Microsoft Java Software Development Kit
4 CVEs affecting Microsoft Java Software Development Kit. Latest disclosed: 2019-03-05. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-0729 | Critical | 9.8 | 2019-03-05 | An Elevation of Privilege vulnerability exists in the way Azure IoT Java SDK generates symmetric keys for encryption, allowing an attacker to predict the rando… |
CVE-2019-0741 | High | 7.5 | 2019-03-05 | An information disclosure vulnerability exists in the way Azure IoT Java SDK logs sensitive information, aka 'Azure IoT Java SDK Information Disclosure Vulnera… |
CVE-2018-8479 | Medium | 5.6 | 2018-09-13 | A spoofing vulnerability exists for the Azure IoT Device Provisioning for the C SDK library using the HTTP protocol on Windows platform, aka "Azure IoT SDK Spo… |
CVE-2018-8119 | Medium | 5.6 | 2018-05-09 | A spoofing vulnerability exists when the Azure IoT Device Provisioning AMQP Transport library improperly validates certificates over the AMQP protocol, aka "Az… |