CVE Feed

    Dashboard / CVE / CVE-2019-4473

    CVE-2019-4473

    Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984.

    Published:Aug 1, 2019
    Last Modified:Nov 21, 2024
    EPS:Aug 5, 2019
    EPSS Score:0.0012
    CVSS Score:7.8

    Affected Products

    Vendor
    Ibm
    Product
    Java

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-30441 (CVSS 7.5) — IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could…
    CVE-2015-1914 (CVSS 5) — IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allow…
    CVE-2015-1916 (CVSS 7.5) — Unspecified vulnerability in IBM Java 8 before SR1 allows remote attackers to cause a denial of service via un…
    CVE-2015-0192 (CVSS 9.8) — Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1 before SR8 FP4, 6…
    CVE-2014-3068 (CVSS 6.4) — IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1 (7.0.7.1), 6 R1 before SR8 …
    CVE-2014-3065 (CVSS 6.9) — Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7 before SR8 (7.0.8…
    CVE-2013-4041 (CVSS 6.8) — Unspecified vulnerability in IBM Java SDK 5.0.0 before SR16 FP4, 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0…
    CVE-2013-5456 (CVSS 9.3) — The com.ibm.rmi.io.SunSerializableFactory class in IBM Java SDK 7.0.0 before SR6 allows remote attackers to by…
    CVE-2013-5375 (CVSS 6.8) — Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, 6.0.0 before SR15, and 5.0.0 bef…
    CVE-2013-5457 (CVSS 9.3) — Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows rem…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High