Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/java-1.4.2-ibm@1.4.2.13.1-1jpp.1?arch=el3
purl pkg:rpm/redhat/java-1.4.2-ibm@1.4.2.13.1-1jpp.1?arch=el3
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.2
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-2gpd-vwgb-67cn
Aliases:
CVE-2009-2625
GHSA-334p-wv2m-w3vp
XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework. There are no reported fixed by versions.
VCID-y12r-7vqr-wqg5
Aliases:
CVE-2008-5349
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:58:40.568210+00:00 RedHat Importer Affected by VCID-y12r-7vqr-wqg5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5349.json 38.0.0
2026-04-01T14:58:00.219103+00:00 RedHat Importer Affected by VCID-2gpd-vwgb-67cn https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2625.json 38.0.0