First published: Mon Apr 29 2019(Updated: )
Oracle Java SE 7u221 and 8u211 fixes an unspecified vulnerability in the 2D component (<a href="https://access.redhat.com/security/cve/CVE-2019-2697">CVE-2019-2697</a>). Upstream has CVSS scored this issue as: 8.1/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H External Reference: <a href="https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html#AppendixJAVA">https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html#AppendixJAVA</a>
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Java SE 7 | >=7u221<=7u221>=8u211<=8u211 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of REDHAT-BUG-1704480 is scored at 8.1 on the CVSS scale.
To fix REDHAT-BUG-1704480, update to Oracle Java SE versions 7u221 or 8u211.
REDHAT-BUG-1704480 affects Oracle Java SE versions 7u221 and 8u211.
REDHAT-BUG-1704480 is an unspecified vulnerability related to the 2D component of Oracle Java SE.
Yes, REDHAT-BUG-1704480 has a vector that allows remote exploitation.