Redhat Icedtea6 — known CVE vulnerabilities

Every CVE whose affected-product data names Redhat Icedtea6, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2012-1723 — CVSS 9.8 (critical) — actively exploited: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and…
• CVE-2010-2548 — CVSS 9.1 (critical): IcedTea6 before 1.7.4 does not properly check property access, which allows unsigned apps to read and write arbitrary files.
• CVE-2010-2783 — CVSS 9.1 (critical): IcedTea6 before 1.7.4 allow unsigned apps to read and write arbitrary files, related to Extended JNLP Services.
• CVE-2011-2514 — CVSS 6.8 (medium): The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before…
• CVE-2011-2513 — CVSS 5.0 (medium): The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before…
• CVE-2012-1717 — CVSS 2.1 (low): Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and…