oval:org.mitre.oval:def:25772
Title:	SUSE-SU-2013:1263-2 -- Security update for java-1_5_0-ibm
Description:	IBM Java 1.5.0 was updated to SR16-FP3 to fix bugs and security issues.
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:1263-2 CVE-2013-3009 CVE-2013-3011 CVE-2013-3012 CVE-2013-4002 CVE-2013-2469 CVE-2013-2465 CVE-2013-2464 CVE-2013-2463 CVE-2013-2473 CVE-2013-2472 CVE-2013-2471 CVE-2013-2470 CVE-2013-2459 CVE-2013-3743 CVE-2013-2448 CVE-2013-2454 CVE-2013-2456 CVE-2013-2457 CVE-2013-2455 CVE-2013-2443 CVE-2013-2447 CVE-2013-2444 CVE-2013-2452 CVE-2013-2446 CVE-2013-2450 CVE-2013-1571 CVE-2013-1500	Version:	3
Platform(s):	SUSE Linux Enterprise Server 10	Product(s):	java-1_5_0-ibm
Definition Synopsis:
SUSE Linux Enterprise Server 10 is installed Packages match section java-1_5_0-ibm RPM is earlier than 0:1.5.0_sr16.3-0.5.1 AND java-1_5_0-ibm-devel RPM is earlier than 0:1.5.0_sr16.3-0.5.1 AND java-1_5_0-ibm-fonts RPM is earlier than 0:1.5.0_sr16.3-0.5.1 AND java-1_5_0-ibm-32bit RPM is earlier than 0:1.5.0_sr16.3-0.5.1 AND java-1_5_0-ibm-devel-32bit RPM is earlier than 0:1.5.0_sr16.3-0.5.1 AND java-1_5_0-ibm-alsa-32bit RPM is earlier than 0:1.5.0_sr16.3-0.5.1 AND java-1_5_0-ibm-alsa RPM is earlier than 0:1.5.0_sr16.3-0.5.1 AND java-1_5_0-ibm-jdbc RPM is earlier than 0:1.5.0_sr16.3-0.5.1 AND java-1_5_0-ibm-plugin RPM is earlier than 0:1.5.0_sr16.3-0.5.1

Definition Id: oval:org.mitre.oval:def:25783

Oval ID:	oval:org.mitre.oval:def:25783
Title:	SUSE-SU-2013:1293-2 -- Security update for IBM Java 1.4.2
Description:	IBM Java 1.4.2 has been updated to SR13-FP18 to fix bugs and security issues: CVE-2013-3009, CVE-2013-3011, CVE-2013-3012, CVE-2013-2469, CVE-2013-2465, CVE-2013-2464, CVE-2013-2463, CVE-2013-2473, CVE-2013-2472, CVE-2013-2471, CVE-2013-2470, CVE-2013-2459, CVE-2013-2456, CVE-2013-2447, CVE-2013-2452, CVE-2013-2446, CVE-2013-2450, CVE-2013-1500 Please see also http://www.ibm.com/developerworks/java/jdk/alerts/ <http://www.ibm.com/developerworks/java/jdk/alerts/> Also following bug has been fixed: * mark files in jre/bin and bin/ as executable (bnc#823034)
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:1293-2 CVE-2013-3009 CVE-2013-3011 CVE-2013-3012 CVE-2013-2469 CVE-2013-2465 CVE-2013-2464 CVE-2013-2463 CVE-2013-2473 CVE-2013-2472 CVE-2013-2471 CVE-2013-2470 CVE-2013-2459 CVE-2013-2456 CVE-2013-2447 CVE-2013-2452 CVE-2013-2446 CVE-2013-2450 CVE-2013-1500	Version:	3
Platform(s):	SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 10	Product(s):	IBM Java 1.4.2
Definition Synopsis:
SUSE Linux Enterprise Server 11 release section SUSE Linux Enterprise Server 11.x is installed Packages match section java-1_4_2-ibm RPM is earlier than 0:1.4.2_sr13.18-0.4.1 AND java-1_4_2-ibm-jdbc RPM is earlier than 0:1.4.2_sr13.18-0.4.1 AND java-1_4_2-ibm-plugin RPM is earlier than 0:1.4.2_sr13.18-0.4.1 AND SUSE Linux Enterprise Server 10 release section SUSE Linux Enterprise Server 10 is installed Packages match section java-1_4_2-ibm RPM is earlier than 0:1.4.2_sr13.18-0.7.1 AND java-1_4_2-ibm-devel RPM is earlier than 0:1.4.2_sr13.18-0.7.1 AND java-1_4_2-ibm-jdbc RPM is earlier than 0:1.4.2_sr13.18-0.7.1 AND java-1_4_2-ibm-plugin RPM is earlier than 0:1.4.2_sr13.18-0.7.1

Definition Id: oval:org.mitre.oval:def:25834

Oval ID:	oval:org.mitre.oval:def:25834
Title:	SUSE-SU-2013:1264-1 -- Security update for java-1_4_2-ibm
Description:	IBM Java 1.4.2 has been updated to SR13-FP18 to fix bugs and security issues. Please see also http://www.ibm.com/developerworks/java/jdk/alerts/ <http://www.ibm.com/developerworks/java/jdk/alerts/> Also the following bug has been fixed: * mark files in jre/bin and bin/ as executable (bnc#823034)
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:1264-1 CVE-2013-3009 CVE-2013-3011 CVE-2013-3012 CVE-2013-2469 CVE-2013-2465 CVE-2013-2464 CVE-2013-2463 CVE-2013-2473 CVE-2013-2472 CVE-2013-2471 CVE-2013-2470 CVE-2013-2459 CVE-2013-2456 CVE-2013-2447 CVE-2013-2452 CVE-2013-2446 CVE-2013-2450 CVE-2013-1500	Version:	3
Platform(s):	SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 10	Product(s):	java-1_4_2-ibm
Definition Synopsis:
SUSE Linux Enterprise Server 11 release section SUSE Linux Enterprise Server 11.x is installed Packages match section java-1_4_2-ibm RPM is earlier than 0:1.4.2_sr13.18-0.4.1 AND java-1_4_2-ibm-jdbc RPM is earlier than 0:1.4.2_sr13.18-0.4.1 AND java-1_4_2-ibm-plugin RPM is earlier than 0:1.4.2_sr13.18-0.4.1 AND SUSE Linux Enterprise Server 10 release section SUSE Linux Enterprise Server 10 is installed Packages match section java-1_4_2-ibm RPM is earlier than 0:1.4.2_sr13.18-0.7.1 AND java-1_4_2-ibm-devel RPM is earlier than 0:1.4.2_sr13.18-0.7.1 AND java-1_4_2-ibm-jdbc RPM is earlier than 0:1.4.2_sr13.18-0.7.1 AND java-1_4_2-ibm-plugin RPM is earlier than 0:1.4.2_sr13.18-0.7.1

Definition Id: oval:org.mitre.oval:def:25853

Oval ID:	oval:org.mitre.oval:def:25853
Title:	SUSE-SU-2013:1256-1 -- Security update for java-1_7_0-ibm
Description:	IBM Java 1.7.0 has been updated to SR5 to fix bugs and security issues.
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:1256-1 CVE-2013-3006 CVE-2013-3007 CVE-2013-3008 CVE-2013-3009 CVE-2013-3010 CVE-2013-3011 CVE-2013-3012 CVE-2013-4002 CVE-2013-2468 CVE-2013-2469 CVE-2013-2465 CVE-2013-2464 CVE-2013-2463 CVE-2013-2473 CVE-2013-2472 CVE-2013-2471 CVE-2013-2470 CVE-2013-2459 CVE-2013-2466 CVE-2013-2462 CVE-2013-2460 CVE-2013-3743 CVE-2013-2448 CVE-2013-2442 CVE-2013-2407 CVE-2013-2454 CVE-2013-2458 CVE-2013-3744 CVE-2013-2400 CVE-2013-2456 CVE-2013-2453 CVE-2013-2457	Version:	3
Platform(s):	SUSE Linux Enterprise Server 11	Product(s):	java-1_7_0-ibm
Definition Synopsis:
SUSE Linux Enterprise Server 11.x is installed Packages match section java-1_7_0-ibm RPM is earlier than 0:1.7.0_sr5.0-0.5.1 AND java-1_7_0-ibm-jdbc RPM is earlier than 0:1.7.0_sr5.0-0.5.1 AND java-1_7_0-ibm-alsa RPM is earlier than 0:1.7.0_sr5.0-0.5.1 AND java-1_7_0-ibm-plugin RPM is earlier than 0:1.7.0_sr5.0-0.5.1

Definition Id: oval:org.mitre.oval:def:25907

Oval ID:	oval:org.mitre.oval:def:25907
Title:	SUSE-SU-2013:1255-1 -- Security update for java-1_6_0-ibm
Description:	IBM Java 1.6.0 has been updated to SR14 to fix bugs and security issues.
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:1255-1 CVE-2013-3009 CVE-2013-3011 CVE-2013-3012 CVE-2013-4002 CVE-2013-2468 CVE-2013-2469 CVE-2013-2465 CVE-2013-2464 CVE-2013-2463 CVE-2013-2473 CVE-2013-2472 CVE-2013-2471 CVE-2013-2470 CVE-2013-2459 CVE-2013-2466 CVE-2013-3743 CVE-2013-2448 CVE-2013-2442 CVE-2013-2407 CVE-2013-2454 CVE-2013-2456 CVE-2013-2453 CVE-2013-2457 CVE-2013-2455 CVE-2013-2412 CVE-2013-2443 CVE-2013-2447 CVE-2013-2437 CVE-2013-2444 CVE-2013-2452 CVE-2013-2446 CVE-2013-2450 CVE-2013-1571 CVE-2013-2451 CVE-2013-1500	Version:	3
Platform(s):	SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 10	Product(s):	java-1_6_0-ibm
Definition Synopsis:
SUSE Linux Enterprise Server 11 release section SUSE Linux Enterprise Server 11.x is installed Packages match section java-1_6_0-ibm RPM is earlier than 0:1.6.0_sr14.0-0.3.1 AND java-1_6_0-ibm-fonts RPM is earlier than 0:1.6.0_sr14.0-0.3.1 AND java-1_6_0-ibm-jdbc RPM is earlier than 0:1.6.0_sr14.0-0.3.1 AND java-1_6_0-ibm-plugin RPM is earlier than 0:1.6.0_sr14.0-0.3.1 AND java-1_6_0-ibm-alsa RPM is earlier than 0:1.6.0_sr14.0-0.3.1 AND SUSE Linux Enterprise Server 10 release section SUSE Linux Enterprise Server 10 is installed Packages match section java-1_6_0-ibm RPM is earlier than 0:1.6.0_sr14.0-0.11.1 AND java-1_6_0-ibm-devel RPM is earlier than 0:1.6.0_sr14.0-0.11.1 AND java-1_6_0-ibm-fonts RPM is earlier than 0:1.6.0_sr14.0-0.11.1 AND java-1_6_0-ibm-jdbc RPM is earlier than 0:1.6.0_sr14.0-0.11.1 AND java-1_6_0-ibm-plugin RPM is earlier than 0:1.6.0_sr14.0-0.11.1 AND java-1_6_0-ibm-32bit RPM is earlier than 0:1.6.0_sr14.0-0.11.1 AND java-1_6_0-ibm-devel-32bit RPM is earlier than 0:1.6.0_sr14.0-0.11.1 AND java-1_6_0-ibm-alsa-32bit RPM is earlier than 0:1.6.0_sr14.0-0.11.1 AND java-1_6_0-ibm-plugin-32bit RPM is earlier than 0:1.6.0_sr14.0-0.11.1 AND java-1_6_0-ibm-alsa RPM is earlier than 0:1.6.0_sr14.0-0.11.1

Definition Id: oval:org.mitre.oval:def:26596

Oval ID:	oval:org.mitre.oval:def:26596
Title:	ELSA-2014-1319 -- xerces-j2 security update (Moderate)
Description:	Apache Xerces for Java (Xerces-J) is a high performance, standards compliant, validating XML parser written in Java. The xerces-j2 packages provide Xerces-J version 2. A resource consumption issue was found in the way Xerces-J handled XML declarations. A remote attacker could use an XML document with a specially crafted declaration using a long pseudo-attribute name that, when parsed by an application using Xerces-J, would cause that application to use an excessive amount of CPU. (CVE-2013-4002) All xerces-j2 users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. Applications using the Xerces-J must be restarted for this update to take effect.
Family:	unix	Class:	patch
Reference(s):	ELSA-2014-1319 CVE-2013-4002	Version:	3
Platform(s):	Oracle Linux 7	Product(s):	xerces-j2
Definition Synopsis:
Oracle Linux 7.x Packages match section xerces-j2 RPM is earlier than 0:2.11.0-17.el7_0 AND xerces-j2-demo RPM is earlier than 0:2.11.0-17.el7_0 AND xerces-j2-javadoc RPM is earlier than 0:2.11.0-17.el7_0

Definition Id: oval:org.mitre.oval:def:27075

Oval ID:	oval:org.mitre.oval:def:27075
Title:	DEPRECATED: ELSA-2013-1014 -- java-1.6.0-openjdk security update (important)
Description:	[1:1.6.0.0-1.62.1.11.11.90] - updated to icedtea6-1.11.11.90.tar.gz - removed upstreamed patch9 jaxp-backport-factoryfinder.patch - removed upstreamed patch10 fixToFontSecurityFix.patch. - modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch - Resolves: rhbz#973129
Family:	unix	Class:	patch
Reference(s):	ELSA-2013-1014 CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2450 CVE-2013-2452 CVE-2013-2453 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2459 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473	Version:	4
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Oracle Linux 5 release section Oracle Linux 5.x Packages match section java-1.6.0-openjdk is earlier than 0:1.6.0.0-1.41.1.11.11.90.0.1.el5_9 AND java-1.6.0-openjdk-demo is earlier than 0:1.6.0.0-1.41.1.11.11.90.0.1.el5_9 AND java-1.6.0-openjdk-devel is earlier than 0:1.6.0.0-1.41.1.11.11.90.0.1.el5_9 AND java-1.6.0-openjdk-javadoc is earlier than 0:1.6.0.0-1.41.1.11.11.90.0.1.el5_9 AND java-1.6.0-openjdk-src is earlier than 0:1.6.0.0-1.41.1.11.11.90.0.1.el5_9 AND Oracle Linux 6 release section Oracle Linux 6.x Packages match section java-1.6.0-openjdk is earlier than 0:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk-demo is earlier than 0:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk-devel is earlier than 0:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk-javadoc is earlier than 0:1.6.0.0-1.62.1.11.11.90.el6_4 AND java-1.6.0-openjdk-src is earlier than 0:1.6.0.0-1.62.1.11.11.90.el6_4

Definition Id: oval:org.mitre.oval:def:27229

Oval ID:	oval:org.mitre.oval:def:27229
Title:	RHSA-2014:1319: xerces-j2 security update (Moderate)
Description:	Apache Xerces for Java (Xerces-J) is a high performance, standards compliant, validating XML parser written in Java. The xerces-j2 packages provide Xerces-J version 2. A resource consumption issue was found in the way Xerces-J handled XML declarations. A remote attacker could use an XML document with a specially crafted declaration using a long pseudo-attribute name that, when parsed by an application using Xerces-J, would cause that application to use an excessive amount of CPU. (CVE-2013-4002) All xerces-j2 users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. Applications using the Xerces-J must be restarted for this update to take effect.
Family:	unix	Class:	patch
Reference(s):	RHSA-2014:1319-00 CESA-2014:1319 CVE-2013-4002	Version:	3
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 7 CentOS Linux 6 CentOS Linux 7	Product(s):	xerces-j2
Definition Synopsis:
Operation system section Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND The operating system installed on the system is CentOS Linux 6.x Packages section xerces-j2 is earlier than 0:2.7.1-12.7.el6_5 AND xerces-j2-demo is earlier than 0:2.7.1-12.7.el6_5 AND xerces-j2-javadoc-apis is earlier than 0:2.7.1-12.7.el6_5 AND xerces-j2-javadoc-impl is earlier than 0:2.7.1-12.7.el6_5 AND xerces-j2-javadoc-other is earlier than 0:2.7.1-12.7.el6_5 AND xerces-j2-javadoc-xni is earlier than 0:2.7.1-12.7.el6_5 AND xerces-j2-scripts is earlier than 0:2.7.1-12.7.el6_5 AND Operation system section Redhat 7 or Centos 7 release The operating system installed on the system is Red Hat Enterprise Linux 7 AND The operating system installed on the system is CentOS Linux 7.x Packages section xerces-j2 is earlier than 0:2.11.0-17.el7_0 AND xerces-j2-demo is earlier than 0:2.11.0-17.el7_0 AND xerces-j2-javadoc is earlier than 0:2.11.0-17.el7_0

Definition Id: oval:org.mitre.oval:def:27291

Oval ID:	oval:org.mitre.oval:def:27291
Title:	DEPRECATED: ELSA-2013-0957 -- java-1.7.0-openjdk security update (critical)
Description:	[1.7.0.25-2.3.10.3.0.1.el6_4] - Update DISTRO_NAME in specfile [1.7.0.25-2.3.10.3.el6] - removed upstreamed patch1000 MBeanFix.patch - updated to newer IcedTea7-forest 2.3.10 with 8010118 fix - Resolves: rhbz#973119 [1.7.0.25-2.3.10.2.el6] - added patch1000 MBeanFix.patch to fix regressions caused by security patches - Resolves: rhbz#973119 [1.7.0.25-2.3.10.1.el6] - build bumped to 25 - Resolves: rhbz#973119 [1.7.0.19-2.3.10.0.el6] - Updated to latest IcedTea7-forest 2.3.10 - patch 107 renamed to 500 for cosmetic purposes - improved handling of patch111 - nss-config-2.patch - removed patch 117, java-1.7.0-openjdk-nss-multiplePKCS11libraryInitialisationNnonCritical.patch duplicated with patch 108 (java-1.7.0-openjdk-nss-icedtea-e9c857dcb964) - Added client/server directories so they can be owned - Added fix for RH857717, owned /etc/.java/ and /etc/.java/.systemPrefs - Resolves: rhbz#973119
Family:	unix	Class:	patch
Reference(s):	ELSA-2013-0957 CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2449 CVE-2013-2450 CVE-2013-2452 CVE-2013-2453 CVE-2013-2454 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2458 CVE-2013-2459 CVE-2013-2460 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	java-1.7.0-openjdk
Definition Synopsis:
Oracle Linux 6.x Packages match section java-1.7.0-openjdk is earlier than 0:1.7.0.25-2.3.10.3.0.1.el6_4 AND java-1.7.0-openjdk-demo is earlier than 0:1.7.0.25-2.3.10.3.0.1.el6_4 AND java-1.7.0-openjdk-devel is earlier than 0:1.7.0.25-2.3.10.3.0.1.el6_4 AND java-1.7.0-openjdk-javadoc is earlier than 0:1.7.0.25-2.3.10.3.0.1.el6_4 AND java-1.7.0-openjdk-src is earlier than 0:1.7.0.25-2.3.10.3.0.1.el6_4

Definition Id: oval:org.mitre.oval:def:27582

Oval ID:	oval:org.mitre.oval:def:27582
Title:	DEPRECATED: ELSA-2013-0958 -- java-1.7.0-openjdk security update (important)
Description:	[1.7.0.25-2.3.10.4.0.1.el5_9] - Add oracle-enterprise.patch - Fix DISTRO_NAME to 'Enterprise Linux' [1.7.0.25-2.3.10.4.el5] - updated to newer IcedTea7-forest 2.3.10 with 8010118 fix - removed upstreamed patch1000 MBeanFix.patch - Resolves: rhbz#973117 [1.7.0.25-2.3.10.3.el5] - reverted fix for license files owning - Resolves: rhbz#973117 [1.7.0.25-2.3.10.2.el5] - added patch1000 MBeanFix.patch to fix regressions caused by security patches - Resolves: rhbz#973117 [1.7.0.25-2.3.10.1.el6] - build bumped to 25 - Resolves: rhbz#973117 [1.7.0.19-2.3.10.0.el5] - Updated to latest IcedTea7-forest 2.3.10 - patch 107 renamed to 500 for cosmetic purposes - Added fix for RH857717, owned /etc/.java/ and /etc/.java/.systemPrefs - Resolves: rhbz#973117 [1.7.0.19-2.3.10.0.el5] - Updated to latest IcedTea7-forest 2.3.10 - Resolves: rhbz#973117
Family:	unix	Class:	patch
Reference(s):	ELSA-2013-0958 CVE-2013-1500 CVE-2013-1571 CVE-2013-2407 CVE-2013-2412 CVE-2013-2443 CVE-2013-2444 CVE-2013-2445 CVE-2013-2446 CVE-2013-2447 CVE-2013-2448 CVE-2013-2449 CVE-2013-2450 CVE-2013-2452 CVE-2013-2453 CVE-2013-2454 CVE-2013-2455 CVE-2013-2456 CVE-2013-2457 CVE-2013-2458 CVE-2013-2459 CVE-2013-2460 CVE-2013-2461 CVE-2013-2463 CVE-2013-2465 CVE-2013-2469 CVE-2013-2470 CVE-2013-2471 CVE-2013-2472 CVE-2013-2473	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	java-1.7.0-openjdk
Definition Synopsis:
Oracle Linux 5.x Packages match section java-1.7.0-openjdk is earlier than 0:1.7.0.25-2.3.10.4.0.1.el5_9 AND java-1.7.0-openjdk-demo is earlier than 0:1.7.0.25-2.3.10.4.0.1.el5_9 AND java-1.7.0-openjdk-devel is earlier than 0:1.7.0.25-2.3.10.4.0.1.el5_9 AND java-1.7.0-openjdk-javadoc is earlier than 0:1.7.0.25-2.3.10.4.0.1.el5_9 AND java-1.7.0-openjdk-src is earlier than 0:1.7.0.25-2.3.10.4.0.1.el5_9

CPE : Common Platform Enumeration

Type	Description	Count
Application	Apache Xerces2 Java cpe:2.3:a:apache:xerces2_java:2.9.1:::::::* cpe:2.3:a:apache:xerces2_java::::::::	2
Application	Ibm Java cpe:2.3:a:ibm:java:7.0.4.2:::::::* cpe:2.3:a:ibm:java:7.0.4.1:::::::* cpe:2.3:a:ibm:java:7.0.4.0:::::::* cpe:2.3:a:ibm:java:7.0.3.0:::::::* cpe:2.3:a:ibm:java:7.0.2.0:::::::* cpe:2.3:a:ibm:java:7.0.1.0:::::::* cpe:2.3:a:ibm:java:7.0.0.0:::::::* cpe:2.3:a:ibm:java:6.0.9.2:::::::* cpe:2.3:a:ibm:java:6.0.9.1:::::::* cpe:2.3:a:ibm:java:6.0.9.0:::::::* cpe:2.3:a:ibm:java:6.0.8.1:::::::* cpe:2.3:a:ibm:java:6.0.8.0:::::::* cpe:2.3:a:ibm:java:6.0.7.0:::::::* cpe:2.3:a:ibm:java:6.0.6.0:::::::* cpe:2.3:a:ibm:java:6.0.5.0:::::::* cpe:2.3:a:ibm:java:6.0.4.0:::::::* cpe:2.3:a:ibm:java:6.0.3.0:::::::* cpe:2.3:a:ibm:java:6.0.2.0:::::::* cpe:2.3:a:ibm:java:6.0.13.2:::::::* cpe:2.3:a:ibm:java:6.0.13.1:::::::* cpe:2.3:a:ibm:java:6.0.13.0:::::::* cpe:2.3:a:ibm:java:6.0.12.0:::::::* cpe:2.3:a:ibm:java:6.0.11.0:::::::* cpe:2.3:a:ibm:java:6.0.10.1:::::::* cpe:2.3:a:ibm:java:6.0.10.0:::::::* cpe:2.3:a:ibm:java:6.0.1.0:::::::* cpe:2.3:a:ibm:java:6.0.0.0:::::::* cpe:2.3:a:ibm:java:5.0.16.2:::::::* cpe:2.3:a:ibm:java:5.0.16.1:::::::* cpe:2.3:a:ibm:java:5.0.16.0:::::::* cpe:2.3:a:ibm:java:5.0.15.0:::::::* cpe:2.3:a:ibm:java:5.0.14.0:::::::* cpe:2.3:a:ibm:java:5.0.13.0:::::::* cpe:2.3:a:ibm:java:5.0.12.5:::::::* cpe:2.3:a:ibm:java:5.0.12.4:::::::* cpe:2.3:a:ibm:java:5.0.12.3:::::::* cpe:2.3:a:ibm:java:5.0.12.2:::::::* cpe:2.3:a:ibm:java:5.0.12.1:::::::* cpe:2.3:a:ibm:java:5.0.12.0:::::::* cpe:2.3:a:ibm:java:5.0.11.2:::::::* cpe:2.3:a:ibm:java:5.0.11.1:::::::* cpe:2.3:a:ibm:java:5.0.11.0:::::::* cpe:2.3:a:ibm:java:5.0.0.0:::::::* cpe:2.3:a:ibm:java:1.4.2.13.9:::::::* cpe:2.3:a:ibm:java:1.4.2.13.8:::::::* cpe:2.3:a:ibm:java:1.4.2.13.7:::::::* cpe:2.3:a:ibm:java:1.4.2.13.6:::::::* cpe:2.3:a:ibm:java:1.4.2.13.5:::::::* cpe:2.3:a:ibm:java:1.4.2.13.4:::::::* cpe:2.3:a:ibm:java:1.4.2.13.3:::::::* cpe:2.3:a:ibm:java:1.4.2.13.2:::::::* cpe:2.3:a:ibm:java:1.4.2.13.17:::::::* cpe:2.3:a:ibm:java:1.4.2.13.16:::::::* cpe:2.3:a:ibm:java:1.4.2.13.15:::::::* cpe:2.3:a:ibm:java:1.4.2.13.14:::::::* cpe:2.3:a:ibm:java:1.4.2.13.13:::::::* cpe:2.3:a:ibm:java:1.4.2.13.12:::::::* cpe:2.3:a:ibm:java:1.4.2.13.11:::::::* cpe:2.3:a:ibm:java:1.4.2.13.10:::::::* cpe:2.3:a:ibm:java:1.4.2.13.1:::::::* cpe:2.3:a:ibm:java:1.4.2.13:::::::* cpe:2.3:a:ibm:java:1.4.2:::::::*	62
Application	Ibm Sterling B2B Integrator cpe:2.3:a:ibm:sterling_b2b_integrator:5.2.4:::::::*	1
Application	Oracle Javafx cpe:2.3:a:oracle:javafx:2.2.7:::::::* cpe:2.3:a:oracle:javafx:2.2.5:::::::* cpe:2.3:a:oracle:javafx:2.2.4:::::::* cpe:2.3:a:oracle:javafx:2.2.3:::::::* cpe:2.3:a:oracle:javafx:2.2.21:::::::* cpe:2.3:a:oracle:javafx:2.2:::::::* cpe:2.3:a:oracle:javafx:2.1:::::::* cpe:2.3:a:oracle:javafx:2.0.3:::::::* cpe:2.3:a:oracle:javafx:2.0.2:::::::* cpe:2.3:a:oracle:javafx:2.0:::::::* cpe:2.3:a:oracle:javafx:1.3.1:::::::* cpe:2.3:a:oracle:javafx:1.3.0:::::::* cpe:2.3:a:oracle:javafx:1.2.3:::::::* cpe:2.3:a:oracle:javafx:1.2.2:::::::* cpe:2.3:a:oracle:javafx:1.2:::::::*	15
Application	Oracle Jdk cpe:2.3:a:oracle:jdk:1.7.0:update4:::::: cpe:2.3:a:oracle:jdk:1.7.0:-:::::: cpe:2.3:a:oracle:jdk:1.7.0:update1:::::: cpe:2.3:a:oracle:jdk:1.7.0:update2:::::: cpe:2.3:a:oracle:jdk:1.7.0:update3:::::: cpe:2.3:a:oracle:jdk:1.7.0:update5:::::: cpe:2.3:a:oracle:jdk:1.7.0:update7:::::: cpe:2.3:a:oracle:jdk:1.7.0:update6:::::: cpe:2.3:a:oracle:jdk:1.7.0:update11:::::: cpe:2.3:a:oracle:jdk:1.7.0:update9:::::: cpe:2.3:a:oracle:jdk:1.7.0:update10:::::: cpe:2.3:a:oracle:jdk:1.7.0:update13:::::: cpe:2.3:a:oracle:jdk:1.7.0:update15:::::: cpe:2.3:a:oracle:jdk:1.7.0:update17:::::: cpe:2.3:a:oracle:jdk:1.7.0:update21:::::: cpe:2.3:a:oracle:jdk:1.7.0:update25:::::: cpe:2.3:a:oracle:jdk:1.7.0:update10:~~~windows~~:::::* cpe:2.3:a:oracle:jdk:1.7.0:update11:~~~windows~~:::::* cpe:2.3:a:oracle:jdk:1.7.0:update121:::::: cpe:2.3:a:oracle:jdk:1.7.0:update10_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update11_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update17_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update17_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update21_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update25_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update25_b34:::::: cpe:2.3:a:oracle:jdk:1.7.0:update25_b35:::::: cpe:2.3:a:oracle:jdk:1.7.0:update40:::::: cpe:2.3:a:oracle:jdk:1.7.0:update45:::::: cpe:2.3:a:oracle:jdk:1.7.0:update45_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update45_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update45_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update45_b34:::::: cpe:2.3:a:oracle:jdk:1.7.0:update51:::::: cpe:2.3:a:oracle:jdk:1.7.0:update7_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update9_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update9_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update10::::windows::* cpe:2.3:a:oracle:jdk:1.7.0:update11::::windows::* cpe:2.3:a:oracle:jdk:1.7.0:update241:::::: cpe:2.3:a:oracle:jdk:1.7.0:update251:::::: cpe:2.3:a:oracle:jdk:1.7.0:update60:::::: cpe:2.3:a:oracle:jdk:1.7.0:update67:::::: cpe:2.3:a:oracle:jdk:1.7.0:update72:::::: cpe:2.3:a:oracle:jdk:1.7.0:update71:::::: cpe:2.3:a:oracle:jdk:1.7.0:update75:::::: cpe:2.3:a:oracle:jdk:1.7.0:update101:::::: cpe:2.3:a:oracle:jdk:1.7.0:update111:::::: cpe:2.3:a:oracle:jdk:1.7.0:update141:::::: cpe:2.3:a:oracle:jdk:1.7.0:update151:::::: cpe:2.3:a:oracle:jdk:1.7.0:update131:::::: cpe:2.3:a:oracle:jdk:1.7.0:update201:::::: cpe:2.3:a:oracle:jdk:1.7.0:update191:::::: cpe:2.3:a:oracle:jdk:1.7.0:update161:::::: cpe:2.3:a:oracle:jdk:1.7.0:update171:::::: cpe:2.3:a:oracle:jdk:1.7.0:update181:::::: cpe:2.3:a:oracle:jdk:1.7.0:update211:::::: cpe:2.3:a:oracle:jdk:1.7.0:update221:::::: cpe:2.3:a:oracle:jdk:1.7.0:update231:::::: cpe:2.3:a:oracle:jdk:1.7.0:update271:::::: cpe:2.3:a:oracle:jdk:1.7.0:update321:::::: cpe:2.3:a:oracle:jdk:1.7.0:update331:::::: cpe:2.3:a:oracle:jdk:1.7.0:update301:::::: cpe:2.3:a:oracle:jdk:1.7.0:update291:::::: cpe:2.3:a:oracle:jdk:1.7.0:update261:::::: cpe:2.3:a:oracle:jdk:1.7.0:update99:::::: cpe:2.3:a:oracle:jdk:1.7.0:update97:::::: cpe:2.3:a:oracle:jdk:1.7.0:update95:::::: cpe:2.3:a:oracle:jdk:1.7.0:update91:::::: cpe:2.3:a:oracle:jdk:1.7.0:update85:::::: cpe:2.3:a:oracle:jdk:1.7.0:update80:::::: cpe:2.3:a:oracle:jdk:1.7.0:update76:::::: cpe:2.3:a:oracle:jdk:1.7.0:update343:::::: cpe:2.3:a:oracle:jdk:1.7.0:update191_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update191_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update201_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update211_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update211_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update221_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update221_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update221_b34:::::: cpe:2.3:a:oracle:jdk:1.7.0:update221_b35:::::: cpe:2.3:a:oracle:jdk:1.7.0:update231_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update241_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update271_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update281:::::: cpe:2.3:a:oracle:jdk:1.7.0:update281_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update281_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update291_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update291_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update301_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update311_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update321_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update341:::::: cpe:2.3:a:oracle:jdk:1.7.0:update341_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update343_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update51_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update51_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update51_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update55:::::: cpe:2.3:a:oracle:jdk:1.7.0:update55_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update55_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update55_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update55_b35:::::: cpe:2.3:a:oracle:jdk:1.7.0:update60_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update60_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update65:::::: cpe:2.3:a:oracle:jdk:1.7.0:update65_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update67_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update67_b34:::::: cpe:2.3:a:oracle:jdk:1.7.0:update72_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update72_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update72_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update76_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update76_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update76_b34:::::: cpe:2.3:a:oracle:jdk:1.7.0:update76_b35:::::: cpe:2.3:a:oracle:jdk:1.7.0:update76_b36:::::: cpe:2.3:a:oracle:jdk:1.7.0:update76_b37:::::: cpe:2.3:a:oracle:jdk:1.7.0:update76_b38:::::: cpe:2.3:a:oracle:jdk:1.7.0:update79:::::: cpe:2.3:a:oracle:jdk:1.7.0:update80_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update80_b35:::::: cpe:2.3:a:oracle:jdk:1.7.0:update85_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update85_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update85_b34:::::: cpe:2.3:a:oracle:jdk:1.7.0:update91_b17:::::: cpe:2.3:a:oracle:jdk:1.7.0:update91_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update91_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update95_b13:::::: cpe:2.3:a:oracle:jdk:1.7.0:update95_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update95_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update97_b31:::::: cpe:2.3:a:oracle:jdk:1.7.0:update97_b32:::::: cpe:2.3:a:oracle:jdk:1.7.0:update97_b33:::::: cpe:2.3:a:oracle:jdk:1.7.0:update99_b31:::::: cpe:2.3:a:oracle:jdk:1.7:update_131:::::: cpe:2.3:a:oracle:jdk:1.6.0:update19:::::: cpe:2.3:a:oracle:jdk:1.6.0:update131:::::: cpe:2.3:a:oracle:jdk:1.6.0:::::::* cpe:2.3:a:oracle:jdk:1.6.0:-:::::: cpe:2.3:a:oracle:jdk:1.6.0:update201:::::: cpe:2.3:a:oracle:jdk:1.6.0:update191:::::: cpe:2.3:a:oracle:jdk:1.6.0:update181:::::: cpe:2.3:a:oracle:jdk:1.6.0:update171:::::: cpe:2.3:a:oracle:jdk:1.6.0:update161:::::: cpe:2.3:a:oracle:jdk:1.6.0:update151:::::: cpe:2.3:a:oracle:jdk:1.6.0:update141:::::: cpe:2.3:a:oracle:jdk:1.6.0:update121:::::: cpe:2.3:a:oracle:jdk:1.6.0:update115:::::: cpe:2.3:a:oracle:jdk:1.6.0:update113:::::: cpe:2.3:a:oracle:jdk:1.6.0:update111:::::: cpe:2.3:a:oracle:jdk:1.6.0:update105:::::: cpe:2.3:a:oracle:jdk:1.6.0:update101:::::: cpe:2.3:a:oracle:jdk:1.6.0:update95:::::: cpe:2.3:a:oracle:jdk:1.6.0:update91:::::: cpe:2.3:a:oracle:jdk:1.6.0:update85:::::: cpe:2.3:a:oracle:jdk:1.6.0:update81:::::: cpe:2.3:a:oracle:jdk:1.6.0:update75:::::: cpe:2.3:a:oracle:jdk:1.6.0:update71:::::: cpe:2.3:a:oracle:jdk:1.6.0:update65:::::: cpe:2.3:a:oracle:jdk:1.6.0:update32:::::: cpe:2.3:a:oracle:jdk:1.6.0:update31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update23:::::: cpe:2.3:a:oracle:jdk:1.6.0:update22:::::: cpe:2.3:a:oracle:jdk:1.6.0:update29:::::: cpe:2.3:a:oracle:jdk:1.6.0:update33:::::: cpe:2.3:a:oracle:jdk:1.6.0:update25:::::: cpe:2.3:a:oracle:jdk:1.6.0:update24:::::: cpe:2.3:a:oracle:jdk:1.6.0:update27:::::: cpe:2.3:a:oracle:jdk:1.6.0:update43:::::: cpe:2.3:a:oracle:jdk:1.6.0:update45:::::: cpe:2.3:a:oracle:jdk:1.6.0:update51:::::: cpe:2.3:a:oracle:jdk:1.6.0:update30:::::: cpe:2.3:a:oracle:jdk:1.6.0:update34:::::: cpe:2.3:a:oracle:jdk:1.6.0:update39:::::: cpe:2.3:a:oracle:jdk:1.6.0:update41:::::: cpe:2.3:a:oracle:jdk:1.6.0:update38:::::: cpe:2.3:a:oracle:jdk:1.6.0:update37:::::: cpe:2.3:a:oracle:jdk:1.6.0:update35:::::: cpe:2.3:a:oracle:jdk:1.6.0:update26:::::: cpe:2.3:a:oracle:jdk:1.6.0:update60:::::: cpe:2.3:a:oracle:jdk:1.6.0:update10:::::: cpe:2.3:a:oracle:jdk:1.6.0:update1:::::: cpe:2.3:a:oracle:jdk:1.6.0:update2:::::: cpe:2.3:a:oracle:jdk:1.6.0:update3:::::: cpe:2.3:a:oracle:jdk:1.6.0:update4:::::: cpe:2.3:a:oracle:jdk:1.6.0:update11:::::: cpe:2.3:a:oracle:jdk:1.6.0:update12:::::: cpe:2.3:a:oracle:jdk:1.6.0:update13:::::: cpe:2.3:a:oracle:jdk:1.6.0:update14:::::: cpe:2.3:a:oracle:jdk:1.6.0:update5:::::: cpe:2.3:a:oracle:jdk:1.6.0:update6:::::: cpe:2.3:a:oracle:jdk:1.6.0:update7:::::: cpe:2.3:a:oracle:jdk:1.6.0:update15:::::: cpe:2.3:a:oracle:jdk:1.6.0:update16:::::: cpe:2.3:a:oracle:jdk:1.6.0:update17:::::: cpe:2.3:a:oracle:jdk:1.6.0:update18:::::: cpe:2.3:a:oracle:jdk:1.6.0:update20:::::: cpe:2.3:a:oracle:jdk:1.6.0:update21:::::: cpe:2.3:a:oracle:jdk:1.6.0:update8:::::: cpe:2.3:a:oracle:jdk:1.6.0:update9:::::: cpe:2.3:a:oracle:jdk:1.6.0:update32_b31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update32_b32:::::: cpe:2.3:a:oracle:jdk:1.6.0:update33_b31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update33_b32:::::: cpe:2.3:a:oracle:jdk:1.6.0:update33_b33:::::: cpe:2.3:a:oracle:jdk:1.6.0:update34_b31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update34_b32:::::: cpe:2.3:a:oracle:jdk:1.6.0:update35_b31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update35_b32:::::: cpe:2.3:a:oracle:jdk:1.6.0:update37_b31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update37_b32:::::: cpe:2.3:a:oracle:jdk:1.6.0:update38_b31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update43_b31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update51_b31:::::: cpe:2.3:a:oracle:jdk:1.6.0:update51_b32:::::: cpe:2.3:a:oracle:jdk:1.6:update_141:::::: cpe:2.3:a:oracle:jdk:1.5.0:update_71:::::: cpe:2.3:a:oracle:jdk:1.5.0:update11:::::: cpe:2.3:a:oracle:jdk:1.5.0:-:::::: cpe:2.3:a:oracle:jdk:1.5.0:update1:::::: cpe:2.3:a:oracle:jdk:1.5.0:update10:::::: cpe:2.3:a:oracle:jdk:1.5.0:update12:::::: cpe:2.3:a:oracle:jdk:1.5.0:update13:::::: cpe:2.3:a:oracle:jdk:1.5.0:update14:::::: cpe:2.3:a:oracle:jdk:1.5.0:update15:::::: cpe:2.3:a:oracle:jdk:1.5.0:update16:::::: cpe:2.3:a:oracle:jdk:1.5.0:update17:::::: cpe:2.3:a:oracle:jdk:1.5.0:update18:::::: cpe:2.3:a:oracle:jdk:1.5.0:update19:::::: cpe:2.3:a:oracle:jdk:1.5.0:update2:::::: cpe:2.3:a:oracle:jdk:1.5.0:update3:::::: cpe:2.3:a:oracle:jdk:1.5.0:update4:::::: cpe:2.3:a:oracle:jdk:1.5.0:update5:::::: cpe:2.3:a:oracle:jdk:1.5.0:update6:::::: cpe:2.3:a:oracle:jdk:1.5.0:update7:::::: cpe:2.3:a:oracle:jdk:1.5.0:update8:::::: cpe:2.3:a:oracle:jdk:1.5.0:update9:::::: cpe:2.3:a:oracle:jdk:1.5.0:update75:::::: cpe:2.3:a:oracle:jdk:1.5.0:update65:::::: cpe:2.3:a:oracle:jdk:1.5.0:update61:::::: cpe:2.3:a:oracle:jdk:1.5.0:update55:::::: cpe:2.3:a:oracle:jdk:1.5.0:update38:::::: cpe:2.3:a:oracle:jdk:1.5.0:update36:::::: cpe:2.3:a:oracle:jdk:1.5.0:update40:::::: cpe:2.3:a:oracle:jdk:1.5.0:update41:::::: cpe:2.3:a:oracle:jdk:1.5.0:update45:::::: cpe:2.3:a:oracle:jdk:1.5.0:update51:::::: cpe:2.3:a:oracle:jdk:1.5.0:update39:::::: cpe:2.3:a:oracle:jdk:1.5.0:update20:::::: cpe:2.3:a:oracle:jdk:1.5.0:update21:::::: cpe:2.3:a:oracle:jdk:1.5.0:update22:::::: cpe:2.3:a:oracle:jdk:1.5.0:update23:::::: cpe:2.3:a:oracle:jdk:1.5.0:update24:::::: cpe:2.3:a:oracle:jdk:1.5.0:update25:::::: cpe:2.3:a:oracle:jdk:1.5.0:update26:::::: cpe:2.3:a:oracle:jdk:1.5.0:update27:::::: cpe:2.3:a:oracle:jdk:1.5.0:update28:::::: cpe:2.3:a:oracle:jdk:1.5.0:update29:::::: cpe:2.3:a:oracle:jdk:1.5.0:update30:::::: cpe:2.3:a:oracle:jdk:1.5.0:update31:::::: cpe:2.3:a:oracle:jdk:1.5.0:update32:::::: cpe:2.3:a:oracle:jdk:1.5.0:update33:::::: cpe:2.3:a:oracle:jdk:1.5.0:update34:::::: cpe:2.3:a:oracle:jdk:1.5.0:update35:::::: cpe:2.3:a:oracle:jdk:1.4.2_40:::::::* cpe:2.3:a:oracle:jdk:1.4.2_38:::::::* cpe:2.3:a:oracle:jdk::::::::	269
Application	Oracle Jre cpe:2.3:a:oracle:jre:1.7.0:update1:::::: cpe:2.3:a:oracle:jre:1.7.0:update2:::::: cpe:2.3:a:oracle:jre:1.7.0:-:::::: cpe:2.3:a:oracle:jre:1.7.0:update4::::::