Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations. IBM X-F...

CVE-2023-30441 · published 3 years ago
Summary

IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations. IBM X-Force ID: 253188.

What to do
  • Update ibm java to version 8.0.7.15 or later.
  • Update ibm websphere_application_server to version 8.5.5.23 or later.
Affected software
VendorProductAffected versions
ibm infosphere_information_server 11.7
cpe:2.3:a:ibm:infosphere_information_server:11.7:*:*:*:*:*:*:*
ibm java >= 8.0.7.0, < 8.0.7.15
cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*
ibm websphere_application_server >= 8.5.0.0, < 8.5.5.23
9.0.0.0
cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:-:*:*:*
ibm z\/transaction_processing_facility 1.1
cpe:2.3:a:ibm:z\/transaction_processing_facility:1.1:*:*:*:*:*:*:*
Original advisory text
IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations. IBM X-F...
IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations. IBM X-Force ID: 253188.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-327Use of a Broken Cryptographic Algorithm
Timeline
Published29 Apr 2023
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2023-30441 · NVD
Track software like this
Free during beta