Sdk
Vendor:
First CVE: Jul 2, 2016 · Active for 10 years
6
Total CVEs
More Total CVEs than 80% of tracked products
1.0
Avg CVEs / Year
Bottom 1%
7.7
Avg CVSS
Higher Avg CVSS than 62% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Sdk over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 2, 2016
10 years ago
Most Recent CVE
Aug 2, 2023
1,087 days ago
CVE Severity & Scoring
Sdk6 CVEs
33%
50%
17%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local2 (33.3%)
Network4 (66.7%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low6 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None4 (66.7%)
Unknown0 (0.0%)
Required2 (33.3%)
Privileges Required
Low1 (16.7%)
High1 (16.7%)
None4 (66.7%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-40609CRITICAL IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending sp | Aug 2, 2023 | 9.8 | 30 | NO | NO |
CVE-2017-1289HIGH IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose high | May 22, 2017 | 8.2 | 28 | NO | NO |
CVE-2016-3956HIGH The CLI in npm before 2.15.1 and 3.x before 3.8.3, as used in Node.js 0.10 before 0.10.44, 0.12 before 0.12.13, 4 before 4.4.2, and 5 before 5.10.0, includes bearer tokens with arb | Jul 2, 2016 | 7.5 | 27 | NO | NO |
CVE-2018-1890HIGH IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 1520 | Mar 11, 2019 | 7.8 | 25 | NO | NO |
CVE-2019-4732MEDIUM IBM SDK, Java Technology Edition Version 7.0.0.0 through 7.0.10.55, 7.1.0.0 through 7.1.4.55, and 8.0.0.0 through 8.0.6.0 could allow a local authenticated attacker to execute arbi | Feb 3, 2020 | 6.5 | 24 | NO | NO |
CVE-2018-1656MEDIUM The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attack | Aug 20, 2018 | 6.5 | 24 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (6 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (6 CVEs).
Media Mentions
Signals from CVEs in this product scope (6 CVEs).
Top CNAs Publishing CVEs For Sdk
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 8.0 | 2 | 7.2 | 2.5% | 0 | 0 |
| 7.0 | 1 | 6.5 | 4.5% | 0 | 0 |
| 6.0 | 1 | 6.5 | 4.5% | 0 | 0 |