{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Die Java Platform, Standard Edition (SE) ist eine Sammlung von Java-APIs (JDK) und der Java Laufzeit Umgebung (JRE).",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE ausnutzen, um die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit zu gef\u00e4hrden.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- UNIX\n- Linux\n- MacOS X\n- Windows\n- Sonstiges",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2023-0128 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-0128.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2023-0128 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0128"
      },
      {
        "category": "external",
        "summary": "Oracle Critical Patch Update Advisory - January 2023 - Appendix Oracle Java SE vom 2023-01-17",
        "url": "https://www.oracle.com/security-alerts/cpujan2023.html#AppendixJAVA"
      },
      {
        "category": "external",
        "summary": "Change Log for Amazon Corretto 11",
        "url": "https://github.com/corretto/corretto-11/blob/release-11.0.18.10.1/CHANGELOG.md"
      },
      {
        "category": "external",
        "summary": "Change Log for Amazon Corretto 8",
        "url": "https://github.com/corretto/corretto-8/blob/release-8.362.08.1/CHANGELOG.md"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0191 vom 2023-01-18",
        "url": "https://access.redhat.com/errata/RHSA-2023:0191"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0192 vom 2023-01-18",
        "url": "https://access.redhat.com/errata/RHSA-2023:0192"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0193 vom 2023-01-18",
        "url": "https://access.redhat.com/errata/RHSA-2023:0193"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0196 vom 2023-01-18",
        "url": "https://access.redhat.com/errata/RHSA-2023:0196"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0197 vom 2023-01-18",
        "url": "https://access.redhat.com/errata/RHSA-2023:0197"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0198 vom 2023-01-18",
        "url": "https://access.redhat.com/errata/RHSA-2023:0198"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0199 vom 2023-01-18",
        "url": "https://access.redhat.com/errata/RHSA-2023:0199"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0200 vom 2023-01-18",
        "url": "https://access.redhat.com/errata/RHSA-2023:0200"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0201 vom 2023-01-18",
        "url": "https://access.redhat.com/errata/RHSA-2023:0201"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0190 vom 2023-01-18",
        "url": "https://access.redhat.com/errata/RHSA-2023:0190"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0202 vom 2023-01-18",
        "url": "https://access.redhat.com/errata/RHSA-2023:0202"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-0192 vom 2023-01-19",
        "url": "http://linux.oracle.com/errata/ELSA-2023-0192.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-0200 vom 2023-01-19",
        "url": "http://linux.oracle.com/errata/ELSA-2023-0200.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-0202 vom 2023-01-19",
        "url": "http://linux.oracle.com/errata/ELSA-2023-0202.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0195 vom 2023-01-23",
        "url": "https://access.redhat.com/errata/RHSA-2023:0195"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-0194 vom 2023-01-23",
        "url": "https://linux.oracle.com/errata/ELSA-2023-0194.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALASCORRETTO8-2023-005 vom 2023-01-23",
        "url": "https://alas.aws.amazon.com/AL2/ALASCORRETTO8-2023-005.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2023-1919 vom 2023-01-23",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2023-1919.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2023-1918 vom 2023-01-23",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2023-1918.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0389 vom 2023-01-24",
        "url": "https://access.redhat.com/errata/RHSA-2023:0389"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0388 vom 2023-01-24",
        "url": "https://access.redhat.com/errata/RHSA-2023:0388"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0387 vom 2023-01-24",
        "url": "https://access.redhat.com/errata/RHSA-2023:0387"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0354 vom 2023-01-24",
        "url": "https://access.redhat.com/errata/RHSA-2023:0354"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0353 vom 2023-01-24",
        "url": "https://access.redhat.com/errata/RHSA-2023:0353"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0352 vom 2023-01-24",
        "url": "https://access.redhat.com/errata/RHSA-2023:0352"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0209 vom 2023-01-23",
        "url": "https://access.redhat.com/errata/RHSA-2023:0209"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0207 vom 2023-01-23",
        "url": "https://access.redhat.com/errata/RHSA-2023:0207"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0206 vom 2023-01-23",
        "url": "https://access.redhat.com/errata/RHSA-2023:0206"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0205 vom 2023-01-23",
        "url": "https://access.redhat.com/errata/RHSA-2023:0205"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0204 vom 2023-01-23",
        "url": "https://access.redhat.com/errata/RHSA-2023:0204"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0194 vom 2023-01-23",
        "url": "https://access.redhat.com/errata/RHSA-2023:0194"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0203 vom 2023-01-24",
        "url": "https://access.redhat.com/errata/RHSA-2023:0203"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-0203 vom 2023-01-24",
        "url": "http://linux.oracle.com/errata/ELSA-2023-0203.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-0195 vom 2023-01-24",
        "url": "http://linux.oracle.com/errata/ELSA-2023-0195.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2023-280 vom 2023-01-25",
        "url": "https://alas.aws.amazon.com/AL2022/ALAS-2023-280.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2023-281 vom 2023-01-25",
        "url": "https://alas.aws.amazon.com/AL2022/ALAS-2023-281.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2023-279 vom 2023-01-25",
        "url": "https://alas.aws.amazon.com/AL2022/ALAS-2023-279.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-0208 vom 2023-01-27",
        "url": "https://linux.oracle.com/errata/ELSA-2023-0208.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0208 vom 2023-01-26",
        "url": "https://access.redhat.com/errata/RHSA-2023:0208"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:0210 vom 2023-01-26",
        "url": "https://access.redhat.com/errata/RHSA-2023:0210"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2023-0210 vom 2023-01-27",
        "url": "http://linux.oracle.com/errata/ELSA-2023-0210.html"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-5331 vom 2023-01-29",
        "url": "https://www.debian.org/security/2023/dsa-5331"
      },
      {
        "category": "external",
        "summary": "CentOS Security Advisory CESA-2023:0203 vom 2023-01-30",
        "url": "https://lists.centos.org/pipermail/centos-announce/2023-January/086357.html"
      },
      {
        "category": "external",
        "summary": "CentOS Security Advisory CESA-2023:0195 vom 2023-01-30",
        "url": "https://lists.centos.org/pipermail/centos-announce/2023-January/086356.html"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-5335 vom 2023-02-01",
        "url": "https://lists.debian.org/debian-security-announce/2023/msg00024.html"
      },
      {
        "category": "external",
        "summary": "Hitachi Vulnerability Information HITACHI-SEC-2023-104 vom 2023-02-07",
        "url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-104/index.html"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20230208-0001 vom 2023-02-08",
        "url": "https://security.netapp.com/advisory/ntap-20230208-0001/"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:0437-1 vom 2023-02-16",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013805.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:0436-1 vom 2023-02-16",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013804.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:0435-1 vom 2023-02-16",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-February/013803.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2023-1963 vom 2023-02-22",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2023-1963.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALASJAVA-OPENJDK11-2023-003 vom 2023-02-23",
        "url": "https://alas.aws.amazon.com/AL2/ALASJAVA-OPENJDK11-2023-003.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5898-1 vom 2023-02-28",
        "url": "https://ubuntu.com/security/notices/USN-5898-1"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5897-1 vom 2023-02-28",
        "url": "https://ubuntu.com/security/notices/USN-5897-1"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:1047 vom 2023-03-02",
        "url": "https://access.redhat.com/errata/RHSA-2023:1047"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2023-1697 vom 2023-03-07",
        "url": "https://alas.aws.amazon.com/ALAS-2023-1697.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:0685-1 vom 2023-03-13",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-March/014024.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:0720-1 vom 2023-03-14",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-March/014035.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:0752-1 vom 2023-03-16",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-March/014063.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6967213 vom 2023-03-30",
        "url": "https://www.ibm.com/support/pages/node/6967213"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:1850-1 vom 2023-04-14",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-April/014464.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6987835 vom 2023-05-02",
        "url": "https://www.ibm.com/support/pages/node/6987835"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2023:1823-1 vom 2023-05-04",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-May/014730.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6995887 vom 2023-05-19",
        "url": "https://aix.software.ibm.com/aix/efixes/security/java_may2023_advisory.asc"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6999743 vom 2023-05-31",
        "url": "https://www.ibm.com/support/pages/node/6999743"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7007761 vom 2023-07-01",
        "url": "https://www.ibm.com/support/pages/node/7007761"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2023-085 vom 2023-07-21",
        "url": "https://www.dell.com/support/kbdoc/de-de/000210968/dsa-2023-085-dell-networker-runtime-environment-nre-security-update-for-java-se-embedded-vulnerabilities"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6983440 vom 2023-08-31",
        "url": "https://www.ibm.com/support/pages/node/6983440"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7058364 vom 2023-10-24",
        "url": "https://www.ibm.com/support/pages/node/7058364"
      },
      {
        "category": "external",
        "summary": "Gentoo Linux Security Advisory GLSA-202401-25 vom 2024-01-17",
        "url": "https://security.gentoo.org/glsa/202401-25"
      }
    ],
    "source_lang": "en-US",
    "title": "Oracle Java SE: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2024-01-17T23:00:00.000+00:00",
      "generator": {
        "date": "2024-02-15T17:10:23.759+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.0"
        }
      },
      "id": "WID-SEC-W-2023-0128",
      "initial_release_date": "2023-01-17T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2023-01-17T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2023-01-18T23:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-01-19T23:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2023-01-22T23:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-01-23T23:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Oracle Linux, Amazon und Red Hat aufgenommen"
        },
        {
          "date": "2023-01-24T23:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2023-01-26T23:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von Oracle Linux und Red Hat aufgenommen"
        },
        {
          "date": "2023-01-29T23:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Fedora, Oracle Linux und Debian aufgenommen"
        },
        {
          "date": "2023-01-30T23:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von CentOS aufgenommen"
        },
        {
          "date": "2023-02-01T23:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2023-02-06T23:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von HITACHI aufgenommen"
        },
        {
          "date": "2023-02-08T23:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von NetApp aufgenommen"
        },
        {
          "date": "2023-02-16T23:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-02-22T23:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2023-02-23T23:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2023-02-27T23:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2023-03-01T23:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-03-07T23:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2023-03-13T23:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-03-14T23:00:00.000+00:00",
          "number": "20",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-03-15T23:00:00.000+00:00",
          "number": "21",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-03-30T22:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-04-16T22:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-05-02T22:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-05-04T22:00:00.000+00:00",
          "number": "25",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2023-05-21T22:00:00.000+00:00",
          "number": "26",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-05-31T22:00:00.000+00:00",
          "number": "27",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-07-02T22:00:00.000+00:00",
          "number": "28",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-07-23T22:00:00.000+00:00",
          "number": "29",
          "summary": "Neue Updates von Dell aufgenommen"
        },
        {
          "date": "2023-08-30T22:00:00.000+00:00",
          "number": "30",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-10-24T22:00:00.000+00:00",
          "number": "31",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2024-01-17T23:00:00.000+00:00",
          "number": "32",
          "summary": "Neue Updates von Gentoo aufgenommen"
        }
      ],
      "status": "final",
      "version": "32"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Amazon Corretto \u003c 8.362.08.1",
                "product": {
                  "name": "Amazon Corretto \u003c 8.362.08.1",
                  "product_id": "718391",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:amazon:corretto:8"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Amazon Corretto \u003c 11.0.18.10.1",
                "product": {
                  "name": "Amazon Corretto \u003c 11.0.18.10.1",
                  "product_id": "T025936",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:amazon:corretto:11.0.18.10.1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Corretto"
          },
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Dell NetWorker \u003c 8.0.16",
            "product": {
              "name": "Dell NetWorker \u003c 8.0.16",
              "product_id": "T028846",
              "product_identification_helper": {
                "cpe": "cpe:/a:dell:networker:8.0.16"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Dell"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Gentoo Linux",
            "product": {
              "name": "Gentoo Linux",
              "product_id": "T012167",
              "product_identification_helper": {
                "cpe": "cpe:/o:gentoo:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Gentoo"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Hitachi Command Suite",
            "product": {
              "name": "Hitachi Command Suite",
              "product_id": "T010951",
              "product_identification_helper": {
                "cpe": "cpe:/a:hitachi:command_suite:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Hitachi Configuration Manager",
            "product": {
              "name": "Hitachi Configuration Manager",
              "product_id": "T020304",
              "product_identification_helper": {
                "cpe": "cpe:/a:hitachi:configuration_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Hitachi Ops Center",
            "product": {
              "name": "Hitachi Ops Center",
              "product_id": "T017562",
              "product_identification_helper": {
                "cpe": "cpe:/a:hitachi:ops_center:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Hitachi"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "IBM AIX 7.2",
                "product": {
                  "name": "IBM AIX 7.2",
                  "product_id": "434967",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:ibm:aix:7.2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "IBM AIX 7.3",
                "product": {
                  "name": "IBM AIX 7.3",
                  "product_id": "T021486",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:ibm:aix:7.3"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "AIX"
          },
          {
            "category": "product_name",
            "name": "IBM Business Automation Workflow 19.0.0.3 - 22.0.2",
            "product": {
              "name": "IBM Business Automation Workflow 19.0.0.3 - 22.0.2",
              "product_id": "T027917",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:business_automation_workflow:19.0.0.3-22.0.2"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "IBM FileNet Content Manager 5.5.4",
                "product": {
                  "name": "IBM FileNet Content Manager 5.5.4",
                  "product_id": "782758",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:filenet_content_manager:5.5.4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "IBM FileNet Content Manager 5.5.8",
                "product": {
                  "name": "IBM FileNet Content Manager 5.5.8",
                  "product_id": "T024608",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:filenet_content_manager:5.5.8"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "IBM FileNet Content Manager 5.5.9",
                "product": {
                  "name": "IBM FileNet Content Manager 5.5.9",
                  "product_id": "T024609",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:filenet_content_manager:5.5.9"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "FileNet Content Manager"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "IBM Java \u003c 7.1.5.17",
                "product": {
                  "name": "IBM Java \u003c 7.1.5.17",
                  "product_id": "T027013",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:jre:7.1.5.17"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "IBM Java \u003c 8.0.8.0",
                "product": {
                  "name": "IBM Java \u003c 8.0.8.0",
                  "product_id": "T027014",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:jre:8.0.8.0"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Java"
          },
          {
            "category": "product_name",
            "name": "IBM Maximo Asset Management 7.6.1",
            "product": {
              "name": "IBM Maximo Asset Management 7.6.1",
              "product_id": "389168",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:maximo_asset_management:7.6.1"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "IBM TXSeries 9.1",
                "product": {
                  "name": "IBM TXSeries 9.1",
                  "product_id": "T015903",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:txseries:for_multiplatforms_9.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "IBM TXSeries 8.2",
                "product": {
                  "name": "IBM TXSeries 8.2",
                  "product_id": "T015904",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:txseries:for_multiplatforms_8.2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "IBM TXSeries 8.1",
                "product": {
                  "name": "IBM TXSeries 8.1",
                  "product_id": "T015905",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:txseries:for_multiplatforms_8.1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "TXSeries"
          },
          {
            "category": "product_name",
            "name": "IBM Tivoli Netcool/OMNIbus \u003c 8.1.0.31",
            "product": {
              "name": "IBM Tivoli Netcool/OMNIbus \u003c 8.1.0.31",
              "product_id": "T030747",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:tivoli_netcool%2fomnibus:8.1.0.31"
              }
            }
          },
          {
            "category": "product_name",
            "name": "IBM VIOS 3.1",
            "product": {
              "name": "IBM VIOS 3.1",
              "product_id": "1039165",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:vios:3.1"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "NetApp ActiveIQ Unified Manager",
            "product": {
              "name": "NetApp ActiveIQ Unified Manager",
              "product_id": "T016960",
              "product_identification_helper": {
                "cpe": "cpe:/a:netapp:active_iq_unified_manager:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "NetApp"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Open Source CentOS",
            "product": {
              "name": "Open Source CentOS",
              "product_id": "1727",
              "product_identification_helper": {
                "cpe": "cpe:/o:centos:centos:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Open Source OpenJDK",
            "product": {
              "name": "Open Source OpenJDK",
              "product_id": "580789",
              "product_identification_helper": {
                "cpe": "cpe:/a:oracle:openjdk:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle GraalVM Enterprise Edition 20.3.8",
            "product": {
              "name": "Oracle GraalVM Enterprise Edition 20.3.8",
              "product_id": "T025929",
              "product_identification_helper": {
                "cpe": "cpe:/a:oracle:graalvm:20.3.8::enterprise"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Oracle Java SE 21.3.4",
                "product": {
                  "name": "Oracle Java SE 21.3.4",
                  "product_id": "T025881",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:java_se:21.3.4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Oracle Java SE 22.3.0",
                "product": {
                  "name": "Oracle Java SE 22.3.0",
                  "product_id": "T025882",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:java_se:22.3.0"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Oracle Java SE 17.0.5",
                "product": {
                  "name": "Oracle Java SE 17.0.5",
                  "product_id": "T025883",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:java_se:17.0.5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Oracle Java SE 11.0.17",
                "product": {
                  "name": "Oracle Java SE 11.0.17",
                  "product_id": "T025884",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:java_se:11.0.17"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Oracle Java SE 19.0.1",
                "product": {
                  "name": "Oracle Java SE 19.0.1",
                  "product_id": "T025930",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:java_se:19.0.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Oracle Java SE 8u351",
                "product": {
                  "name": "Oracle Java SE 8u351",
                  "product_id": "T025931",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:java_se:8u351"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Java SE"
          },
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-43548",
      "notes": [
        {
          "category": "description",
          "text": "In verschiedenen Komponenten von Oracle Java SE existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he."
        }
      ],
      "product_status": {
        "known_affected": [
          "T015905",
          "T015904",
          "T015903",
          "67646",
          "T010951",
          "389168",
          "718391",
          "T004914",
          "T025929",
          "782758",
          "T025936",
          "T027917",
          "T025931",
          "T020304",
          "T028846",
          "398363",
          "T025930",
          "T027014",
          "T027013",
          "434967",
          "1039165",
          "T012167",
          "T024609",
          "T016960",
          "T024608",
          "T017562",
          "2951",
          "T002207",
          "T000126",
          "580789",
          "T025884",
          "T030747",
          "T025883",
          "1727",
          "T021486",
          "T025882",
          "T025881"
        ]
      },
      "release_date": "2023-01-17T23:00:00Z",
      "title": "CVE-2022-43548"
    },
    {
      "cve": "CVE-2023-21830",
      "notes": [
        {
          "category": "description",
          "text": "In verschiedenen Komponenten von Oracle Java SE existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he."
        }
      ],
      "product_status": {
        "known_affected": [
          "T015905",
          "T015904",
          "T015903",
          "67646",
          "T010951",
          "389168",
          "718391",
          "T004914",
          "T025929",
          "782758",
          "T025936",
          "T027917",
          "T025931",
          "T020304",
          "T028846",
          "398363",
          "T025930",
          "T027014",
          "T027013",
          "434967",
          "1039165",
          "T012167",
          "T024609",
          "T016960",
          "T024608",
          "T017562",
          "2951",
          "T002207",
          "T000126",
          "580789",
          "T025884",
          "T030747",
          "T025883",
          "1727",
          "T021486",
          "T025882",
          "T025881"
        ]
      },
      "release_date": "2023-01-17T23:00:00Z",
      "title": "CVE-2023-21830"
    },
    {
      "cve": "CVE-2023-21835",
      "notes": [
        {
          "category": "description",
          "text": "In verschiedenen Komponenten von Oracle Java SE existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he."
        }
      ],
      "product_status": {
        "known_affected": [
          "T015905",
          "T015904",
          "T015903",
          "67646",
          "T010951",
          "389168",
          "718391",
          "T004914",
          "T025929",
          "782758",
          "T025936",
          "T027917",
          "T025931",
          "T020304",
          "T028846",
          "398363",
          "T025930",
          "T027014",
          "T027013",
          "434967",
          "1039165",
          "T012167",
          "T024609",
          "T016960",
          "T024608",
          "T017562",
          "2951",
          "T002207",
          "T000126",
          "580789",
          "T025884",
          "T030747",
          "T025883",
          "1727",
          "T021486",
          "T025882",
          "T025881"
        ]
      },
      "release_date": "2023-01-17T23:00:00Z",
      "title": "CVE-2023-21835"
    },
    {
      "cve": "CVE-2023-21843",
      "notes": [
        {
          "category": "description",
          "text": "In verschiedenen Komponenten von Oracle Java SE existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he."
        }
      ],
      "product_status": {
        "known_affected": [
          "T015905",
          "T015904",
          "T015903",
          "67646",
          "T010951",
          "389168",
          "718391",
          "T004914",
          "T025929",
          "782758",
          "T025936",
          "T027917",
          "T025931",
          "T020304",
          "T028846",
          "398363",
          "T025930",
          "T027014",
          "T027013",
          "434967",
          "1039165",
          "T012167",
          "T024609",
          "T016960",
          "T024608",
          "T017562",
          "2951",
          "T002207",
          "T000126",
          "580789",
          "T025884",
          "T030747",
          "T025883",
          "1727",
          "T021486",
          "T025882",
          "T025881"
        ]
      },
      "release_date": "2023-01-17T23:00:00Z",
      "title": "CVE-2023-21843"
    }
  ]
}