SDK, Java Technology Edition vulnerabilities

2 known vulnerabilities in SDK, Java Technology Edition from IBM. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  SDK, Java Technology Edition: Deserialization of Untrusted Data

  CVE-2023-38264May 14, 2024IBM

  The IBM SDK, Java Technology Edition's Object Request Broker (ORB) 7.1.0.0 through 7.1.5.21 and 8.0.0.0 through 8.0.8.21 is vulnerable to a denial of service attack in some circumstances due to improper enforcement of the JEP 290 MaxRef and MaxDepth deserializ

• 9.8 Critical severity

  SDK, Java Technology Edition: Deserialization of Untrusted Data

  CVE-2022-40609Aug 2, 2023IBMEPSS 1.76%

  IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute ar