Login Request a demo
IC
Product
Icedtea
by Redhat · last CVE Apr 24, 2017
9
CVEs
0
On KEV
8.3
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 1Medium 0Low 3
Severity
All severities9Critical0High1Medium0Low3
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Icedtea to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-3512
8.3
3%
Apr 24
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT)
Affected: before 3.4.0
CVE-2017-3544
3.7
2%
Apr 24
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking)
Affected: before 3.4.0
CVE-2017-3533
3.7
3%
Apr 24
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking)
Affected: before 3.4.0
CVE-2017-3539
3.1
2%
Apr 24
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security)
Affected: before 3.4.0
CVE-2015-5235
–
3%
Oct 9
IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick…
Affected: through 1.5.2; 1.6
CVE-2015-5234
–
2%
Oct 9
IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration…
Affected: through 1.5.2; 1.6
CVE-2011-0025
–
3%
Feb 4
IcedTea 1.7 before 1.7.8, 1.8 before 1.8.5, and 1.9 before 1.9.5 does not properly verify signatures for JAR files that (1) are "partially signed" or (2) signed by multiple…
Affected: 1.7; 1.7.1; 1.7.2; 1.7.3; 1.7.4; 1.7.5; +12 more
CVE-2010-4351
–
3%
Jan 20
The JNLP SecurityManager in IcedTea (IcedTea.so) 1.7 before 1.7.7, 1.8 before 1.8.4, and 1.9 before 1.9.4 for Java OpenJDK returns from the checkPermission method instead of…
Affected: 1.7; 1.7.1; 1.7.2; 1.7.3; 1.7.4; 1.7.5; +9 more
CVE-2010-3860
–
3%
Dec 8
IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6, declares multiple sensitive variables as public, which allows remote attackers to…
Affected: through 1.9.1; 1.5; 1.5; 1.5; 1.6; 1.7; +4 more
Showing 9