{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Java SE version 7u191",
      "product": {
        "name": "Java SE",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "JRockit version R28.3.19",
      "product": {
        "name": "Java SE",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Java SE version 6u201",
      "product": {
        "name": "Java SE",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Java SE version 8u182",
      "product": {
        "name": "Java SE",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Java SE version 11",
      "product": {
        "name": "Java SE",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Java SE Embedded version 8u181",
      "product": {
        "name": "Java SE",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2018-3209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3209"
    },
    {
      "name": "CVE-2018-13785",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-13785"
    },
    {
      "name": "CVE-2018-3139",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3139"
    },
    {
      "name": "CVE-2018-3211",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3211"
    },
    {
      "name": "CVE-2018-3149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3149"
    },
    {
      "name": "CVE-2018-3150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3150"
    },
    {
      "name": "CVE-2018-3180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3180"
    },
    {
      "name": "CVE-2018-3214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3214"
    },
    {
      "name": "CVE-2018-3136",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3136"
    },
    {
      "name": "CVE-2018-3169",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3169"
    },
    {
      "name": "CVE-2018-3157",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3157"
    },
    {
      "name": "CVE-2018-3183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3183"
    }
  ],
  "links": [],
  "reference": "CERTFR-2018-AVI-495",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2018-10-17T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Java SE.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance\net une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Java SE",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuoct2018verbose du 16 octobre 2018",
      "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2018verbose-5170927.html#JAVA"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle du 16 octobre 2018",
      "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Java SE version 7u191",
      "product": {
        "name": "Java SE",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "JRockit version R28.3.19",
      "product": {
        "name": "Java SE",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Java SE version 6u201",
      "product": {
        "name": "Java SE",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Java SE version 8u182",
      "product": {
        "name": "Java SE",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Java SE version 11",
      "product": {
        "name": "Java SE",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "Java SE Embedded version 8u181",
      "product": {
        "name": "Java SE",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2018-3209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3209"
    },
    {
      "name": "CVE-2018-13785",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-13785"
    },
    {
      "name": "CVE-2018-3139",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3139"
    },
    {
      "name": "CVE-2018-3211",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3211"
    },
    {
      "name": "CVE-2018-3149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3149"
    },
    {
      "name": "CVE-2018-3150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3150"
    },
    {
      "name": "CVE-2018-3180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3180"
    },
    {
      "name": "CVE-2018-3214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3214"
    },
    {
      "name": "CVE-2018-3136",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3136"
    },
    {
      "name": "CVE-2018-3169",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3169"
    },
    {
      "name": "CVE-2018-3157",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3157"
    },
    {
      "name": "CVE-2018-3183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3183"
    }
  ],
  "links": [],
  "reference": "CERTFR-2018-AVI-495",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2018-10-17T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Java SE.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance\net une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Java SE",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle cpuoct2018verbose du 16 octobre 2018",
      "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2018verbose-5170927.html#JAVA"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Oracle du 16 octobre 2018",
      "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
    }
  ]
}

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-3136"
    }
  },
  "description": "Oracle Java SE\u662f\u7f8e\u56fd\u7532\u9aa8\u6587\uff08Oracle\uff09\u516c\u53f8\u7684\u4e00\u5957\u6807\u51c6\u7248Java\u5e73\u53f0\uff0c\u7528\u4e8e\u5f00\u53d1\u548c\u90e8\u7f72\u684c\u9762\u3001\u670d\u52a1\u5668\u4ee5\u53ca\u5d4c\u5165\u8bbe\u5907\u548c\u5b9e\u65f6\u73af\u5883\u4e2d\u7684Java\u5e94\u7528\u7a0b\u5e8f\u3002Java SE\u548cJava SE Embedded\u90fd\u662f\u5176\u4e2d\u7684\u7ec4\u4ef6\u3002Java SE Embedded\u662f\u4e00\u6b3e\u9488\u5bf9\u5d4c\u5165\u5f0f\u7cfb\u7edf\u5f00\u53d1\u529f\u80fd\u5f3a\u5927\u3001\u53ef\u9760\u3001\u53ef\u79fb\u690d\u7684\u5e94\u7528\u7a0b\u5e8f\u7684Java\u5e73\u53f0\u3002\n\nOracle Java SE\u4e2d\u7684Java SE\u548cJava SE Embedded\u7ec4\u4ef6\u7684Networking\u5b50\u7ec4\u4ef6\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u672a\u6388\u6743\u8bfb\u53d6\u6570\u636e\uff0c\u5f71\u54cd\u6570\u636e\u7684\u4fdd\u5bc6\u6027\u3002",
  "discovererName": "Jonathan Birch",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1ahttps://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2019-26737",
  "openTime": "2019-08-09",
  "patchDescription": "Oracle Java SE\u662f\u7f8e\u56fd\u7532\u9aa8\u6587\uff08Oracle\uff09\u516c\u53f8\u7684\u4e00\u5957\u6807\u51c6\u7248Java\u5e73\u53f0\uff0c\u7528\u4e8e\u5f00\u53d1\u548c\u90e8\u7f72\u684c\u9762\u3001\u670d\u52a1\u5668\u4ee5\u53ca\u5d4c\u5165\u8bbe\u5907\u548c\u5b9e\u65f6\u73af\u5883\u4e2d\u7684Java\u5e94\u7528\u7a0b\u5e8f\u3002Java SE\u548cJava SE Embedded\u90fd\u662f\u5176\u4e2d\u7684\u7ec4\u4ef6\u3002Java SE Embedded\u662f\u4e00\u6b3e\u9488\u5bf9\u5d4c\u5165\u5f0f\u7cfb\u7edf\u5f00\u53d1\u529f\u80fd\u5f3a\u5927\u3001\u53ef\u9760\u3001\u53ef\u79fb\u690d\u7684\u5e94\u7528\u7a0b\u5e8f\u7684Java\u5e73\u53f0\u3002\r\n\r\nOracle Java SE\u4e2d\u7684Java SE\u548cJava SE Embedded\u7ec4\u4ef6\u7684Networking\u5b50\u7ec4\u4ef6\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u672a\u6388\u6743\u8bfb\u53d6\u6570\u636e\uff0c\u5f71\u54cd\u6570\u636e\u7684\u4fdd\u5bc6\u6027\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Oracle Java SE\u548cJava SE Embedded\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\uff08CNVD-2019-26737\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Oracle Java SE 8u182",
      "Oracle Java SE 7u191",
      "Oracle Java SE Embedded 8u181",
      "Oracle Java SE 11"
    ]
  },
  "referenceLink": "https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
  "serverity": "\u4e2d",
  "submitTime": "2018-10-17",
  "title": "Oracle Java SE\u548cJava SE Embedded\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\uff08CNVD-2019-26737\uff09"
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:oracle:jdk:1.6.0:update201:*:*:*:*:*:*",
              "matchCriteriaId": "9C07DBB8-760D-4A9E-B7C7-A382D650658B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jdk:1.7.0:update191:*:*:*:*:*:*",
              "matchCriteriaId": "ED6BF214-B45C-405E-83AC-C8A084A6E4C4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jdk:1.8.0:update181:*:*:*:*:*:*",
              "matchCriteriaId": "7D8C0DB7-6178-4D70-B460-97A49F012560",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jdk:1.8.0:update182:*:*:*:*:*:*",
              "matchCriteriaId": "95C4D08B-88BF-4299-90B8-51F6B214C3B5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jdk:11.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "CE66FC86-ADF3-4295-9C10-2A0AF16A538C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.6.0:update201:*:*:*:*:*:*",
              "matchCriteriaId": "BBE0F763-B860-4B30-A5E9-2FCE78F5932D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.7.0:update191:*:*:*:*:*:*",
              "matchCriteriaId": "C192F54C-108C-4E40-BC29-CF911C3B9EB4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.8.0:update181:*:*:*:*:*:*",
              "matchCriteriaId": "4ADC2C70-B7C4-49AC-B4CC-C5FC60903F3B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.8.0:update182:*:*:*:*:*:*",
              "matchCriteriaId": "B4154B5B-9E0A-46D0-9CE9-E393119ACAA0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:11.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "32548053-521C-4D17-8791-680074D5C55E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "D4840254-CC76-4113-BC61-360BD15582B9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "85EA16E0-9261-45C4-840F-5366E9EAC5E1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "F4F86C3C-B99C-44C6-97D7-163DC3F59687",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "33C068A4-3780-4EAB-A937-6082DF847564",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "9BBCD86A-E6C7-4444-9D74-F861084090F0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "51EF4996-72F4-4FA4-814F-F5991E7A8318",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "B353CE99-D57C-465B-AAB0-73EF581127D1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5ED5807-55B7-47C5-97A6-03233F4FBC3A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "825ECE2D-E232-46E0-A047-074B34DB1E97",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
              "matchCriteriaId": "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*",
              "matchCriteriaId": "B3293E55-5506-4587-A318-D1734F781C09",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
              "matchCriteriaId": "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "07C312A0-CD2C-4B9C-B064-6409B25C278F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*",
              "matchCriteriaId": "50B5212A-03DC-48D3-8734-7FAA20A48D7F",
              "versionEndExcluding": "8.6.3-00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.4 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N)."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad en los componentes Java SE y Java SE Embedded de Oracle Java SE (subcomponente: Security). Las versiones compatibles que se han visto afectadas son JavaSE: 6u201, 7u191, 8u182 y 11; Java SE Embedded: 8u181. Una vulnerabilidad dif\u00edcilmente explotable permite que un atacante sin autenticar que tenga acceso a red por m\u00faltiples protocolos comprometa la seguridad de Java SE y Java SE Embedded. Para que los ataques tengan \u00e9xito, se necesita la participaci\u00f3n de otra persona diferente del atacante y, aunque la vulnerabilidad est\u00e1 presente en Java SE y Java SE Embedded, los ataques podr\u00edan afectar ligeramente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en el acceso no autorizado a la actualizaci\u00f3n, inserci\u00f3n o supresi\u00f3n de algunos de los datos accesibles de Java SE y Java SE Embedded. Nota: esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox (en Java SE 8) que cargan y ejecutan c\u00f3digo que no es de confianza (por ejemplo, c\u00f3digo proveniente de internet) y que conf\u00edan en el sandbox Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan c\u00f3digo de confianza (por ejemplo, c\u00f3digo instalado por un administrador). CVSS 3.0 Base Score 3.4 (impactos en la integridad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N)."
    }
  ],
  "id": "CVE-2018-3136",
  "lastModified": "2024-11-21T04:05:14.030",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "LOW",
        "cvssData": {
          "accessComplexity": "HIGH",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 2.6,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 4.9,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 3.4,
          "baseSeverity": "LOW",
          "confidentialityImpact": "NONE",
          "integrityImpact": "LOW",
          "privilegesRequired": "NONE",
          "scope": "CHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.6,
        "impactScore": 1.4,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2018-10-17T01:31:16.307",
  "references": [
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/105601"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1041889"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:2942"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:2943"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3000"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3001"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3002"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3003"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3007"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3008"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3350"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3409"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3521"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3533"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3534"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3671"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3672"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3779"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3852"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00026.html"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.gentoo.org/glsa/201908-10"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.netapp.com/advisory/ntap-20181018-0001/"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03952en_us"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://usn.ubuntu.com/3804-1/"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://usn.ubuntu.com/3824-1/"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://www.debian.org/security/2018/dsa-4326"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/105601"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1041889"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:2942"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:2943"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3000"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3001"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3002"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3003"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3007"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3008"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3350"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3409"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3521"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3533"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3534"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3671"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3672"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3779"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://access.redhat.com/errata/RHSA-2018:3852"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00026.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.gentoo.org/glsa/201908-10"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.netapp.com/advisory/ntap-20181018-0001/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03952en_us"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://usn.ubuntu.com/3804-1/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://usn.ubuntu.com/3824-1/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://www.debian.org/security/2018/dsa-4326"
    }
  ],
  "sourceIdentifier": "secalert_us@oracle.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2018-3136"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2018-10-17T01:31:00Z",
    "severity": "LOW"
  },
  "details": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.4 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N).",
  "id": "GHSA-f6rv-hvw7-6w6f",
  "modified": "2022-05-13T01:16:49Z",
  "published": "2022-05-13T01:16:49Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-3136"
    },
    {
      "type": "WEB",
      "url": "https://www.debian.org/security/2018/dsa-4326"
    },
    {
      "type": "WEB",
      "url": "https://usn.ubuntu.com/3824-1"
    },
    {
      "type": "WEB",
      "url": "https://usn.ubuntu.com/3804-1"
    },
    {
      "type": "WEB",
      "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03952en_us"
    },
    {
      "type": "WEB",
      "url": "https://security.netapp.com/advisory/ntap-20181018-0001"
    },
    {
      "type": "WEB",
      "url": "https://security.gentoo.org/glsa/201908-10"
    },
    {
      "type": "WEB",
      "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00026.html"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2018:3852"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2018:3779"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2018:3672"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2018:3671"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2018:3534"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2018:3533"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2018:3521"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2018:3409"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2018:3350"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2018:3008"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2018:3007"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2018:3003"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2018:3002"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2018:3001"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2018:3000"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2018:2943"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2018:2942"
    },
    {
      "type": "WEB",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/105601"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1041889"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N",
      "type": "CVSS_V3"
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2018-3136",
    "description": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.4 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N).",
    "id": "GSD-2018-3136",
    "references": [
      "https://www.suse.com/security/cve/CVE-2018-3136.html",
      "https://www.debian.org/security/2018/dsa-4326",
      "https://access.redhat.com/errata/RHSA-2018:3852",
      "https://access.redhat.com/errata/RHSA-2018:3779",
      "https://access.redhat.com/errata/RHSA-2018:3672",
      "https://access.redhat.com/errata/RHSA-2018:3671",
      "https://access.redhat.com/errata/RHSA-2018:3534",
      "https://access.redhat.com/errata/RHSA-2018:3533",
      "https://access.redhat.com/errata/RHSA-2018:3521",
      "https://access.redhat.com/errata/RHSA-2018:3409",
      "https://access.redhat.com/errata/RHSA-2018:3350",
      "https://access.redhat.com/errata/RHSA-2018:3008",
      "https://access.redhat.com/errata/RHSA-2018:3007",
      "https://access.redhat.com/errata/RHSA-2018:3003",
      "https://access.redhat.com/errata/RHSA-2018:3002",
      "https://access.redhat.com/errata/RHSA-2018:3001",
      "https://access.redhat.com/errata/RHSA-2018:3000",
      "https://access.redhat.com/errata/RHSA-2018:2943",
      "https://access.redhat.com/errata/RHSA-2018:2942",
      "https://ubuntu.com/security/CVE-2018-3136",
      "https://advisories.mageia.org/CVE-2018-3136.html",
      "https://alas.aws.amazon.com/cve/html/CVE-2018-3136.html",
      "https://linux.oracle.com/cve/CVE-2018-3136.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2018-3136"
      ],
      "details": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.4 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N).",
      "id": "GSD-2018-3136",
      "modified": "2023-12-13T01:22:43.551169Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert_us@oracle.com",
        "ID": "CVE-2018-3136",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Java",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "Java SE: 6u201, 7u191, 8u181, 11"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "; Java SE Embedded: 8u181"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Oracle Corporation"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.4 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N)."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data."
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "[debian-lts-announce] 20181122 [SECURITY] [DLA 1590-1] openjdk-7 security update",
            "refsource": "MLIST",
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00026.html"
          },
          {
            "name": "RHSA-2018:3007",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2018:3007"
          },
          {
            "name": "https://security.netapp.com/advisory/ntap-20181018-0001/",
            "refsource": "CONFIRM",
            "url": "https://security.netapp.com/advisory/ntap-20181018-0001/"
          },
          {
            "name": "RHSA-2018:2942",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2018:2942"
          },
          {
            "name": "RHSA-2018:3779",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2018:3779"
          },
          {
            "name": "RHSA-2018:3534",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2018:3534"
          },
          {
            "name": "RHSA-2018:3350",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2018:3350"
          },
          {
            "name": "105601",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/105601"
          },
          {
            "name": "RHSA-2018:3003",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2018:3003"
          },
          {
            "name": "USN-3804-1",
            "refsource": "UBUNTU",
            "url": "https://usn.ubuntu.com/3804-1/"
          },
          {
            "name": "RHSA-2018:3002",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2018:3002"
          },
          {
            "name": "RHSA-2018:3671",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2018:3671"
          },
          {
            "name": "RHSA-2018:3852",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2018:3852"
          },
          {
            "name": "DSA-4326",
            "refsource": "DEBIAN",
            "url": "https://www.debian.org/security/2018/dsa-4326"
          },
          {
            "name": "USN-3824-1",
            "refsource": "UBUNTU",
            "url": "https://usn.ubuntu.com/3824-1/"
          },
          {
            "name": "RHSA-2018:2943",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2018:2943"
          },
          {
            "name": "RHSA-2018:3008",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2018:3008"
          },
          {
            "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
            "refsource": "CONFIRM",
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
          },
          {
            "name": "RHSA-2018:3533",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2018:3533"
          },
          {
            "name": "RHSA-2018:3409",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2018:3409"
          },
          {
            "name": "RHSA-2018:3001",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2018:3001"
          },
          {
            "name": "RHSA-2018:3000",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2018:3000"
          },
          {
            "name": "1041889",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1041889"
          },
          {
            "name": "RHSA-2018:3672",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2018:3672"
          },
          {
            "name": "RHSA-2018:3521",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2018:3521"
          },
          {
            "name": "GLSA-201908-10",
            "refsource": "GENTOO",
            "url": "https://security.gentoo.org/glsa/201908-10"
          },
          {
            "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03952en_us",
            "refsource": "CONFIRM",
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03952en_us"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:oracle:jdk:11.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:jre:11.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:jdk:1.8.0:update181:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:jdk:1.8.0:update182:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:jdk:1.7.0:update191:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:jdk:1.6.0:update201:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:jre:1.6.0:update201:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:jre:1.7.0:update191:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:jre:1.8.0:update181:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:jre:1.8.0:update182:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "8.6.3-00",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2018-3136"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.4 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-noinfo"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
              "refsource": "CONFIRM",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
            },
            {
              "name": "1041889",
              "refsource": "SECTRACK",
              "tags": [
                "Broken Link",
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securitytracker.com/id/1041889"
            },
            {
              "name": "105601",
              "refsource": "BID",
              "tags": [
                "Broken Link",
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securityfocus.com/bid/105601"
            },
            {
              "name": "RHSA-2018:2943",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2018:2943"
            },
            {
              "name": "RHSA-2018:2942",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2018:2942"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20181018-0001/",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://security.netapp.com/advisory/ntap-20181018-0001/"
            },
            {
              "name": "RHSA-2018:3008",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2018:3008"
            },
            {
              "name": "RHSA-2018:3007",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2018:3007"
            },
            {
              "name": "RHSA-2018:3003",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2018:3003"
            },
            {
              "name": "RHSA-2018:3002",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2018:3002"
            },
            {
              "name": "RHSA-2018:3001",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2018:3001"
            },
            {
              "name": "RHSA-2018:3000",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2018:3000"
            },
            {
              "name": "DSA-4326",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://www.debian.org/security/2018/dsa-4326"
            },
            {
              "name": "USN-3804-1",
              "refsource": "UBUNTU",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://usn.ubuntu.com/3804-1/"
            },
            {
              "name": "RHSA-2018:3409",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2018:3409"
            },
            {
              "name": "RHSA-2018:3350",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2018:3350"
            },
            {
              "name": "RHSA-2018:3521",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2018:3521"
            },
            {
              "name": "RHSA-2018:3534",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2018:3534"
            },
            {
              "name": "RHSA-2018:3533",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2018:3533"
            },
            {
              "name": "USN-3824-1",
              "refsource": "UBUNTU",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://usn.ubuntu.com/3824-1/"
            },
            {
              "name": "[debian-lts-announce] 20181122 [SECURITY] [DLA 1590-1] openjdk-7 security update",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00026.html"
            },
            {
              "name": "RHSA-2018:3672",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2018:3672"
            },
            {
              "name": "RHSA-2018:3671",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2018:3671"
            },
            {
              "name": "RHSA-2018:3779",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2018:3779"
            },
            {
              "name": "RHSA-2018:3852",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2018:3852"
            },
            {
              "name": "GLSA-201908-10",
              "refsource": "GENTOO",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://security.gentoo.org/glsa/201908-10"
            },
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03952en_us",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03952en_us"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 2.6,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 4.9,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "LOW",
          "userInteractionRequired": true
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.4,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 1.6,
          "impactScore": 1.4
        }
      },
      "lastModifiedDate": "2022-06-27T17:34Z",
      "publishedDate": "2018-10-17T01:31Z"
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for java-1_8_0-openjdk",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for java-1_8_0-openjdk to version 8u191 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-3136: Manifest better support (bsc#1112142)\n- CVE-2018-3139: Better HTTP Redirection (bsc#1112143)\n- CVE-2018-3149: Enhance JNDI lookups (bsc#1112144)\n- CVE-2018-3169: Improve field accesses (bsc#1112146)\n- CVE-2018-3180: Improve TLS connections stability (bsc#1112147)\n- CVE-2018-3214: Better RIFF reading support (bsc#1112152)\n- CVE-2018-13785: Upgrade JDK 8u to libpng 1.6.35 (bsc#1112153)\n- CVE-2018-3183: Improve script engine support (bsc#1112148)\n- CVE-2018-16435: heap-based buffer overflow in SetData function in cmsIT8LoadFromFile\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2019-43",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_0043-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2019:0043-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U4E6TD23MZPFSCCET3CCXBOEPKA4LWCJ/#U4E6TD23MZPFSCCET3CCXBOEPKA4LWCJ"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2019:0043-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U4E6TD23MZPFSCCET3CCXBOEPKA4LWCJ/#U4E6TD23MZPFSCCET3CCXBOEPKA4LWCJ"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1112142",
        "url": "https://bugzilla.suse.com/1112142"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1112143",
        "url": "https://bugzilla.suse.com/1112143"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1112144",
        "url": "https://bugzilla.suse.com/1112144"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1112146",
        "url": "https://bugzilla.suse.com/1112146"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1112147",
        "url": "https://bugzilla.suse.com/1112147"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1112148",
        "url": "https://bugzilla.suse.com/1112148"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1112152",
        "url": "https://bugzilla.suse.com/1112152"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1112153",
        "url": "https://bugzilla.suse.com/1112153"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-13785 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-13785/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16435 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16435/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-3136 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-3136/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-3139 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-3139/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-3149 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-3149/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-3169 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-3169/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-3180 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-3180/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-3183 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-3183/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-3214 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-3214/"
      }
    ],
    "title": "Security update for java-1_8_0-openjdk",
    "tracking": {
      "current_release_date": "2019-03-23T10:45:25Z",
      "generator": {
        "date": "2019-03-23T10:45:25Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2019:0043-1",
      "initial_release_date": "2019-03-23T10:45:25Z",
      "revision_history": [
        {
          "date": "2019-03-23T10:45:25Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
                "product": {
                  "name": "java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
                  "product_id": "java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
                "product": {
                  "name": "java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
                  "product_id": "java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
                "product": {
                  "name": "java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
                  "product_id": "java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
                "product": {
                  "name": "java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
                  "product_id": "java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
                "product": {
                  "name": "java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
                  "product_id": "java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
                "product": {
                  "name": "java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
                  "product_id": "java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
                "product": {
                  "name": "java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
                  "product_id": "java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
                "product": {
                  "name": "java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
                  "product_id": "java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
                "product": {
                  "name": "java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
                  "product_id": "java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
                "product": {
                  "name": "java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
                  "product_id": "java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
                "product": {
                  "name": "java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
                  "product_id": "java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
                "product": {
                  "name": "java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
                  "product_id": "java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64",
                "product": {
                  "name": "java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64",
                  "product_id": "java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.0",
                "product": {
                  "name": "openSUSE Leap 15.0",
                  "product_id": "openSUSE Leap 15.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586"
        },
        "product_reference": "java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64"
        },
        "product_reference": "java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586"
        },
        "product_reference": "java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64"
        },
        "product_reference": "java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586"
        },
        "product_reference": "java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64"
        },
        "product_reference": "java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586"
        },
        "product_reference": "java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64"
        },
        "product_reference": "java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586"
        },
        "product_reference": "java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64"
        },
        "product_reference": "java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch"
        },
        "product_reference": "java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586"
        },
        "product_reference": "java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64 as component of openSUSE Leap 15.0",
          "product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
        },
        "product_reference": "java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-13785",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-13785"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-13785",
          "url": "https://www.suse.com/security/cve/CVE-2018-13785"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1100687 for CVE-2018-13785",
          "url": "https://bugzilla.suse.com/1100687"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112153 for CVE-2018-13785",
          "url": "https://bugzilla.suse.com/1112153"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1116574 for CVE-2018-13785",
          "url": "https://bugzilla.suse.com/1116574"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-03-23T10:45:25Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-13785"
    },
    {
      "cve": "CVE-2018-16435",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16435"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16435",
          "url": "https://www.suse.com/security/cve/CVE-2018-16435"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1108813 for CVE-2018-16435",
          "url": "https://bugzilla.suse.com/1108813"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-03-23T10:45:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16435"
    },
    {
      "cve": "CVE-2018-3136",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-3136"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.4 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-3136",
          "url": "https://www.suse.com/security/cve/CVE-2018-3136"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112142 for CVE-2018-3136",
          "url": "https://bugzilla.suse.com/1112142"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112143 for CVE-2018-3136",
          "url": "https://bugzilla.suse.com/1112143"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112144 for CVE-2018-3136",
          "url": "https://bugzilla.suse.com/1112144"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112146 for CVE-2018-3136",
          "url": "https://bugzilla.suse.com/1112146"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112148 for CVE-2018-3136",
          "url": "https://bugzilla.suse.com/1112148"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112152 for CVE-2018-3136",
          "url": "https://bugzilla.suse.com/1112152"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1116574 for CVE-2018-3136",
          "url": "https://bugzilla.suse.com/1116574"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-03-23T10:45:25Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-3136"
    },
    {
      "cve": "CVE-2018-3139",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-3139"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-3139",
          "url": "https://www.suse.com/security/cve/CVE-2018-3139"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112142 for CVE-2018-3139",
          "url": "https://bugzilla.suse.com/1112142"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112143 for CVE-2018-3139",
          "url": "https://bugzilla.suse.com/1112143"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112144 for CVE-2018-3139",
          "url": "https://bugzilla.suse.com/1112144"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112146 for CVE-2018-3139",
          "url": "https://bugzilla.suse.com/1112146"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112148 for CVE-2018-3139",
          "url": "https://bugzilla.suse.com/1112148"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112152 for CVE-2018-3139",
          "url": "https://bugzilla.suse.com/1112152"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1116574 for CVE-2018-3139",
          "url": "https://bugzilla.suse.com/1116574"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-03-23T10:45:25Z",
          "details": "low"
        }
      ],
      "title": "CVE-2018-3139"
    },
    {
      "cve": "CVE-2018-3149",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-3149"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-3149",
          "url": "https://www.suse.com/security/cve/CVE-2018-3149"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112142 for CVE-2018-3149",
          "url": "https://bugzilla.suse.com/1112142"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112143 for CVE-2018-3149",
          "url": "https://bugzilla.suse.com/1112143"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112144 for CVE-2018-3149",
          "url": "https://bugzilla.suse.com/1112144"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112146 for CVE-2018-3149",
          "url": "https://bugzilla.suse.com/1112146"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112148 for CVE-2018-3149",
          "url": "https://bugzilla.suse.com/1112148"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112152 for CVE-2018-3149",
          "url": "https://bugzilla.suse.com/1112152"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1116574 for CVE-2018-3149",
          "url": "https://bugzilla.suse.com/1116574"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-03-23T10:45:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-3149"
    },
    {
      "cve": "CVE-2018-3169",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-3169"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g. code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-3169",
          "url": "https://www.suse.com/security/cve/CVE-2018-3169"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112142 for CVE-2018-3169",
          "url": "https://bugzilla.suse.com/1112142"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112143 for CVE-2018-3169",
          "url": "https://bugzilla.suse.com/1112143"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112144 for CVE-2018-3169",
          "url": "https://bugzilla.suse.com/1112144"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112146 for CVE-2018-3169",
          "url": "https://bugzilla.suse.com/1112146"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112148 for CVE-2018-3169",
          "url": "https://bugzilla.suse.com/1112148"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112152 for CVE-2018-3169",
          "url": "https://bugzilla.suse.com/1112152"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1116574 for CVE-2018-3169",
          "url": "https://bugzilla.suse.com/1116574"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-03-23T10:45:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-3169"
    },
    {
      "cve": "CVE-2018-3180",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-3180"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-3180",
          "url": "https://www.suse.com/security/cve/CVE-2018-3180"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112142 for CVE-2018-3180",
          "url": "https://bugzilla.suse.com/1112142"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112143 for CVE-2018-3180",
          "url": "https://bugzilla.suse.com/1112143"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112144 for CVE-2018-3180",
          "url": "https://bugzilla.suse.com/1112144"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112146 for CVE-2018-3180",
          "url": "https://bugzilla.suse.com/1112146"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112147 for CVE-2018-3180",
          "url": "https://bugzilla.suse.com/1112147"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112148 for CVE-2018-3180",
          "url": "https://bugzilla.suse.com/1112148"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112152 for CVE-2018-3180",
          "url": "https://bugzilla.suse.com/1112152"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1116574 for CVE-2018-3180",
          "url": "https://bugzilla.suse.com/1116574"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-03-23T10:45:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-3180"
    },
    {
      "cve": "CVE-2018-3183",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-3183"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting). Supported versions that are affected are Java SE: 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-3183",
          "url": "https://www.suse.com/security/cve/CVE-2018-3183"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112142 for CVE-2018-3183",
          "url": "https://bugzilla.suse.com/1112142"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112143 for CVE-2018-3183",
          "url": "https://bugzilla.suse.com/1112143"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112144 for CVE-2018-3183",
          "url": "https://bugzilla.suse.com/1112144"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112146 for CVE-2018-3183",
          "url": "https://bugzilla.suse.com/1112146"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112148 for CVE-2018-3183",
          "url": "https://bugzilla.suse.com/1112148"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112152 for CVE-2018-3183",
          "url": "https://bugzilla.suse.com/1112152"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1116574 for CVE-2018-3183",
          "url": "https://bugzilla.suse.com/1116574"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1120714 for CVE-2018-3183",
          "url": "https://bugzilla.suse.com/1120714"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-03-23T10:45:25Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2018-3183"
    },
    {
      "cve": "CVE-2018-3214",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-3214"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound). Supported versions that are affected are Java SE: 6u201, 7u191 and 8u182; Java SE Embedded: 8u181; JRockit: R28.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g. through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
          "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-3214",
          "url": "https://www.suse.com/security/cve/CVE-2018-3214"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112142 for CVE-2018-3214",
          "url": "https://bugzilla.suse.com/1112142"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112143 for CVE-2018-3214",
          "url": "https://bugzilla.suse.com/1112143"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112144 for CVE-2018-3214",
          "url": "https://bugzilla.suse.com/1112144"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112146 for CVE-2018-3214",
          "url": "https://bugzilla.suse.com/1112146"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112148 for CVE-2018-3214",
          "url": "https://bugzilla.suse.com/1112148"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112152 for CVE-2018-3214",
          "url": "https://bugzilla.suse.com/1112152"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1116574 for CVE-2018-3214",
          "url": "https://bugzilla.suse.com/1116574"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.191-lp150.2.9.2.x86_64",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.191-lp150.2.9.2.noarch",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.i586",
            "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.191-lp150.2.9.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-03-23T10:45:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-3214"
    }
  ]
}