Skip to content
OpenAdvisories
Critical 1 exploited CVE RHSA-2013:1059 35 CVEs

Red Hat Security Advisory: java-1.6.0-ibm security update

Published Sep 29, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 15

ReleasePackageFixed in
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm 1:1.6.0.14.0-1jpp.1.el5_9
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-accessibility 1:1.6.0.14.0-1jpp.1.el5_9
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-demo 1:1.6.0.14.0-1jpp.1.el5_9
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-devel 1:1.6.0.14.0-1jpp.1.el5_9
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-javacomm 1:1.6.0.14.0-1jpp.1.el5_9
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-jdbc 1:1.6.0.14.0-1jpp.1.el5_9
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-plugin 1:1.6.0.14.0-1jpp.1.el5_9
Red Hat · RHEL 5 rhel_extras:5::server java-1.6.0-ibm-src 1:1.6.0.14.0-1jpp.1.el5_9
Red Hat · RHEL 6 rhel_extras:6 java-1.6.0-ibm 1:1.6.0.14.0-1jpp.1.el6_4
Red Hat · RHEL 6 rhel_extras:6 java-1.6.0-ibm-demo 1:1.6.0.14.0-1jpp.1.el6_4
Red Hat · RHEL 6 rhel_extras:6 java-1.6.0-ibm-devel 1:1.6.0.14.0-1jpp.1.el6_4
Red Hat · RHEL 6 rhel_extras:6 java-1.6.0-ibm-javacomm 1:1.6.0.14.0-1jpp.1.el6_4
Red Hat · RHEL 6 rhel_extras:6 java-1.6.0-ibm-jdbc 1:1.6.0.14.0-1jpp.1.el6_4
Red Hat · RHEL 6 rhel_extras:6 java-1.6.0-ibm-plugin 1:1.6.0.14.0-1jpp.1.el6_4
Red Hat · RHEL 6 rhel_extras:6 java-1.6.0-ibm-src 1:1.6.0.14.0-1jpp.1.el6_4

Vulnerabilities 35

  • Critical 9.8
    CVE-2013-2465 Exploited · Ransomware Public exploit EPSS 99%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

    KEV Mar 28, 2022
  • Unscored —
    CVE-2013-1500

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  • Unscored —
    CVE-2013-1571 EPSS 67%

    Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, …

  • Unscored —
    CVE-2013-2407

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and…

  • Unscored —
    CVE-2013-2412

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and…

  • Unscored —
    CVE-2013-2437

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and…

  • Unscored —
    CVE-2013-2442

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and…

  • Unscored —
    CVE-2013-2443

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  • Unscored —
    CVE-2013-2444

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  • Unscored —
    CVE-2013-2446

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  • Unscored —
    CVE-2013-2447

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  • Unscored —
    CVE-2013-2448

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  • Unscored —
    CVE-2013-2450

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  • Unscored —
    CVE-2013-2451

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and…

  • Unscored —
    CVE-2013-2452

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  • Unscored —
    CVE-2013-2453

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and…

  • Unscored —
    CVE-2013-2454

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  • Unscored —
    CVE-2013-2455

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  • Unscored —
    CVE-2013-2456

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  • Unscored —
    CVE-2013-2457

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  • Unscored —
    CVE-2013-2459

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  • Unscored —
    CVE-2013-2463 EPSS 10%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  • Unscored —
    CVE-2013-2464

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  • Unscored —
    CVE-2013-2466

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and…

  • Unscored —
    CVE-2013-2468

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and…

  • Unscored —
    CVE-2013-2469

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  • Unscored —
    CVE-2013-2470 Public exploit EPSS 23%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  • Unscored —
    CVE-2013-2471 EPSS 15%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  • Unscored —
    CVE-2013-2472 Public exploit EPSS 23%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  • Unscored —
    CVE-2013-2473

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  • Unscored —
    CVE-2013-3009

    The com.ibm.CORBA.iiop.ClientDelegate class in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before…

  • Unscored —
    CVE-2013-3011

    Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.…

  • Unscored —
    CVE-2013-3012

    Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.…

  • Unscored —
    CVE-2013-3743

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 45 and earlier and…

  • High —
    CVE-2013-4002 Public exploit EPSS 25%

    Missing XML Validation in Apache Xerces2

    XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u6…

    xerces:xercesImpl Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://www.ibm.com/developerworks/java/jdk/alerts/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=973474
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975099
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975102
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975107
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975110
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975115
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975118
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975120
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975121
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975125
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975127
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975129
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975131
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975132
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975133
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975134
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975137
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975138
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975139
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975140
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975141
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975142
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975144
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975146
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975148
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975757
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975761
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975764
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975767
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975770
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=975773
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1059.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-1500
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1500
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1500
  • article
    http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-1571