Red Hat Enterprise Linux 6/icedtea-web
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| icedtea-web: path traversal while processing <jar/> elements of JNLP files results in arbitrary file overwrite | Red Hat Enterprise Linux 6/icedtea-web | Red Hat | High | No fix reported | |
| icedtea-web: directory traversal in the nested jar auto-extraction leading to arbitrary file overwrite | Red Hat Enterprise Linux 6/icedtea-web | Red Hat | High | No fix reported | |
| icedtea-web: unsigned code injection in a signed JAR file | Red Hat Enterprise Linux 6/icedtea-web | Red Hat | Medium | No fix reported | |
| icedtea-web: SOP checks based on codebase and not applet origin | Red Hat Enterprise Linux 6/icedtea-webRed Hat Enterprise Linux 7/icedtea-web | Red Hat | Medium | No fix reported |