Vulnerability Description
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows physical access to compromise Java SE. While the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: Applies to deployment of Java where the Java Auto Update is enabled. CVSS 3.0 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Jdk | 1.7.0 |
| Oracle | Jre | 1.7.0 |
| Netapp | Active Iq Unified Manager | >= 7.3 |
| Netapp | Cloud Backup | - |
| Netapp | E-Series Santricity Os Controller | >= 11.0, <= 11.70.1 |
| Netapp | E-Series Santricity Storage Manager | - |
| Netapp | Element Software | - |
| Netapp | Oncommand Balance | - |
| Netapp | Oncommand Insight | - |
| Netapp | Oncommand Performance Manager | - |
| Netapp | Oncommand Shift | - |
| Netapp | Oncommand Unified Manager | <= 7.1 |
| Netapp | Plug-In For Symantec Netbackup | - |
| Netapp | Snapmanager | - |
| Netapp | Steelstore Cloud Integrated Storage | - |
| Netapp | Storage Replication Adapter For Clustered Data Ontap | >= 7.2 |
| Netapp | Vasa Provider For Clustered Data Ontap | >= 7.2 |
| Netapp | Virtual Storage Console | >= 7.2 |
References
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlPatchVendor Advisory
- http://www.securityfocus.com/bid/99809Broken Link
- http://www.securitytracker.com/id/1038931Broken Link
- https://security.gentoo.org/glsa/201709-22Third Party Advisory
- https://security.netapp.com/advisory/ntap-20170720-0001/Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlPatchVendor Advisory
- http://www.securityfocus.com/bid/99809Broken Link
- http://www.securitytracker.com/id/1038931Broken Link
- https://security.gentoo.org/glsa/201709-22Third Party Advisory
- https://security.netapp.com/advisory/ntap-20170720-0001/Third Party Advisory
FAQ
What is CVE-2017-10125?
CVE-2017-10125 is a vulnerability with a CVSS score of 7.1 (HIGH). Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows physic...
How severe is CVE-2017-10125?
CVE-2017-10125 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-10125?
Check the references section above for vendor advisories and patch information. Affected products include: Oracle Jdk, Oracle Jre, Netapp Active Iq Unified Manager, Netapp Cloud Backup, Netapp E-Series Santricity Os Controller.