Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/java-1.6.0-ibm@1:1.6.0.7-1jpp.2?arch=el5
purl pkg:rpm/redhat/java-1.6.0-ibm@1:1.6.0.7-1jpp.2?arch=el5
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 10.0
Vulnerabilities affecting this package (36)
Vulnerability Summary Fixed by
VCID-1c8j-4sxr-sqen
Aliases:
CVE-2009-2672
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-1kst-h6d9-tubd
Aliases:
CVE-2009-2674
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-2gpd-vwgb-67cn
Aliases:
CVE-2009-2625
GHSA-334p-wv2m-w3vp
XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework. There are no reported fixed by versions.
VCID-3des-5j3d-kya4
Aliases:
CVE-2009-1104
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-3f5w-6rwe-9fg9
Aliases:
CVE-2009-1103
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-52v7-ahwt-n7bj
Aliases:
CVE-2009-2675
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-6dwj-y7qv-bkah
Aliases:
CVE-2009-1095
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-7kec-9nbt-8qh1
Aliases:
CVE-2009-1107
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-8dsm-695w-9yfx
Aliases:
CVE-2009-1098
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-8mq3-1c6d-n7a9
Aliases:
CVE-2009-3866
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-a6gd-ytpw-duan
Aliases:
CVE-2009-3872
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-c5un-z1f5-wuhd
Aliases:
CVE-2009-3867
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-e7t4-rgaz-4uec
Aliases:
CVE-2009-3869
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-g31s-n677-kye3
Aliases:
CVE-2009-1097
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-gs9t-z7tn-5fhn
Aliases:
CVE-2009-1093
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-jau7-gfz8-dkfa
Aliases:
CVE-2009-3555
GHSA-f7w7-6pjc-wwm6
VU#120541
The renegotiation vulnerability in SSL protocol There are no reported fixed by versions.
VCID-jgc1-svry-fufd
Aliases:
CVE-2009-2673
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-ju9j-bz1n-2udp
Aliases:
CVE-2009-3874
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-k4rr-5rxv-hqe8
Aliases:
CVE-2009-1099
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-ks25-kdxj-m7cr
Aliases:
CVE-2009-1096
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-p2fp-hr1d-ske5
Aliases:
CVE-2009-1100
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-pj8c-99t4-8khz
Aliases:
CVE-2009-3868
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-pzcs-z6ju-qbcg
Aliases:
CVE-2009-3876
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-r911-4n39-ekb9
Aliases:
CVE-2009-1106
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-sakk-3wvn-tfhe
Aliases:
CVE-2009-3873
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-th92-rtps-jba3
Aliases:
CVE-2009-3871
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-tpv7-d7p6-bbe6
Aliases:
CVE-2009-1094
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-txfj-uzzx-4ue7
Aliases:
CVE-2009-3877
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-tz7n-mxmc-63ek
Aliases:
CVE-2009-1105
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-uxbc-8sru-c7a6
Aliases:
CVE-2009-1101
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-weda-ey6f-yuc4
Aliases:
CVE-2009-3875
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-why8-v1se-h3fj
Aliases:
CVE-2009-3865
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-xt9m-tfuj-6uht
Aliases:
CVE-2009-2670
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-ypf2-kcj7-hfh5
Aliases:
CVE-2009-2671
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
VCID-z7ht-bq8z-3qgd
Aliases:
CVE-2009-0217
GHSA-8hfm-837h-hjg5
XML signature HMAC truncation authentication bypass This package uses a parameter that defines an HMAC truncation length (`HMACOutputLength`) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits. There are no reported fixed by versions.
VCID-zd4q-75kh-zbfb
Aliases:
CVE-2009-2676
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:58:26.877820+00:00 RedHat Importer Affected by VCID-7kec-9nbt-8qh1 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1107.json 38.0.0
2026-04-01T14:58:26.704998+00:00 RedHat Importer Affected by VCID-r911-4n39-ekb9 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1106.json 38.0.0
2026-04-01T14:58:26.575338+00:00 RedHat Importer Affected by VCID-3des-5j3d-kya4 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1104.json 38.0.0
2026-04-01T14:58:26.391053+00:00 RedHat Importer Affected by VCID-p2fp-hr1d-ske5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1100.json 38.0.0
2026-04-01T14:58:26.165259+00:00 RedHat Importer Affected by VCID-k4rr-5rxv-hqe8 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1099.json 38.0.0
2026-04-01T14:58:25.872063+00:00 RedHat Importer Affected by VCID-tz7n-mxmc-63ek https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1105.json 38.0.0
2026-04-01T14:58:25.757366+00:00 RedHat Importer Affected by VCID-3f5w-6rwe-9fg9 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1103.json 38.0.0
2026-04-01T14:58:25.385111+00:00 RedHat Importer Affected by VCID-8dsm-695w-9yfx https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1098.json 38.0.0
2026-04-01T14:58:25.188021+00:00 RedHat Importer Affected by VCID-g31s-n677-kye3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1097.json 38.0.0
2026-04-01T14:58:24.996237+00:00 RedHat Importer Affected by VCID-ks25-kdxj-m7cr https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1096.json 38.0.0
2026-04-01T14:58:24.788415+00:00 RedHat Importer Affected by VCID-6dwj-y7qv-bkah https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1095.json 38.0.0
2026-04-01T14:58:24.581907+00:00 RedHat Importer Affected by VCID-tpv7-d7p6-bbe6 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1094.json 38.0.0
2026-04-01T14:58:24.375950+00:00 RedHat Importer Affected by VCID-gs9t-z7tn-5fhn https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1093.json 38.0.0
2026-04-01T14:58:24.171670+00:00 RedHat Importer Affected by VCID-uxbc-8sru-c7a6 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1101.json 38.0.0
2026-04-01T14:58:07.151827+00:00 RedHat Importer Affected by VCID-z7ht-bq8z-3qgd https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0217.json 38.0.0
2026-04-01T14:58:01.991510+00:00 RedHat Importer Affected by VCID-zd4q-75kh-zbfb https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2676.json 38.0.0
2026-04-01T14:58:00.000990+00:00 RedHat Importer Affected by VCID-2gpd-vwgb-67cn https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2625.json 38.0.0
2026-04-01T14:57:58.973496+00:00 RedHat Importer Affected by VCID-52v7-ahwt-n7bj https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2675.json 38.0.0
2026-04-01T14:57:58.782882+00:00 RedHat Importer Affected by VCID-1kst-h6d9-tubd https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2674.json 38.0.0
2026-04-01T14:57:58.654057+00:00 RedHat Importer Affected by VCID-jgc1-svry-fufd https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2673.json 38.0.0
2026-04-01T14:57:58.448785+00:00 RedHat Importer Affected by VCID-1c8j-4sxr-sqen https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2672.json 38.0.0
2026-04-01T14:57:58.242726+00:00 RedHat Importer Affected by VCID-ypf2-kcj7-hfh5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2671.json 38.0.0
2026-04-01T14:57:58.029148+00:00 RedHat Importer Affected by VCID-xt9m-tfuj-6uht https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2670.json 38.0.0
2026-04-01T14:57:42.723636+00:00 RedHat Importer Affected by VCID-pj8c-99t4-8khz https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3868.json 38.0.0
2026-04-01T14:57:42.476963+00:00 RedHat Importer Affected by VCID-c5un-z1f5-wuhd https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3867.json 38.0.0
2026-04-01T14:57:42.245558+00:00 RedHat Importer Affected by VCID-8mq3-1c6d-n7a9 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3866.json 38.0.0
2026-04-01T14:57:42.182171+00:00 RedHat Importer Affected by VCID-why8-v1se-h3fj https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3865.json 38.0.0
2026-04-01T14:57:41.997006+00:00 RedHat Importer Affected by VCID-a6gd-ytpw-duan https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3872.json 38.0.0
2026-04-01T14:57:41.174522+00:00 RedHat Importer Affected by VCID-ju9j-bz1n-2udp https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3874.json 38.0.0
2026-04-01T14:57:40.898657+00:00 RedHat Importer Affected by VCID-th92-rtps-jba3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3871.json 38.0.0
2026-04-01T14:57:40.621734+00:00 RedHat Importer Affected by VCID-e7t4-rgaz-4uec https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3869.json 38.0.0
2026-04-01T14:57:40.340772+00:00 RedHat Importer Affected by VCID-txfj-uzzx-4ue7 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3877.json 38.0.0
2026-04-01T14:57:40.063792+00:00 RedHat Importer Affected by VCID-pzcs-z6ju-qbcg https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3876.json 38.0.0
2026-04-01T14:57:39.850356+00:00 RedHat Importer Affected by VCID-weda-ey6f-yuc4 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3875.json 38.0.0
2026-04-01T14:57:39.525714+00:00 RedHat Importer Affected by VCID-sakk-3wvn-tfhe https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3873.json 38.0.0
2026-04-01T14:57:29.832907+00:00 RedHat Importer Affected by VCID-jau7-gfz8-dkfa https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3555.json 38.0.0