ByteOS

Assigner-IBM Corporation

CVSS Score-5.9||MEDIUM

EPSS-0.09% / 25.62%

||

7 Day CHG+0.02%

Published-10 May, 2024 | 17:21

Updated-14 Aug, 2025 | 19:34

IBM SDK, Java Technology Edition denial of service

The IBM SDK, Java Technology Edition's Object Request Broker (ORB) 7.1.0.0 through 7.1.5.21 and 8.0.0.0 through 8.0.8.21 is vulnerable to a denial of service attack in some circumstances due to improper enforcement of the JEP 290 MaxRef and MaxDepth deserialization filters. IBM X-Force ID: 260578.

Vendor-IBM Corporation

Product-java_software_development_kit SDK, Java Technology Edition

CWE ID-CWE-502

Deserialization of Untrusted Data

CVE-2019-0729

CVSS Score-9.8||CRITICAL

EPSS-1.42% / 79.76%

||

7 Day CHG~0.00%

Published-06 Mar, 2019 | 00:00

Updated-04 Aug, 2024 | 17:58

An Elevation of Privilege vulnerability exists in the way Azure IoT Java SDK generates symmetric keys for encryption, allowing an attacker to predict the randomness of the key, aka 'Azure IoT Java SDK Elevation of Privilege Vulnerability'.

Product-java_software_development_kit Java SDK for Azure IoT

CWE ID-CWE-330

Use of Insufficiently Random Values

CVE-2019-0741

CVSS Score-7.5||HIGH

EPSS-3.32% / 86.75%

||

7 Day CHG~0.00%

Published-06 Mar, 2019 | 00:00

Updated-04 Aug, 2024 | 17:58

An information disclosure vulnerability exists in the way Azure IoT Java SDK logs sensitive information, aka 'Azure IoT Java SDK Information Disclosure Vulnerability'.

Product-java_software_development_kit Java SDK for Azure IoT

CWE ID-CWE-532

Insertion of Sensitive Information into Log File

CVE-2018-8479

CVSS Score-5.6||MEDIUM

EPSS-0.65% / 69.85%

||

7 Day CHG~0.00%

Published-13 Sep, 2018 | 00:00

Updated-05 Aug, 2024 | 06:54

A spoofing vulnerability exists for the Azure IoT Device Provisioning for the C SDK library using the HTTP protocol on Windows platform, aka "Azure IoT SDK Spoofing Vulnerability." This affects C SDK.

Product-c_software_development_kit java_software_development_kit C SDK

CWE ID-CWE-295

Improper Certificate Validation

CVE-2018-8119

CVSS Score-5.6||MEDIUM

EPSS-0.38% / 58.79%

||

7 Day CHG~0.00%

Published-09 May, 2018 | 19:00

Updated-05 Aug, 2024 | 06:46

A spoofing vulnerability exists when the Azure IoT Device Provisioning AMQP Transport library improperly validates certificates over the AMQP protocol, aka "Azure IoT SDK Spoofing Vulnerability." This affects C# SDK, C SDK, Java SDK.