Vulnerability-Lookup

SUSE-SU-2023:4614-1

Vulnerability from csaf_suse - Published: 2023-11-29 14:48 - Updated: 2026-09-20 15:32

Summary

Security update for java-1_8_0-ibm

Severity

Important

Notes

Title of the patch: Security update for java-1_8_0-ibm

Description of the patch: This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 8 Fix Pack 15: * Oracle October 17 2023 CPU [bsc#1216640] Security fixes: - CVE-2023-22081: Fixed enhanced TLS connections (bsc#1216374) - CVE-2023-22067: Fixed IOR deserialization issue in CORBA (bsc#1216379) - CVE-2023-22025: Fixed memory corruption issue on x86_64 with AVX-512 (bsc#1216339) - CVE-2023-5676: Fixed receiving a signal before initialization may lead to an infinite loop or unexpected crash (bsc#1217214) Bug fixes: - IBM Java idlj compiler switch definition because IBM java idlj seems to confuse char and wchar for typedef types (bsc#1204264).

Patchnames: SUSE-2023-4614,SUSE-SLE-SDK-12-SP5-2023-4614,SUSE-SLE-SERVER-12-SP5-2023-4614

CVE-2023-22025

3.7 (Low)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 17 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-alsa-0:1.8.0_sr8.15-30.117.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-plugin-0:1.8.0_sr8.15-30.117.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2023-22067

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 17 products, the same list as for CVE-2023-22025

Threats

Impact moderate

CVE-2023-22081

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 17 products, the same list as for CVE-2023-22025

Threats

Impact moderate

CVE-2023-5676

6.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 17 products, the same list as for CVE-2023-22025

Threats

Impact moderate

References

22 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/1204264	self
https://bugzilla.suse.com/1216339	self
https://bugzilla.suse.com/1216374	self
https://bugzilla.suse.com/1216379	self
https://bugzilla.suse.com/1216640	self
https://bugzilla.suse.com/1217214	self
https://www.suse.com/security/cve/CVE-2023-22025/	self
https://www.suse.com/security/cve/CVE-2023-22067/	self
https://www.suse.com/security/cve/CVE-2023-22081/	self
https://www.suse.com/security/cve/CVE-2023-5676/	self
https://www.suse.com/security/cve/CVE-2023-22025	external
https://bugzilla.suse.com/1216339	external
https://www.suse.com/security/cve/CVE-2023-22067	external
https://bugzilla.suse.com/1216379	external
https://www.suse.com/security/cve/CVE-2023-22081	external
https://bugzilla.suse.com/1216374	external
https://www.suse.com/security/cve/CVE-2023-5676	external
https://bugzilla.suse.com/1217214	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for java-1_8_0-ibm",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for java-1_8_0-ibm fixes the following issues:\n\n- Update to Java 8.0 Service Refresh 8 Fix Pack 15:\n  * Oracle October 17 2023 CPU [bsc#1216640]\n\nSecurity fixes:\n\n- CVE-2023-22081: Fixed enhanced TLS connections (bsc#1216374)\n- CVE-2023-22067: Fixed IOR deserialization issue in CORBA (bsc#1216379)\n- CVE-2023-22025: Fixed memory corruption issue on x86_64 with AVX-512 (bsc#1216339)\n- CVE-2023-5676: Fixed receiving a signal before initialization may lead to an infinite loop or unexpected crash (bsc#1217214)\n\nBug fixes:\n\n- IBM Java idlj compiler switch definition because IBM java idlj seems to confuse char and wchar for typedef types (bsc#1204264).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2023-4614,SUSE-SLE-SDK-12-SP5-2023-4614,SUSE-SLE-SERVER-12-SP5-2023-4614",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_4614-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2023:4614-1",
        "url": "https://www.suse.com/support/update/announcement/2023/suse-su-20234614-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2023:4614-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-November/017258.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1204264",
        "url": "https://bugzilla.suse.com/1204264"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1216339",
        "url": "https://bugzilla.suse.com/1216339"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1216374",
        "url": "https://bugzilla.suse.com/1216374"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1216379",
        "url": "https://bugzilla.suse.com/1216379"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1216640",
        "url": "https://bugzilla.suse.com/1216640"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1217214",
        "url": "https://bugzilla.suse.com/1217214"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-22025 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-22025/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-22067 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-22067/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-22081 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-22081/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-5676 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-5676/"
      }
    ],
    "title": "Security update for java-1_8_0-ibm",
    "tracking": {
      "current_release_date": "2026-09-20T15:32:36Z",
      "generator": {
        "date": "2023-11-29T14:48:45Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2023:4614-1",
      "initial_release_date": "2023-11-29T14:48:45Z",
      "revision_history": [
        {
          "date": "2023-11-29T14:48:45Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T15:32:36Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.i586",
                "product": {
                  "name": "java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.i586",
                  "product_id": "java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm@1.8.0_sr8.15-30.117.1?arch=i586\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-alsa-0:1.8.0_sr8.15-30.117.1.i586",
                "product": {
                  "name": "java-1_8_0-ibm-alsa-0:1.8.0_sr8.15-30.117.1.i586",
                  "product_id": "java-1_8_0-ibm-alsa-0:1.8.0_sr8.15-30.117.1.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm-alsa@1.8.0_sr8.15-30.117.1?arch=i586\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-demo-0:1.8.0_sr8.15-30.117.1.i586",
                "product": {
                  "name": "java-1_8_0-ibm-demo-0:1.8.0_sr8.15-30.117.1.i586",
                  "product_id": "java-1_8_0-ibm-demo-0:1.8.0_sr8.15-30.117.1.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm-demo@1.8.0_sr8.15-30.117.1?arch=i586\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.i586",
                "product": {
                  "name": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.i586",
                  "product_id": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm-devel@1.8.0_sr8.15-30.117.1?arch=i586\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-plugin-0:1.8.0_sr8.15-30.117.1.i586",
                "product": {
                  "name": "java-1_8_0-ibm-plugin-0:1.8.0_sr8.15-30.117.1.i586",
                  "product_id": "java-1_8_0-ibm-plugin-0:1.8.0_sr8.15-30.117.1.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm-plugin@1.8.0_sr8.15-30.117.1?arch=i586\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-src-0:1.8.0_sr8.15-30.117.1.i586",
                "product": {
                  "name": "java-1_8_0-ibm-src-0:1.8.0_sr8.15-30.117.1.i586",
                  "product_id": "java-1_8_0-ibm-src-0:1.8.0_sr8.15-30.117.1.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm-src@1.8.0_sr8.15-30.117.1?arch=i586\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.ppc64le",
                "product": {
                  "name": "java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.ppc64le",
                  "product_id": "java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm@1.8.0_sr8.15-30.117.1?arch=ppc64le\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-demo-0:1.8.0_sr8.15-30.117.1.ppc64le",
                "product": {
                  "name": "java-1_8_0-ibm-demo-0:1.8.0_sr8.15-30.117.1.ppc64le",
                  "product_id": "java-1_8_0-ibm-demo-0:1.8.0_sr8.15-30.117.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm-demo@1.8.0_sr8.15-30.117.1?arch=ppc64le\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
                "product": {
                  "name": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
                  "product_id": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm-devel@1.8.0_sr8.15-30.117.1?arch=ppc64le\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-src-0:1.8.0_sr8.15-30.117.1.ppc64le",
                "product": {
                  "name": "java-1_8_0-ibm-src-0:1.8.0_sr8.15-30.117.1.ppc64le",
                  "product_id": "java-1_8_0-ibm-src-0:1.8.0_sr8.15-30.117.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm-src@1.8.0_sr8.15-30.117.1?arch=ppc64le\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.s390",
                "product": {
                  "name": "java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.s390",
                  "product_id": "java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.s390",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm@1.8.0_sr8.15-30.117.1?arch=s390\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-demo-0:1.8.0_sr8.15-30.117.1.s390",
                "product": {
                  "name": "java-1_8_0-ibm-demo-0:1.8.0_sr8.15-30.117.1.s390",
                  "product_id": "java-1_8_0-ibm-demo-0:1.8.0_sr8.15-30.117.1.s390",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm-demo@1.8.0_sr8.15-30.117.1?arch=s390\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390",
                "product": {
                  "name": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390",
                  "product_id": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm-devel@1.8.0_sr8.15-30.117.1?arch=s390\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-src-0:1.8.0_sr8.15-30.117.1.s390",
                "product": {
                  "name": "java-1_8_0-ibm-src-0:1.8.0_sr8.15-30.117.1.s390",
                  "product_id": "java-1_8_0-ibm-src-0:1.8.0_sr8.15-30.117.1.s390",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm-src@1.8.0_sr8.15-30.117.1?arch=s390\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.s390x",
                "product": {
                  "name": "java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.s390x",
                  "product_id": "java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm@1.8.0_sr8.15-30.117.1?arch=s390x\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-32bit-0:1.8.0_sr8.15-30.117.1.s390x",
                "product": {
                  "name": "java-1_8_0-ibm-32bit-0:1.8.0_sr8.15-30.117.1.s390x",
                  "product_id": "java-1_8_0-ibm-32bit-0:1.8.0_sr8.15-30.117.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm-32bit@1.8.0_sr8.15-30.117.1?arch=s390x\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-demo-0:1.8.0_sr8.15-30.117.1.s390x",
                "product": {
                  "name": "java-1_8_0-ibm-demo-0:1.8.0_sr8.15-30.117.1.s390x",
                  "product_id": "java-1_8_0-ibm-demo-0:1.8.0_sr8.15-30.117.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm-demo@1.8.0_sr8.15-30.117.1?arch=s390x\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
                "product": {
                  "name": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
                  "product_id": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm-devel@1.8.0_sr8.15-30.117.1?arch=s390x\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-devel-32bit-0:1.8.0_sr8.15-30.117.1.s390x",
                "product": {
                  "name": "java-1_8_0-ibm-devel-32bit-0:1.8.0_sr8.15-30.117.1.s390x",
                  "product_id": "java-1_8_0-ibm-devel-32bit-0:1.8.0_sr8.15-30.117.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm-devel-32bit@1.8.0_sr8.15-30.117.1?arch=s390x\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-src-0:1.8.0_sr8.15-30.117.1.s390x",
                "product": {
                  "name": "java-1_8_0-ibm-src-0:1.8.0_sr8.15-30.117.1.s390x",
                  "product_id": "java-1_8_0-ibm-src-0:1.8.0_sr8.15-30.117.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm-src@1.8.0_sr8.15-30.117.1?arch=s390x\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.x86_64",
                "product": {
                  "name": "java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.x86_64",
                  "product_id": "java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm@1.8.0_sr8.15-30.117.1?arch=x86_64\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-32bit-0:1.8.0_sr8.15-30.117.1.x86_64",
                "product": {
                  "name": "java-1_8_0-ibm-32bit-0:1.8.0_sr8.15-30.117.1.x86_64",
                  "product_id": "java-1_8_0-ibm-32bit-0:1.8.0_sr8.15-30.117.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm-32bit@1.8.0_sr8.15-30.117.1?arch=x86_64\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-alsa-0:1.8.0_sr8.15-30.117.1.x86_64",
                "product": {
                  "name": "java-1_8_0-ibm-alsa-0:1.8.0_sr8.15-30.117.1.x86_64",
                  "product_id": "java-1_8_0-ibm-alsa-0:1.8.0_sr8.15-30.117.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm-alsa@1.8.0_sr8.15-30.117.1?arch=x86_64\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-demo-0:1.8.0_sr8.15-30.117.1.x86_64",
                "product": {
                  "name": "java-1_8_0-ibm-demo-0:1.8.0_sr8.15-30.117.1.x86_64",
                  "product_id": "java-1_8_0-ibm-demo-0:1.8.0_sr8.15-30.117.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm-demo@1.8.0_sr8.15-30.117.1?arch=x86_64\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
                "product": {
                  "name": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
                  "product_id": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm-devel@1.8.0_sr8.15-30.117.1?arch=x86_64\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-devel-32bit-0:1.8.0_sr8.15-30.117.1.x86_64",
                "product": {
                  "name": "java-1_8_0-ibm-devel-32bit-0:1.8.0_sr8.15-30.117.1.x86_64",
                  "product_id": "java-1_8_0-ibm-devel-32bit-0:1.8.0_sr8.15-30.117.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm-devel-32bit@1.8.0_sr8.15-30.117.1?arch=x86_64\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-plugin-0:1.8.0_sr8.15-30.117.1.x86_64",
                "product": {
                  "name": "java-1_8_0-ibm-plugin-0:1.8.0_sr8.15-30.117.1.x86_64",
                  "product_id": "java-1_8_0-ibm-plugin-0:1.8.0_sr8.15-30.117.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm-plugin@1.8.0_sr8.15-30.117.1?arch=x86_64\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1_8_0-ibm-src-0:1.8.0_sr8.15-30.117.1.x86_64",
                "product": {
                  "name": "java-1_8_0-ibm-src-0:1.8.0_sr8.15-30.117.1.x86_64",
                  "product_id": "java-1_8_0-ibm-src-0:1.8.0_sr8.15-30.117.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:ibm:java:1.8.0_sr8.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/java-1_8_0-ibm-src@1.8.0_sr8.15-30.117.1?arch=x86_64\u0026upstream=java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-sdk:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 12 SP5",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-hpc:12:sp5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le"
        },
        "product_reference": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x"
        },
        "product_reference": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64"
        },
        "product_reference": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le"
        },
        "product_reference": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x"
        },
        "product_reference": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64"
        },
        "product_reference": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le"
        },
        "product_reference": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x"
        },
        "product_reference": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64"
        },
        "product_reference": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.ppc64le"
        },
        "product_reference": "java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.s390x"
        },
        "product_reference": "java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.x86_64"
        },
        "product_reference": "java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-ibm-alsa-0:1.8.0_sr8.15-30.117.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-alsa-0:1.8.0_sr8.15-30.117.1.x86_64"
        },
        "product_reference": "java-1_8_0-ibm-alsa-0:1.8.0_sr8.15-30.117.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le"
        },
        "product_reference": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x"
        },
        "product_reference": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64"
        },
        "product_reference": "java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1_8_0-ibm-plugin-0:1.8.0_sr8.15-30.117.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-plugin-0:1.8.0_sr8.15-30.117.1.x86_64"
        },
        "product_reference": "java-1_8_0-ibm-plugin-0:1.8.0_sr8.15-30.117.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-22025",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-22025"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-alsa-0:1.8.0_sr8.15-30.117.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-plugin-0:1.8.0_sr8.15-30.117.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-22025",
          "url": "https://www.suse.com/security/cve/CVE-2023-22025"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1216339 for CVE-2023-22025",
          "url": "https://bugzilla.suse.com/1216339"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-alsa-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-plugin-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-alsa-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-plugin-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-11-29T14:48:45Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-22025"
    },
    {
      "cve": "CVE-2023-22067",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-22067"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-alsa-0:1.8.0_sr8.15-30.117.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-plugin-0:1.8.0_sr8.15-30.117.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-22067",
          "url": "https://www.suse.com/security/cve/CVE-2023-22067"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1216379 for CVE-2023-22067",
          "url": "https://bugzilla.suse.com/1216379"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-alsa-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-plugin-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-alsa-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-plugin-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-11-29T14:48:45Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-22067"
    },
    {
      "cve": "CVE-2023-22081",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-22081"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-alsa-0:1.8.0_sr8.15-30.117.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-plugin-0:1.8.0_sr8.15-30.117.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-22081",
          "url": "https://www.suse.com/security/cve/CVE-2023-22081"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1216374 for CVE-2023-22081",
          "url": "https://bugzilla.suse.com/1216374"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-alsa-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-plugin-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-alsa-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-plugin-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-11-29T14:48:45Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-22081"
    },
    {
      "cve": "CVE-2023-5676",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-5676"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.\n",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-alsa-0:1.8.0_sr8.15-30.117.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-plugin-0:1.8.0_sr8.15-30.117.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-5676",
          "url": "https://www.suse.com/security/cve/CVE-2023-5676"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1217214 for CVE-2023-5676",
          "url": "https://bugzilla.suse.com/1217214"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-alsa-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-plugin-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-alsa-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12 SP5:java-1_8_0-ibm-plugin-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:java-1_8_0-ibm-devel-0:1.8.0_sr8.15-30.117.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-11-29T14:48:45Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-5676"
    }
  ]
}

CVE-2023-22025 (GCVE-0-2023-22025)

Vulnerability from cvelistv5 – Published: 2023-10-17 21:02 – Updated: 2024-09-13 16:36

Summary

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u381-perf, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 21.3.7 and 22.3.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition,. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-13 16:28 UTC

CWE

Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition,. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, accessible data.

Assigner

oracle mitre root

References

3 references

URL	Tags
https://www.oracle.com/security-alerts/cpuoct2023.html	vendor-advisory
https://security.netapp.com/advisory/ntap-2023102…
https://www.debian.org/security/2023/dsa-5548

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	Java SE JDK and JRE	Affected: Oracle Java SE:8u381-perf Affected: Oracle Java SE:17.0.8 Affected: Oracle Java SE:21 Affected: Oracle GraalVM for JDK:17.0.8 Affected: Oracle GraalVM for JDK:21 Affected: Oracle GraalVM Enterprise Edition:21.3.7 Affected: Oracle GraalVM Enterprise Edition:22.3.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T09:59:28.998Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Oracle Advisory",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuoct2023.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20231027-0006/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5548"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-22025",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-13T16:28:29.558794Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-13T16:36:38.444Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Java SE JDK and JRE",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Oracle Java SE:8u381-perf"
            },
            {
              "status": "affected",
              "version": "Oracle Java SE:17.0.8"
            },
            {
              "status": "affected",
              "version": "Oracle Java SE:21"
            },
            {
              "status": "affected",
              "version": "Oracle GraalVM for JDK:17.0.8"
            },
            {
              "status": "affected",
              "version": "Oracle GraalVM for JDK:21"
            },
            {
              "status": "affected",
              "version": "Oracle GraalVM Enterprise Edition:21.3.7"
            },
            {
              "status": "affected",
              "version": "Oracle GraalVM Enterprise Edition:22.3.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u381-perf, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 21.3.7 and  22.3.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition,.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition,.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, accessible data.",
              "lang": "en-US"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-08T04:14:29.313Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "Oracle Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuoct2023.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20231027-0006/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5548"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2023-22025",
    "datePublished": "2023-10-17T21:02:47.615Z",
    "dateReserved": "2022-12-17T19:26:00.752Z",
    "dateUpdated": "2024-09-13T16:36:38.444Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-22067 (GCVE-0-2023-22067)

Vulnerability from cvelistv5 – Published: 2023-10-17 21:02 – Updated: 2025-11-03 21:47

Summary

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf; Oracle GraalVM Enterprise Edition: 20.3.11 and 21.3.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via CORBA to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-06-12 15:07 UTC

CWE

Easily exploitable vulnerability allows unauthenticated attacker with network access via CORBA to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data.
CWE-863 - Incorrect Authorization

Assigner

oracle mitre root

References

4 references

URL	Tags
https://www.oracle.com/security-alerts/cpuoct2023.html	vendor-advisory
https://security.netapp.com/advisory/ntap-2023102…
https://www.debian.org/security/2023/dsa-5537
https://security.netapp.com/advisory/ntap-2024110…

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	Java SE JDK and JRE	Affected: Oracle Java SE:8u381 Affected: Oracle Java SE:8u381-perf Affected: Oracle GraalVM Enterprise Edition:20.3.11 Affected: Oracle GraalVM Enterprise Edition:21.3.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:47:12.520Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Oracle Advisory",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuoct2023.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20231027-0006/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5537"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20241108-0002/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-22067",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-12T15:07:56.284068Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-863",
                "description": "CWE-863 Incorrect Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-12T15:09:22.407Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Java SE JDK and JRE",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Oracle Java SE:8u381"
            },
            {
              "status": "affected",
              "version": "Oracle Java SE:8u381-perf"
            },
            {
              "status": "affected",
              "version": "Oracle GraalVM Enterprise Edition:20.3.11"
            },
            {
              "status": "affected",
              "version": "Oracle GraalVM Enterprise Edition:21.3.7"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf; Oracle GraalVM Enterprise Edition: 20.3.11 and  21.3.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via CORBA to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows unauthenticated attacker with network access via CORBA to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data.",
              "lang": "en-US"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-08T04:14:08.574Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "Oracle Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuoct2023.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20231027-0006/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5537"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2023-22067",
    "datePublished": "2023-10-17T21:02:50.986Z",
    "dateReserved": "2022-12-17T19:26:00.757Z",
    "dateUpdated": "2025-11-03T21:47:12.520Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-22081 (GCVE-0-2023-22081)

Vulnerability from cvelistv5 – Published: 2023-10-17 21:02 – Updated: 2026-05-28 17:34

Summary

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and 22.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-06-03 15:53 UTC

CWE

Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.
CWE-noinfo Not enough information

Assigner

oracle mitre root

References

6 references

URL	Tags
https://www.oracle.com/security-alerts/cpuoct2023.html	vendor-advisory
https://security.netapp.com/advisory/ntap-2023102…
https://www.debian.org/security/2023/dsa-5537
https://lists.debian.org/debian-lts-announce/2023…
https://www.debian.org/security/2023/dsa-5548
https://security.netapp.com/advisory/ntap-2024110…

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	Java SE JDK and JRE	Affected: Oracle Java SE:8u381 Affected: Oracle Java SE:8u381-perf Affected: Oracle Java SE:11.0.20 Affected: Oracle Java SE:17.0.8 Affected: Oracle Java SE:21 Affected: Oracle GraalVM for JDK:17.0.8 Affected: Oracle GraalVM for JDK:21 Affected: Oracle GraalVM Enterprise Edition:20.3.11 Affected: Oracle GraalVM Enterprise Edition:21.3.7 Affected: Oracle GraalVM Enterprise Edition:22.3.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:47:14.000Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Oracle Advisory",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuoct2023.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20231027-0006/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5537"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00041.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2023/dsa-5548"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20241108-0002/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-22081",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-03T15:53:15.085893Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-28T17:34:30.564Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Java SE JDK and JRE",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Oracle Java SE:8u381"
            },
            {
              "status": "affected",
              "version": "Oracle Java SE:8u381-perf"
            },
            {
              "status": "affected",
              "version": "Oracle Java SE:11.0.20"
            },
            {
              "status": "affected",
              "version": "Oracle Java SE:17.0.8"
            },
            {
              "status": "affected",
              "version": "Oracle Java SE:21"
            },
            {
              "status": "affected",
              "version": "Oracle GraalVM for JDK:17.0.8"
            },
            {
              "status": "affected",
              "version": "Oracle GraalVM for JDK:21"
            },
            {
              "status": "affected",
              "version": "Oracle GraalVM Enterprise Edition:20.3.11"
            },
            {
              "status": "affected",
              "version": "Oracle GraalVM Enterprise Edition:21.3.7"
            },
            {
              "status": "affected",
              "version": "Oracle GraalVM Enterprise Edition:22.3.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and  22.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.",
              "lang": "en-US"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-08T04:14:14.116Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "Oracle Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuoct2023.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20231027-0006/"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5537"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00041.html"
        },
        {
          "url": "https://www.debian.org/security/2023/dsa-5548"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2023-22081",
    "datePublished": "2023-10-17T21:02:56.346Z",
    "dateReserved": "2022-12-17T19:26:00.759Z",
    "dateUpdated": "2026-05-28T17:34:30.564Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-5676 (GCVE-0-2023-5676)

Vulnerability from cvelistv5 – Published: 2023-11-15 14:02 – Updated: 2025-11-03 21:50

Title

Eclipse OpenJ9 possible infinite busy hang

Summary

In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.

Severity

4.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-08-29 14:41 UTC

CWE

CWE-364 - Signal Handler Race Condition

Assigner

eclipse mitre root

References

3 references

URL	Tags
https://github.com/eclipse-openj9/openj9/pull/18085
https://gitlab.eclipse.org/security/cve-assigneme…
https://security.netapp.com/advisory/ntap-2024110…

Impacted products

1 product

Vendor	Product	Version
Eclipse Foundation	OpenJ9	Affected: 0 , < 0.41.0 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:50:38.622Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/eclipse-openj9/openj9/pull/18085"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://gitlab.eclipse.org/security/cve-assignement/-/issues/13"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20241108-0002/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-5676",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-29T14:41:09.024509Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-29T14:50:03.835Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "OpenJ9",
          "vendor": "Eclipse Foundation",
          "versions": [
            {
              "lessThan": "0.41.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.\u003cbr\u003e"
            }
          ],
          "value": "In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.\n"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-364",
              "description": "CWE-364: Signal Handler Race Condition",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-15T14:02:01.422Z",
        "orgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c",
        "shortName": "eclipse"
      },
      "references": [
        {
          "url": "https://github.com/eclipse-openj9/openj9/pull/18085"
        },
        {
          "url": "https://gitlab.eclipse.org/security/cve-assignement/-/issues/13"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Eclipse OpenJ9 possible infinite busy hang",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e51fbebd-6053-4e49-959f-1b94eeb69a2c",
    "assignerShortName": "eclipse",
    "cveId": "CVE-2023-5676",
    "datePublished": "2023-11-15T14:02:01.422Z",
    "dateReserved": "2023-10-20T04:59:29.125Z",
    "dateUpdated": "2025-11-03T21:50:38.622Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

SUSE-SU-2023:4614-1

CVE-2023-22025 (GCVE-0-2023-22025)

CVE-2023-22067 (GCVE-0-2023-22067)

CVE-2023-22081 (GCVE-0-2023-22081)

CVE-2023-5676 (GCVE-0-2023-5676)

Tags

Sightings

Nomenclature

Related by attack behaviour