{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Junos OS versions 23.4 ant\u00e9rieures \u00e0 23.4R2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions 21.4-EVO ant\u00e9rieures \u00e0 21.4R2-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on QFX5000 Series and EX4600 Series versions 22.4 ant\u00e9rieures \u00e0 22.4R3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on MX Series versions 22.2 ant\u00e9rieures \u00e0 22.2R3-S3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved on ACX7000 Series versions 22.1-EVO ant\u00e9rieures \u00e0 22.1R3-S6-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on SRX4600 and SRX5000 Series versions 22.4 ant\u00e9rieures \u00e0 22.4R3-S2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions 23.2 ant\u00e9rieures \u00e0 23.2R2-S1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Session Smart Router versions 6.2 ant\u00e9rieures \u00e0 SSR-6.2.5-r2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on MX Series versions 22.1 ant\u00e9rieures \u00e0 22.1R3-S5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved on ACX7000 Series versions 22.4-EVO ant\u00e9rieures \u00e0 22.4R3-S2-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved on ACX7000 Series versions 23.2-EVO ant\u00e9rieures \u00e0 23.2R2-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on SRX Series, MX Series with SPC3 and NFX350 versions 21.4 ant\u00e9rieures \u00e0 21.4R3-S7",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on MX Series with SPC3 line card versions 21.2 ant\u00e9rieures \u00e0 21.2R3-S8",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions 22.1 ant\u00e9rieures \u00e0 22.1R3-S6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on SRX Series, MX Series with SPC3 and NFX350 versions 22.3 ant\u00e9rieures \u00e0 22.3R3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions 21.3-EVO ant\u00e9rieures \u00e0 21.3R3-S5-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions 21.2-EVO ant\u00e9rieures \u00e0 21.2R3-S7-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions ant\u00e9rieures \u00e0 20.4R3-S9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved on ACX7000 Series versions 23.4-EVO ant\u00e9rieures \u00e0 23.4R2-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions 22.4 ant\u00e9rieures \u00e0 22.4R2-S2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on SRX4600 and SRX5000 Series versions 22.2 ant\u00e9rieures \u00e0 22.2R3-S4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on MX Series versions 21.4 ant\u00e9rieures \u00e0 21.4R3-S6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on MX Series versions 22.4 ant\u00e9rieures \u00e0 22.4R3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on QFX5000 Series and EX4600 Series versions 22.3 ant\u00e9rieures \u00e0 22.3R3-S2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Session Smart Router versions 6.1 ant\u00e9rieures \u00e0 SSR-6.1.8-lts",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions 22.4-EVO ant\u00e9rieures \u00e0 22.4R3-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "SRX Series and MX Series with SPC3 and MS-MPC/MIC versions 20.4 ant\u00e9rieures \u00e0 20.4R3-S10",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on SRX Series, MX Series with SPC3 and NFX350 versions 22.4 ant\u00e9rieures \u00e0 22.4R3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions 24.2-EVO ant\u00e9rieures \u00e0 24.2R2-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "SRX Series and MX Series with SPC3 and MS-MPC/MIC versions 22.4 ant\u00e9rieures \u00e0 22.4R3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on SRX Series, MX Series with SPC3 and NFX350 versions 22.2 ant\u00e9rieures \u00e0 22.2R3-S1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "SRX Series and MX Series with SPC3 and MS-MPC/MIC versions 21.3 ant\u00e9rieures \u00e0 21.3R3-S5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on MX Series versions 23.2 ant\u00e9rieures \u00e0 23.2R2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on MX Series with SPC3 line card versions 22.3 ant\u00e9rieures \u00e0 22.3R3-S2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions 21.4 ant\u00e9rieures \u00e0 21.4R2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on MX Series with SPC3 line card versions 22.2 ant\u00e9rieures \u00e0 22.2R3-S3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions 23.4 ant\u00e9rieures \u00e0 23.4R1-S2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "SRX Series and MX Series with SPC3 and MS-MPC/MIC versions 22.2 ant\u00e9rieures \u00e0 22.2R3-S2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions 22.3-EVO ant\u00e9rieures \u00e0 22.3R3-S3-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions ant\u00e9rieures \u00e0 23.2R1-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions ant\u00e9rieures \u00e0 21.4R3-S8-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on SRX4600 and SRX5000 Series versions 22.1 ant\u00e9rieures \u00e0 22.1R3-S6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "SRX Series and MX Series with SPC3 and MS-MPC/MIC versions 21.2 ant\u00e9rieures \u00e0 21.2R3-S6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on MX Series versions ant\u00e9rieures \u00e0 21.2R3-S6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on QFX5000 Series and EX4600 Series versions 22.2 ant\u00e9rieures \u00e0 22.2R3-S3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions 23.2-EVO ant\u00e9rieures \u00e0 23.2R1-S1-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "SRX Series and MX Series with SPC3 and MS-MPC/MIC versions 23.2 ant\u00e9rieures \u00e0 23.2R2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on SRX4600 and SRX5000 Series versions 23.2 ant\u00e9rieures \u00e0 23.2R2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions ant\u00e9rieures \u00e0 21.4R3-S8",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions ant\u00e9rieures \u00e0 22.4R3-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on SRX4600 and SRX5000 Series versions 23.4 ant\u00e9rieures \u00e0 23.4R1-S1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on QFX5000 Series and EX4600 Series versions ant\u00e9rieures \u00e0 21.2R3-S7",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Session Smart Router versions ant\u00e9rieures \u00e0 SSR-5.6.14",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on QFX5000 Series and EX4600 Series versions 23.2 ant\u00e9rieures \u00e0 23.2R2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions ant\u00e9rieures \u00e0 21.2R3-S8-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on SRX Series, MX Series with SPC3 and NFX350 versions ant\u00e9rieures \u00e0 21.2R3-S8",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on SRX Series, MX Series with SPC3 and NFX350 versions 22.1 ant\u00e9rieures \u00e0 22.1R3-S2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "SRX Series and MX Series with SPC3 and MS-MPC/MIC versions 22.3 ant\u00e9rieures \u00e0 22.3R3-S1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved on ACX7000 Series versions ant\u00e9rieures \u00e0 21.4R3-S7-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on QFX5000 Series and EX4600 Series versions 22.1 ant\u00e9rieures \u00e0 22.1R3-S5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on MX Series with SPC3 line card versions 21.4 ant\u00e9rieures \u00e0 21.4R3-S6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved on ACX7000 Series versions 22.3-EVO ant\u00e9rieures \u00e0 22.3R3-S3-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on MX Series with SPC3 line card versions 23.4 ant\u00e9rieures \u00e0 23.4R2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions 22.3 ant\u00e9rieures \u00e0 22.3R1-S2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on SRX4600 and SRX5000 Series versions 22.3 ant\u00e9rieures \u00e0 22.3R3-S3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions 22.3-EVO ant\u00e9rieures \u00e0 22.3R1-S1-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions 22.4-EVO ant\u00e9rieures \u00e0 22.4R3-S3-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions ant\u00e9rieures \u00e0 21.2R3-S8",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos Space versions ant\u00e9rieures \u00e0 24.1R1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "SRX Series and MX Series with SPC3 and MS-MPC/MIC versions 21.4 ant\u00e9rieures \u00e0 21.4R3-S6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions 22.3-EVO ant\u00e9rieures \u00e0 22.3R2-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions 23.4-EVO ant\u00e9rieures \u00e0 23.4R2-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions 22.4 ant\u00e9rieures \u00e0 22.4R3-S3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions ant\u00e9rieures \u00e0 20.4R3-S10-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on MX Series with SPC3 line card versions 22.4 ant\u00e9rieures \u00e0 22.4R3-S1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on SRX Series, MX Series with SPC3 and NFX350 versions 22.4 ant\u00e9rieures \u00e0 22.4R1-S2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions 22.4-EVO ant\u00e9rieures \u00e0 22.4R2-S2-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved on ACX7000 Series versions ant\u00e9rieures \u00e0 21.2R3-S8-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on SRX Series, MX Series with SPC3 and NFX350 versions 22.4 ant\u00e9rieures \u00e0 22.4R2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions 23.2-EVO ant\u00e9rieures \u00e0 23.2R2-S1-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on MX Series with SPC3 line card versions 22.1 ant\u00e9rieures \u00e0 22.1R3-S5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions ant\u00e9rieures \u00e0 before 22.1R3-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on SRX Series, MX Series with SPC3 and NFX350 versions 22.3 ant\u00e9rieures \u00e0 22.3R2-S1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions 21.4-EVO ant\u00e9rieures \u00e0 21.4R3-S8-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved on ACX7000 Series versions 22.2-EVO ant\u00e9rieures \u00e0 22.2R3-S4-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "SRX Series and MX Series with SPC3 and MS-MPC/MIC versions 22.1 ant\u00e9rieures \u00e0 22.1R3-S4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions 21.3 ant\u00e9rieures \u00e0 21.3R3-S5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions ant\u00e9rieures \u00e0 22.1R2-S2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions 22.1-EVO ant\u00e9rieures \u00e0 22.1R3-S6-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions 22.2 ant\u00e9rieures \u00e0 22.2R3-S4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on SRX4600 and SRX5000 Series versions 21.4 ant\u00e9rieures \u00e0 21.4R3-S7",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved on ACX7000 Series versions 23.4-EVO ant\u00e9rieures \u00e0 23.4R1-S2-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions ant\u00e9rieures \u00e0 22.4R2-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on MX Series with SPC3 line card versions 23.2 ant\u00e9rieures \u00e0 23.2R2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions 22.2 ant\u00e9rieures \u00e0 22.2R2-S1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions 23.1 ant\u00e9rieures \u00e0 23.1R2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on MX Series versions 22.3 ant\u00e9rieures \u00e0 22.3R3-S2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions 22.3 ant\u00e9rieures \u00e0 22.3R3-S3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions 22.2-EVO ant\u00e9rieures \u00e0 22.2R3-S4-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on SRX4600 and SRX5000 Series versions ant\u00e9rieures \u00e0 21.2R3-S8",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS versions 22.3 ant\u00e9rieures \u00e0 22.3R2-S2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on QFX5000 Series and EX4600 Series versions 21.4 ant\u00e9rieures \u00e0 21.4R3-S6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions 22.2-EVO ant\u00e9rieures \u00e0 22.2R2-S1-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS on SRX4600 and SRX5000 Series versions 23.4 ant\u00e9rieures \u00e0 23.4R2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    },
    {
      "description": "Junos OS Evolved versions 23.4-EVO ant\u00e9rieures \u00e0 23.4R1-S2-EVO",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Juniper Networks",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-39560",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39560"
    },
    {
      "name": "CVE-2023-32435",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32435"
    },
    {
      "name": "CVE-2021-44906",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-44906"
    },
    {
      "name": "CVE-2024-20919",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20919"
    },
    {
      "name": "CVE-2024-39554",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39554"
    },
    {
      "name": "CVE-2023-21843",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21843"
    },
    {
      "name": "CVE-2024-39539",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39539"
    },
    {
      "name": "CVE-2021-36160",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-36160"
    },
    {
      "name": "CVE-2020-12401",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-12401"
    },
    {
      "name": "CVE-2024-39558",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39558"
    },
    {
      "name": "CVE-2022-30522",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30522"
    },
    {
      "name": "CVE-2021-37701",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-37701"
    },
    {
      "name": "CVE-2022-21460",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21460"
    },
    {
      "name": "CVE-2021-31535",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31535"
    },
    {
      "name": "CVE-2022-36760",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36760"
    },
    {
      "name": "CVE-2021-33034",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33034"
    },
    {
      "name": "CVE-2024-20926",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20926"
    },
    {
      "name": "CVE-2024-39552",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39552"
    },
    {
      "name": "CVE-2021-27290",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-27290"
    },
    {
      "name": "CVE-2019-11727",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11727"
    },
    {
      "name": "CVE-2023-3390",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3390"
    },
    {
      "name": "CVE-2023-4004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4004"
    },
    {
      "name": "CVE-2021-29469",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-29469"
    },
    {
      "name": "CVE-2023-2002",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2002"
    },
    {
      "name": "CVE-2023-21830",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21830"
    },
    {
      "name": "CVE-2022-22823",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-22823"
    },
    {
      "name": "CVE-2021-23440",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-23440"
    },
    {
      "name": "CVE-2021-32804",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-32804"
    },
    {
      "name": "CVE-2020-13950",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-13950"
    },
    {
      "name": "CVE-2021-26691",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-26691"
    },
    {
      "name": "CVE-2024-39546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39546"
    },
    {
      "name": "CVE-2024-39540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39540"
    },
    {
      "name": "CVE-2018-3737",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-3737"
    },
    {
      "name": "CVE-2024-39543",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39543"
    },
    {
      "name": "CVE-2020-11984",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-11984"
    },
    {
      "name": "CVE-2022-22721",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-22721"
    },
    {
      "name": "CVE-2021-35624",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-35624"
    },
    {
      "name": "CVE-2023-35788",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-35788"
    },
    {
      "name": "CVE-2023-32067",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32067"
    },
    {
      "name": "CVE-2024-39514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39514"
    },
    {
      "name": "CVE-2022-25147",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-25147"
    },
    {
      "name": "CVE-2021-35604",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-35604"
    },
    {
      "name": "CVE-2021-42013",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-42013"
    },
    {
      "name": "CVE-2023-34059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-34059"
    },
    {
      "name": "CVE-2024-39529",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39529"
    },
    {
      "name": "CVE-2006-20001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-20001"
    },
    {
      "name": "CVE-2024-20921",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20921"
    },
    {
      "name": "CVE-2021-2385",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-2385"
    },
    {
      "name": "CVE-2022-29167",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29167"
    },
    {
      "name": "CVE-2020-7774",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-7774"
    },
    {
      "name": "CVE-2019-10747",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10747"
    },
    {
      "name": "CVE-2023-34058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-34058"
    },
    {
      "name": "CVE-2011-5094",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-5094"
    },
    {
      "name": "CVE-2019-16776",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-16776"
    },
    {
      "name": "CVE-2022-21589",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21589"
    },
    {
      "name": "CVE-2022-25315",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-25315"
    },
    {
      "name": "CVE-2019-10097",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10097"
    },
    {
      "name": "CVE-2022-22822",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-22822"
    },
    {
      "name": "CVE-2023-2828",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2828"
    },
    {
      "name": "CVE-2023-22081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-22081"
    },
    {
      "name": "CVE-2023-4206",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4206"
    },
    {
      "name": "CVE-2022-21304",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21304"
    },
    {
      "name": "CVE-2023-3090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3090"
    },
    {
      "name": "CVE-2024-39536",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39536"
    },
    {
      "name": "CVE-2024-39555",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39555"
    },
    {
      "name": "CVE-2022-3564",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-3564"
    },
    {
      "name": "CVE-2023-3611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3611"
    },
    {
      "name": "CVE-2020-13938",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-13938"
    },
    {
      "name": "CVE-2016-10540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10540"
    },
    {
      "name": "CVE-2019-10082",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10082"
    },
    {
      "name": "CVE-2023-42753",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-42753"
    },
    {
      "name": "CVE-2016-1000232",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-1000232"
    },
    {
      "name": "CVE-2015-9262",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-9262"
    },
    {
      "name": "CVE-2023-32360",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32360"
    },
    {
      "name": "CVE-2021-37713",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-37713"
    },
    {
      "name": "CVE-2021-39275",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-39275"
    },
    {
      "name": "CVE-2024-39561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39561"
    },
    {
      "name": "CVE-2022-21303",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21303"
    },
    {
      "name": "CVE-2019-17023",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-17023"
    },
    {
      "name": "CVE-2016-4658",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-4658"
    },
    {
      "name": "CVE-2020-35452",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-35452"
    },
    {
      "name": "CVE-2023-4207",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4207"
    },
    {
      "name": "CVE-2022-21617",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21617"
    },
    {
      "name": "CVE-2023-0767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0767"
    },
    {
      "name": "CVE-2022-41741",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41741"
    },
    {
      "name": "CVE-2023-22067",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-22067"
    },
    {
      "name": "CVE-2021-37712",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-37712"
    },
    {
      "name": "CVE-2022-23852",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23852"
    },
    {
      "name": "CVE-2023-30630",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-30630"
    },
    {
      "name": "CVE-2022-21608",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21608"
    },
    {
      "name": "CVE-2022-2526",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-2526"
    },
    {
      "name": "CVE-2023-20593",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-20593"
    },
    {
      "name": "CVE-2024-39535",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39535"
    },
    {
      "name": "CVE-2024-39545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39545"
    },
    {
      "name": "CVE-2024-39531",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39531"
    },
    {
      "name": "CVE-2022-41742",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41742"
    },
    {
      "name": "CVE-2019-16777",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-16777"
    },
    {
      "name": "CVE-2021-2389",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-2389"
    },
    {
      "name": "CVE-2023-21840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21840"
    },
    {
      "name": "CVE-2019-10081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10081"
    },
    {
      "name": "CVE-2020-1934",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-1934"
    },
    {
      "name": "CVE-2022-30556",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30556"
    },
    {
      "name": "CVE-2020-8648",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-8648"
    },
    {
      "name": "CVE-2022-21270",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21270"
    },
    {
      "name": "CVE-2023-21963",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21963"
    },
    {
      "name": "CVE-2022-25235",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-25235"
    },
    {
      "name": "CVE-2023-21980",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21980"
    },
    {
      "name": "CVE-2024-39530",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39530"
    },
    {
      "name": "CVE-2024-39532",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39532"
    },
    {
      "name": "CVE-2023-27522",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-27522"
    },
    {
      "name": "CVE-2024-39557",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39557"
    },
    {
      "name": "CVE-2021-2390",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-2390"
    },
    {
      "name": "CVE-2024-39550",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39550"
    },
    {
      "name": "CVE-2022-28615",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-28615"
    },
    {
      "name": "CVE-2022-21451",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21451"
    },
    {
      "name": "CVE-2014-10064",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-10064"
    },
    {
      "name": "CVE-2024-39511",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39511"
    },
    {
      "name": "CVE-2022-23943",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23943"
    },
    {
      "name": "CVE-2024-39548",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39548"
    },
    {
      "name": "CVE-2020-11993",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-11993"
    },
    {
      "name": "CVE-2023-22652",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-22652"
    },
    {
      "name": "CVE-2024-39528",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39528"
    },
    {
      "name": "CVE-2023-3341",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3341"
    },
    {
      "name": "CVE-2023-22025",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-22025"
    },
    {
      "name": "CVE-2021-43527",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43527"
    },
    {
      "name": "CVE-2022-37434",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37434"
    },
    {
      "name": "CVE-2024-39559",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39559"
    },
    {
      "name": "CVE-2014-7191",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-7191"
    },
    {
      "name": "CVE-2021-2356",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-2356"
    },
    {
      "name": "CVE-2020-36049",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-36049"
    },
    {
      "name": "CVE-2023-4208",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4208"
    },
    {
      "name": "CVE-2021-41524",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41524"
    },
    {
      "name": "CVE-2022-3517",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-3517"
    },
    {
      "name": "CVE-2020-12402",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-12402"
    },
    {
      "name": "CVE-2019-11719",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11719"
    },
    {
      "name": "CVE-2021-34798",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-34798"
    },
    {
      "name": "CVE-2024-39519",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39519"
    },
    {
      "name": "CVE-2021-32803",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-32803"
    },
    {
      "name": "CVE-2019-17006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-17006"
    },
    {
      "name": "CVE-2022-21595",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21595"
    },
    {
      "name": "CVE-2019-16775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-16775"
    },
    {
      "name": "CVE-2020-12403",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-12403"
    },
    {
      "name": "CVE-2023-3776",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3776"
    },
    {
      "name": "CVE-2023-2700",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2700"
    },
    {
      "name": "CVE-2020-7754",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-7754"
    },
    {
      "name": "CVE-2024-39533",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39533"
    },
    {
      "name": "CVE-2021-22543",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-22543"
    },
    {
      "name": "CVE-2021-33909",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33909"
    },
    {
      "name": "CVE-2021-26690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-26690"
    },
    {
      "name": "CVE-2022-22719",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-22719"
    },
    {
      "name": "CVE-2022-40674",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-40674"
    },
    {
      "name": "CVE-2022-46663",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46663"
    },
    {
      "name": "CVE-2011-1473",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-1473"
    },
    {
      "name": "CVE-2024-39513",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39513"
    },
    {
      "name": "CVE-2021-3803",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3803"
    },
    {
      "name": "CVE-2022-21417",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21417"
    },
    {
      "name": "CVE-2024-39518",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39518"
    },
    {
      "name": "CVE-2023-37450",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-37450"
    },
    {
      "name": "CVE-2021-30641",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-30641"
    },
    {
      "name": "CVE-2021-3177",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3177"
    },
    {
      "name": "CVE-2020-7660",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-7660"
    },
    {
      "name": "CVE-2022-31813",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-31813"
    },
    {
      "name": "CVE-2023-34969",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-34969"
    },
    {
      "name": "CVE-2019-9517",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517"
    },
    {
      "name": "CVE-2018-20834",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-20834"
    },
    {
      "name": "CVE-2020-12362",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-12362"
    },
    {
      "name": "CVE-2020-1927",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-1927"
    },
    {
      "name": "CVE-2022-21592",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21592"
    },
    {
      "name": "CVE-2021-3347",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3347"
    },
    {
      "name": "CVE-2022-25236",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-25236"
    },
    {
      "name": "CVE-2023-25690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-25690"
    },
    {
      "name": "CVE-2021-2342",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-2342"
    },
    {
      "name": "CVE-2022-22720",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-22720"
    },
    {
      "name": "CVE-2017-15010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-15010"
    },
    {
      "name": "CVE-2019-10092",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10092"
    },
    {
      "name": "CVE-2024-39541",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39541"
    },
    {
      "name": "CVE-2021-44224",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-44224"
    },
    {
      "name": "CVE-2024-39537",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39537"
    },
    {
      "name": "CVE-2022-21444",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21444"
    },
    {
      "name": "CVE-2019-17567",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-17567"
    },
    {
      "name": "CVE-2018-7408",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-7408"
    },
    {
      "name": "CVE-2019-20149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-20149"
    },
    {
      "name": "CVE-2024-20932",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20932"
    },
    {
      "name": "CVE-2023-35001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-35001"
    },
    {
      "name": "CVE-2024-39551",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39551"
    },
    {
      "name": "CVE-2023-4863",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4863"
    },
    {
      "name": "CVE-2022-29404",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29404"
    },
    {
      "name": "CVE-2020-14145",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-14145"
    },
    {
      "name": "CVE-2019-11756",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-11756"
    },
    {
      "name": "CVE-2024-20918",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20918"
    },
    {
      "name": "CVE-2024-39565",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39565"
    },
    {
      "name": "CVE-2021-31618",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-31618"
    },
    {
      "name": "CVE-2022-21344",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21344"
    },
    {
      "name": "CVE-2023-24329",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-24329"
    },
    {
      "name": "CVE-2024-39549",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39549"
    },
    {
      "name": "CVE-2022-21367",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21367"
    },
    {
      "name": "CVE-2021-33193",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33193"
    },
    {
      "name": "CVE-2021-41773",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41773"
    },
    {
      "name": "CVE-2020-11668",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-11668"
    },
    {
      "name": "CVE-2022-26377",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26377"
    },
    {
      "name": "CVE-2021-44790",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-44790"
    },
    {
      "name": "CVE-2020-9490",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-9490"
    },
    {
      "name": "CVE-2020-28502",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-28502"
    },
    {
      "name": "CVE-2024-39556",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39556"
    },
    {
      "name": "CVE-2022-37436",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37436"
    },
    {
      "name": "CVE-2021-33033",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33033"
    },
    {
      "name": "CVE-2023-32439",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32439"
    },
    {
      "name": "CVE-2020-12400",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-12400"
    },
    {
      "name": "CVE-2023-21912",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21912"
    },
    {
      "name": "CVE-2022-28330",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-28330"
    },
    {
      "name": "CVE-2024-39542",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39542"
    },
    {
      "name": "CVE-2022-21454",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21454"
    },
    {
      "name": "CVE-2017-1000048",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-1000048"
    },
    {
      "name": "CVE-2022-21427",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21427"
    },
    {
      "name": "CVE-2021-40438",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-40438"
    },
    {
      "name": "CVE-2024-20945",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20945"
    },
    {
      "name": "CVE-2022-22824",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-22824"
    },
    {
      "name": "CVE-2020-6829",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-6829"
    },
    {
      "name": "CVE-2021-2372",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-2372"
    },
    {
      "name": "CVE-2022-21245",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21245"
    },
    {
      "name": "CVE-2020-28469",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-28469"
    },
    {
      "name": "CVE-2024-20952",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20952"
    },
    {
      "name": "CVE-2019-10098",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10098"
    },
    {
      "name": "CVE-2024-39538",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39538"
    },
    {
      "name": "CVE-2022-28614",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-28614"
    }
  ],
  "initial_release_date": "2024-07-12T00:00:00",
  "last_revision_date": "2024-10-15T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-0575",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-07-12T00:00:00.000000"
    },
    {
      "description": "Correction d\u0027identifiants CVE erron\u00e9s",
      "revision_date": "2024-10-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Juniper Networks. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Juniper Networks",
  "vendor_advisories": [
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA83001",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Inconsistent-information-in-the-TE-database-can-lead-to-an-rpd-crash-CVE-2024-39541"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA82976",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-The-802-1X-Authentication-Daemon-crashes-on-running-a-specific-command-CVE-2024-39511"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA83027",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Session-Smart-Router-Multiple-vulnerabilities-resolved"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA83021",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-SRX4600-SRX5000-Series-TCP-packets-with-SYN-FIN-or-SYN-RST-are-transferred-after-enabling-no-syn-check-with-Express-Path-CVE-2024-39561"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA83018",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Receipt-of-specific-PIM-packet-causes-rpd-crash-when-PIM-is-configured-along-with-MoFRR-CVE-2024-39558"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA82987",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-RPD-crashes-upon-concurrent-deletion-of-a-routing-instance-and-receipt-of-an-SNMP-request-CVE-2024-39528"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA82982",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-MX240-MX480-MX960-platforms-using-MPC10E-Memory-leak-will-be-observed-when-subscribed-to-a-specific-subscription-on-Junos-Telemetry-Interface-CVE-2024-39518"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA83012",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-MX-Series-with-SPC3-line-card-Port-flaps-causes-rtlogd-memory-leak-leading-to-Denial-of-Service-CVE-2024-39550"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA83019",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-Evolved-Receipt-of-a-specific-TCP-packet-may-result-in-a-system-crash-vmcore-on-dual-RE-systems-with-NSR-enabled-CVE-2024-39559"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA83004",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Receipt-of-a-large-RPKI-RTR-PDU-packet-can-cause-rpd-to-crash-CVE-2024-39543"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA83010",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-Evolved-Receipt-of-specific-packets-in-the-aftmand-process-will-lead-to-a-memory-leak-CVE-2024-39548"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA83014",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-BGP-multipath-incremental-calculation-is-resulting-in-an-rpd-crash-CVE-2024-39554"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA82996",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Flaps-of-BFD-sessions-with-authentication-cause-a-ppmd-memory-leak-CVE-2024-39536"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA82980",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Receiving-specific-traffic-on-devices-with-EVPN-VPWS-with-IGMP-snooping-enabled-will-cause-the-rpd-to-crash-CVE-2024-39514"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA83000",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-SRX-Series-and-MX-Series-with-SPC3-Specific-valid-TCP-traffic-can-cause-a-pfe-crash-CVE-2024-39540"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA83008",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-Evolved-Local-low-privilege-user-can-gain-root-permissions-leading-to-privilege-escalation-CVE-2024-39546"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA82991",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-Evolved-ACX7000-Series-Protocol-specific-DDoS-configuration-affects-other-protocols-CVE-2024-39531"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA83011",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-Receipt-of-malformed-BGP-path-attributes-leads-to-a-memory-leak-CVE-2024-39549"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA82989",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-Attempting-to-access-specific-sensors-on-platforms-not-supporting-these-will-lead-to-a-chassisd-crash-CVE-2024-39530"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA82997",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-Evolved-ACX7000-Series-Ports-which-have-been-inadvertently-exposed-can-be-reached-over-the-network-CVE-2024-39537"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA83023",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-SRX-Series-EX-Series-J-Web-An-unauthenticated-network-based-attacker-can-perform-XPATH-injection-attack-against-a-device-CVE-2024-39565"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA83026",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-24-1R1-release"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA83013",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-SRX-Series-and-MX-Series-with-SPC3-and-MS-MPC-MIC-Receipt-of-specific-packets-in-H-323-ALG-causes-traffic-drop-CVE-2024-39551"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA83002",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-A-malformed-CFM-packet-or-specific-transit-traffic-leads-to-FPC-crash-CVE-2024-39542"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA83015",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Receipt-of-a-specific-malformed-BGP-update-causes-the-session-to-reset-CVE-2024-39555"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA83007",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-SRX-Series-and-MX-Series-with-SPC3-and-NFX350-When-VPN-tunnels-parameters-are-not-matching-the-iked-process-will-crash-CVE-2024-39545"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA82995",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-Evolved-ACX7000-Series-When-specific-traffic-is-received-in-a-VPLS-scenario-evo-pfemand-crashes-CVE-2024-39535"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA82993",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-QFX5000-Series-and-EX4600-Series-Output-firewall-filter-is-not-applied-if-certain-match-criteria-are-used-CVE-2024-39533"
    },
    {
      "published_at": "2024-07-11",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA75726",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Malformed-BGP-UPDATE-causes-RPD-crash-CVE-2024-39552"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA82988",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-SRX-Series-If-DNS-traceoptions-are-configured-in-a-DGA-or-tunnel-detection-scenario-specific-DNS-traffic-leads-to-a-PFE-crash-CVE-2024-39529"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA83017",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-Evolved-MAC-table-changes-cause-a-memory-leak-CVE-2024-39557"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA82983",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-Evolved-ACX-7000-Series-Multicast-traffic-is-looped-in-a-multihoming-EVPN-MPLS-scenario-CVE-2024-39519"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA83020",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Memory-leak-due-to-RSVP-neighbor-persistent-error-leading-to-kernel-crash-CVE-2024-39560"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA82998",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-Evolved-ACX7000-Series-When-multicast-traffic-with-a-specific-S-G-is-received-evo-pfemand-crashes-CVE-2024-39538"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA82999",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-MX-Series-Continuous-subscriber-logins-will-lead-to-a-memory-leak-and-eventually-an-FPC-crash-CVE-2024-39539"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA83016",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Loading-a-malicious-certificate-from-the-CLI-may-result-in-a-stack-based-overflow-CVE-2024-39556"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA82992",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Confidential-information-in-logs-can-be-accessed-by-another-user-CVE-2024-39532"
    },
    {
      "published_at": "2024-07-10",
      "title": "Bulletin de s\u00e9curit\u00e9 Juniper Networks JSA82978",
      "url": "https://supportportal.juniper.net/s/article/2024-07-Security-Bulletin-Junos-OS-Evolved-Execution-of-a-specific-CLI-command-will-cause-a-crash-in-the-AFT-manager-CVE-2024-39513"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Security QRadar EDR versions 3.12.x ant\u00e9rieures \u00e0 3.12.10",
      "product": {
        "name": "QRadar",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM WebSphere Application Server version 9.0 avec Java Technology Edition versions ant\u00e9rieures \u00e0 8 Service Refresh 8 FP30",
      "product": {
        "name": "WebSphere",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Db2 Big SQL on Cloud Pak for Data versions 7.2.x \u00e0 7.5.x ant\u00e9rieures \u00e0 7.5.3",
      "product": {
        "name": "Db2",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Db2 versions 11.5.x sans le dernier correctif de s\u00e9curit\u00e9 ",
      "product": {
        "name": "Db2",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "AIX version 7.3 avec un version de Python 3.9 ant\u00e9rieure \u00e0 3.9.19.2",
      "product": {
        "name": "AIX",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "QRadar Suite versions 1.10.x ant\u00e9rieures \u00e0 1.10.24.0",
      "product": {
        "name": "QRadar SIEM",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "VIOS version 4.1 avec un version de Python 3.9 ant\u00e9rieure \u00e0 3.9.19.2",
      "product": {
        "name": "VIOS",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM WebSphere Application Server versions 8.5.x ant\u00e9rieures \u00e0 8.5.5.11 ou sans le correctif de s\u00e9curit\u00e9 temporaire PH62458",
      "product": {
        "name": "WebSphere",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Control Center versions 6.2.x ant\u00e9rieures \u00e0 6.2.1.0 GA iFix13",
      "product": {
        "name": "Sterling Connect:Direct",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Control Center versions 6.3.x ant\u00e9rieures \u00e0 6.3.1.0 GA iFix02",
      "product": {
        "name": "Sterling Connect:Direct",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Cognos Dashboards on Cloud Pak for Data versions ant\u00e9rieures \u00e0 5.0.0",
      "product": {
        "name": "Cognos Analytics",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2023-21938",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21938"
    },
    {
      "name": "CVE-2024-29041",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-29041"
    },
    {
      "name": "CVE-2024-37891",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37891"
    },
    {
      "name": "CVE-2024-21144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21144"
    },
    {
      "name": "CVE-2023-23613",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-23613"
    },
    {
      "name": "CVE-2024-33602",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-33602"
    },
    {
      "name": "CVE-2023-21939",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21939"
    },
    {
      "name": "CVE-2024-39008",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39008"
    },
    {
      "name": "CVE-2024-20926",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20926"
    },
    {
      "name": "CVE-2024-22353",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-22353"
    },
    {
      "name": "CVE-2023-29256",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-29256"
    },
    {
      "name": "CVE-2024-21890",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21890"
    },
    {
      "name": "CVE-2024-21896",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21896"
    },
    {
      "name": "CVE-2023-30431",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-30431"
    },
    {
      "name": "CVE-2023-32067",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-32067"
    },
    {
      "name": "CVE-2024-25024",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-25024"
    },
    {
      "name": "CVE-2024-22361",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-22361"
    },
    {
      "name": "CVE-2024-22025",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-22025"
    },
    {
      "name": "CVE-2024-20921",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20921"
    },
    {
      "name": "CVE-2023-35012",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-35012"
    },
    {
      "name": "CVE-2023-4807",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4807"
    },
    {
      "name": "CVE-2023-30443",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-30443"
    },
    {
      "name": "CVE-2024-29415",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-29415"
    },
    {
      "name": "CVE-2023-27869",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-27869"
    },
    {
      "name": "CVE-2024-29857",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-29857"
    },
    {
      "name": "CVE-2023-25193",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-25193"
    },
    {
      "name": "CVE-2024-33600",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-33600"
    },
    {
      "name": "CVE-2023-30446",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-30446"
    },
    {
      "name": "CVE-2023-22081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-22081"
    },
    {
      "name": "CVE-2023-46809",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-46809"
    },
    {
      "name": "CVE-2024-33599",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-33599"
    },
    {
      "name": "CVE-2024-25629",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-25629"
    },
    {
      "name": "CVE-2023-27868",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-27868"
    },
    {
      "name": "CVE-2024-30172",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-30172"
    },
    {
      "name": "CVE-2024-37168",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37168"
    },
    {
      "name": "CVE-2024-28176",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-28176"
    },
    {
      "name": "CVE-2023-22067",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-22067"
    },
    {
      "name": "CVE-2022-41917",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41917"
    },
    {
      "name": "CVE-2024-22019",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-22019"
    },
    {
      "name": "CVE-2024-22233",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-22233"
    },
    {
      "name": "CVE-2023-30445",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-30445"
    },
    {
      "name": "CVE-2023-30447",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-30447"
    },
    {
      "name": "CVE-2024-21634",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21634"
    },
    {
      "name": "CVE-2023-30442",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-30442"
    },
    {
      "name": "CVE-2024-27983",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27983"
    },
    {
      "name": "CVE-2024-30261",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-30261"
    },
    {
      "name": "CVE-2023-27867",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-27867"
    },
    {
      "name": "CVE-2023-45803",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-45803"
    },
    {
      "name": "CVE-2024-21892",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21892"
    },
    {
      "name": "CVE-2024-21147",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21147"
    },
    {
      "name": "CVE-2024-27982",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27982"
    },
    {
      "name": "CVE-2024-21140",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21140"
    },
    {
      "name": "CVE-2024-33601",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-33601"
    },
    {
      "name": "CVE-2023-21937",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21937"
    },
    {
      "name": "CVE-2023-30448",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-30448"
    },
    {
      "name": "CVE-2024-25062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-25062"
    },
    {
      "name": "CVE-2023-2597",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2597"
    },
    {
      "name": "CVE-2023-27558",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-27558"
    },
    {
      "name": "CVE-2024-37890",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37890"
    },
    {
      "name": "CVE-2023-30449",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-30449"
    },
    {
      "name": "CVE-2023-2004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2004"
    },
    {
      "name": "CVE-2023-5676",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5676"
    },
    {
      "name": "CVE-2022-36046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36046"
    },
    {
      "name": "CVE-2024-21891",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21891"
    },
    {
      "name": "CVE-2023-21968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21968"
    },
    {
      "name": "CVE-2024-30171",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-30171"
    },
    {
      "name": "CVE-2024-20932",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20932"
    },
    {
      "name": "CVE-2024-30260",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-30260"
    },
    {
      "name": "CVE-2023-21930",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21930"
    },
    {
      "name": "CVE-2024-22017",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-22017"
    },
    {
      "name": "CVE-2024-20918",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20918"
    },
    {
      "name": "CVE-2023-23487",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-23487"
    },
    {
      "name": "CVE-2024-3651",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-3651"
    },
    {
      "name": "CVE-2024-34064",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-34064"
    },
    {
      "name": "CVE-2023-31130",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-31130"
    },
    {
      "name": "CVE-2023-42282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-42282"
    },
    {
      "name": "CVE-2024-20945",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20945"
    },
    {
      "name": "CVE-2024-28799",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-28799"
    },
    {
      "name": "CVE-2023-21967",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21967"
    },
    {
      "name": "CVE-2024-2961",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-2961"
    },
    {
      "name": "CVE-2024-27267",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27267"
    },
    {
      "name": "CVE-2024-28182",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-28182"
    },
    {
      "name": "CVE-2023-6597",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-6597"
    },
    {
      "name": "CVE-2024-20952",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20952"
    },
    {
      "name": "CVE-2023-23612",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-23612"
    },
    {
      "name": "CVE-2024-6345",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6345"
    }
  ],
  "initial_release_date": "2024-08-16T00:00:00",
  "last_revision_date": "2024-08-16T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-0692",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-08-16T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits IBM. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM",
  "vendor_advisories": [
    {
      "published_at": "2024-08-11",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7165247",
      "url": "https://www.ibm.com/support/pages/node/7165247"
    },
    {
      "published_at": "2024-08-13",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7165360",
      "url": "https://www.ibm.com/support/pages/node/7165360"
    },
    {
      "published_at": "2024-08-13",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7165340",
      "url": "https://www.ibm.com/support/pages/node/7165340"
    },
    {
      "published_at": "2024-08-12",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7165344",
      "url": "https://www.ibm.com/support/pages/node/7165344"
    },
    {
      "published_at": "2024-08-13",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7165423",
      "url": "https://www.ibm.com/support/pages/node/7165423"
    },
    {
      "published_at": "2024-08-12",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7165284",
      "url": "https://www.ibm.com/support/pages/node/7165284"
    },
    {
      "published_at": "2024-08-13",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7165362",
      "url": "https://www.ibm.com/support/pages/node/7165362"
    },
    {
      "published_at": "2024-08-13",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7165364",
      "url": "https://www.ibm.com/support/pages/node/7165364"
    },
    {
      "published_at": "2024-08-13",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7165363",
      "url": "https://www.ibm.com/support/pages/node/7165363"
    },
    {
      "published_at": "2024-08-14",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7165488",
      "url": "https://www.ibm.com/support/pages/node/7165488"
    },
    {
      "published_at": "2024-08-16",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7165685",
      "url": "https://www.ibm.com/support/pages/node/7165685"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "QRadar Log Source Management App versions ant\u00e9rieures \u00e0 7.0.11",
      "product": {
        "name": "QRadar Log Source Management App",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "DB2 Query Management Facility versions 13.1.1 et 13.1.2 sans la derni\u00e8re version du JRE",
      "product": {
        "name": "Db2 Query Management Facility",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-42459",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-42459"
    },
    {
      "name": "CVE-2024-21536",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21536"
    },
    {
      "name": "CVE-2024-55565",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-55565"
    },
    {
      "name": "CVE-2024-43788",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-43788"
    },
    {
      "name": "CVE-2024-4068",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-4068"
    },
    {
      "name": "CVE-2024-20926",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20926"
    },
    {
      "name": "CVE-2024-43799",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-43799"
    },
    {
      "name": "CVE-2024-42460",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-42460"
    },
    {
      "name": "CVE-2024-22361",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-22361"
    },
    {
      "name": "CVE-2024-20921",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20921"
    },
    {
      "name": "CVE-2023-4807",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-4807"
    },
    {
      "name": "CVE-2024-33883",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-33883"
    },
    {
      "name": "CVE-2023-22081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-22081"
    },
    {
      "name": "CVE-2024-45590",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45590"
    },
    {
      "name": "CVE-2024-43796",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-43796"
    },
    {
      "name": "CVE-2024-4067",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-4067"
    },
    {
      "name": "CVE-2023-22067",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-22067"
    },
    {
      "name": "CVE-2024-48949",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-48949"
    },
    {
      "name": "CVE-2024-21538",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21538"
    },
    {
      "name": "CVE-2024-47764",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47764"
    },
    {
      "name": "CVE-2024-48948",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-48948"
    },
    {
      "name": "CVE-2024-45296",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45296"
    },
    {
      "name": "CVE-2024-45801",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45801"
    },
    {
      "name": "CVE-2024-52798",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-52798"
    },
    {
      "name": "CVE-2024-47875",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47875"
    },
    {
      "name": "CVE-2024-37890",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37890"
    },
    {
      "name": "CVE-2023-5676",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5676"
    },
    {
      "name": "CVE-2024-43800",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-43800"
    },
    {
      "name": "CVE-2024-47068",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47068"
    },
    {
      "name": "CVE-2024-20932",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20932"
    },
    {
      "name": "CVE-2024-20918",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20918"
    },
    {
      "name": "CVE-2024-42461",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-42461"
    },
    {
      "name": "CVE-2024-20945",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20945"
    },
    {
      "name": "CVE-2024-20952",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20952"
    }
  ],
  "initial_release_date": "2025-01-17T00:00:00",
  "last_revision_date": "2025-01-17T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0045",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-01-17T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits IBM. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM",
  "vendor_advisories": [
    {
      "published_at": "2025-01-13",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7180895",
      "url": "https://www.ibm.com/support/pages/node/7180895"
    },
    {
      "published_at": "2025-01-13",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7180894",
      "url": "https://www.ibm.com/support/pages/node/7180894"
    },
    {
      "published_at": "2025-01-10",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7180725",
      "url": "https://www.ibm.com/support/pages/node/7180725"
    }
  ]
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:oracle:graalvm:21.3.8:*:*:*:enterprise:*:*:*",
              "matchCriteriaId": "CF534BA8-A2A5-4768-A480-CFB885308AF8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:graalvm:22.3.4:*:*:*:enterprise:*:*:*",
              "matchCriteriaId": "876A5640-82A8-4BDC-8E0A-4D6340F5417D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "2C5055FD-0E19-4C42-9B1F-CBE222855156",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jdk:17.0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "EF6AA431-8965-4B53-AF0F-DB3AB7A9A3F3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:17.0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "BF274813-F650-447C-A1A6-61D5F8FF71BA",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:netapp:cloud_insights_acquisition_unit:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CCAA4004-9319-478C-9D55-0E8307F872F6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:netapp:cloud_insights_storage_workload_security_agent:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3B199052-5732-4726-B06B-A12C70DFB891",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1BE6C1F-2565-4E97-92AA-16563E5660A5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 17.0.9; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 and  22.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad en el producto Oracle Java SE, Oracle GraalVM para JDK, Oracle GraalVM Enterprise Edition de Oracle Java SE (componente: Seguridad). Las versiones compatibles que se ven afectadas son Oracle Java SE: 17.0.9; Oracle GraalVM para JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 y 22.3.4. Una vulnerabilidad f\u00e1cilmente explotable permite a un atacante no autenticado con acceso a la red a trav\u00e9s de m\u00faltiples protocolos comprometer Oracle Java SE, Oracle GraalVM para JDK y Oracle GraalVM Enterprise Edition. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a la creaci\u00f3n, eliminaci\u00f3n o modificaci\u00f3n de datos cr\u00edticos o de todos los datos accesibles de Oracle Java SE, Oracle GraalVM para JDK, Oracle GraalVM Enterprise Edition. Nota: Esta vulnerabilidad se aplica a implementaciones de Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o subprogramas de Java en sandbox, que cargan y ejecutan c\u00f3digo que no es de confianza (por ejemplo, c\u00f3digo que proviene de Internet) y dependen del entorno limitado de Java para su seguridad. Esta vulnerabilidad no se aplica a implementaciones de Java, normalmente en servidores, que cargan y ejecutan s\u00f3lo c\u00f3digo confiable (por ejemplo, c\u00f3digo instalado por un administrador). CVSS 3.1 Puntaje base 7.5 (Impactos en la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
    }
  ],
  "id": "CVE-2024-20932",
  "lastModified": "2024-11-21T08:53:27.550",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "secalert_us@oracle.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2024-01-16T22:15:40.763",
  "references": [
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.netapp.com/advisory/ntap-20240201-0002/"
    },
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Patch"
      ],
      "url": "https://www.oracle.com/security-alerts/cpujan2024.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.netapp.com/advisory/ntap-20240201-0002/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://www.oracle.com/security-alerts/cpujan2024.html"
    }
  ],
  "sourceIdentifier": "secalert_us@oracle.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2024-20932"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-284"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-01-16T22:15:40Z",
    "severity": "HIGH"
  },
  "details": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 17.0.9; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 and  22.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).",
  "id": "GHSA-ccwc-jrj7-h4v6",
  "modified": "2024-02-14T21:30:31Z",
  "published": "2024-01-17T00:30:20Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20932"
    },
    {
      "type": "WEB",
      "url": "https://security.netapp.com/advisory/ntap-20240201-0002"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/security-alerts/cpujan2024.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
      "type": "CVSS_V3"
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2024-20932",
    "id": "GSD-2024-20932"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2024-20932"
      ],
      "details": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 17.0.9; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 and  22.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).",
      "id": "GSD-2024-20932",
      "modified": "2023-12-13T01:21:43.108137Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert_us@oracle.com",
        "ID": "CVE-2024-20932",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Java SE JDK and JRE",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "Oracle Java SE:17.0.9"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "Oracle GraalVM for JDK:17.0.9"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "Oracle GraalVM Enterprise Edition:21.3.8"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "Oracle GraalVM Enterprise Edition:22.3.4"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Oracle Corporation"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 17.0.9; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 and  22.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data."
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://www.oracle.com/security-alerts/cpujan2024.html",
            "refsource": "MISC",
            "url": "https://www.oracle.com/security-alerts/cpujan2024.html"
          },
          {
            "name": "https://security.netapp.com/advisory/ntap-20240201-0002/",
            "refsource": "MISC",
            "url": "https://security.netapp.com/advisory/ntap-20240201-0002/"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:oracle:graalvm:21.3.8:*:*:*:enterprise:*:*:*",
                    "matchCriteriaId": "CF534BA8-A2A5-4768-A480-CFB885308AF8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:graalvm:22.3.4:*:*:*:enterprise:*:*:*",
                    "matchCriteriaId": "876A5640-82A8-4BDC-8E0A-4D6340F5417D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.9:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2C5055FD-0E19-4C42-9B1F-CBE222855156",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:jdk:17.0.9:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EF6AA431-8965-4B53-AF0F-DB3AB7A9A3F3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:oracle:jre:17.0.9:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BF274813-F650-447C-A1A6-61D5F8FF71BA",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:netapp:cloud_insights_acquisition_unit:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CCAA4004-9319-478C-9D55-0E8307F872F6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:netapp:cloud_insights_storage_workload_security_agent:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3B199052-5732-4726-B06B-A12C70DFB891",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F1BE6C1F-2565-4E97-92AA-16563E5660A5",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "descriptions": [
          {
            "lang": "en",
            "value": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 17.0.9; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 and  22.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
          },
          {
            "lang": "es",
            "value": "Vulnerabilidad en el producto Oracle Java SE, Oracle GraalVM para JDK, Oracle GraalVM Enterprise Edition de Oracle Java SE (componente: Seguridad). Las versiones compatibles que se ven afectadas son Oracle Java SE: 17.0.9; Oracle GraalVM para JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 y 22.3.4. Una vulnerabilidad f\u00e1cilmente explotable permite a un atacante no autenticado con acceso a la red a trav\u00e9s de m\u00faltiples protocolos comprometer Oracle Java SE, Oracle GraalVM para JDK y Oracle GraalVM Enterprise Edition. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a la creaci\u00f3n, eliminaci\u00f3n o modificaci\u00f3n de datos cr\u00edticos o de todos los datos accesibles de Oracle Java SE, Oracle GraalVM para JDK, Oracle GraalVM Enterprise Edition. Nota: Esta vulnerabilidad se aplica a implementaciones de Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o subprogramas de Java en sandbox, que cargan y ejecutan c\u00f3digo que no es de confianza (por ejemplo, c\u00f3digo que proviene de Internet) y dependen del entorno limitado de Java para su seguridad. Esta vulnerabilidad no se aplica a implementaciones de Java, normalmente en servidores, que cargan y ejecutan s\u00f3lo c\u00f3digo confiable (por ejemplo, c\u00f3digo instalado por un administrador). CVSS 3.1 Puntaje base 7.5 (Impactos en la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)."
          }
        ],
        "id": "CVE-2024-20932",
        "lastModified": "2024-02-14T20:46:22.083",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 3.6,
              "source": "secalert_us@oracle.com",
              "type": "Primary"
            }
          ]
        },
        "published": "2024-01-16T22:15:40.763",
        "references": [
          {
            "source": "secalert_us@oracle.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20240201-0002/"
          },
          {
            "source": "secalert_us@oracle.com",
            "tags": [
              "Patch"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujan2024.html"
          }
        ],
        "sourceIdentifier": "secalert_us@oracle.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-noinfo"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "java-17-openjdk-17.0.10.0-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the java-17-openjdk-17.0.10.0-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-13587",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13587-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-20918 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-20918/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-20919 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-20919/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-20921 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-20921/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-20932 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-20932/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-20945 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-20945/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-20952 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-20952/"
      }
    ],
    "title": "java-17-openjdk-17.0.10.0-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:13587-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-17-openjdk-17.0.10.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openjdk-17.0.10.0-1.1.aarch64",
                  "product_id": "java-17-openjdk-17.0.10.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-demo-17.0.10.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openjdk-demo-17.0.10.0-1.1.aarch64",
                  "product_id": "java-17-openjdk-demo-17.0.10.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-devel-17.0.10.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openjdk-devel-17.0.10.0-1.1.aarch64",
                  "product_id": "java-17-openjdk-devel-17.0.10.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-headless-17.0.10.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openjdk-headless-17.0.10.0-1.1.aarch64",
                  "product_id": "java-17-openjdk-headless-17.0.10.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-javadoc-17.0.10.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openjdk-javadoc-17.0.10.0-1.1.aarch64",
                  "product_id": "java-17-openjdk-javadoc-17.0.10.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-jmods-17.0.10.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openjdk-jmods-17.0.10.0-1.1.aarch64",
                  "product_id": "java-17-openjdk-jmods-17.0.10.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-src-17.0.10.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openjdk-src-17.0.10.0-1.1.aarch64",
                  "product_id": "java-17-openjdk-src-17.0.10.0-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-17-openjdk-17.0.10.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openjdk-17.0.10.0-1.1.ppc64le",
                  "product_id": "java-17-openjdk-17.0.10.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-demo-17.0.10.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openjdk-demo-17.0.10.0-1.1.ppc64le",
                  "product_id": "java-17-openjdk-demo-17.0.10.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-devel-17.0.10.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openjdk-devel-17.0.10.0-1.1.ppc64le",
                  "product_id": "java-17-openjdk-devel-17.0.10.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-headless-17.0.10.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openjdk-headless-17.0.10.0-1.1.ppc64le",
                  "product_id": "java-17-openjdk-headless-17.0.10.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-javadoc-17.0.10.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openjdk-javadoc-17.0.10.0-1.1.ppc64le",
                  "product_id": "java-17-openjdk-javadoc-17.0.10.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-jmods-17.0.10.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openjdk-jmods-17.0.10.0-1.1.ppc64le",
                  "product_id": "java-17-openjdk-jmods-17.0.10.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-src-17.0.10.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openjdk-src-17.0.10.0-1.1.ppc64le",
                  "product_id": "java-17-openjdk-src-17.0.10.0-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-17-openjdk-17.0.10.0-1.1.s390x",
                "product": {
                  "name": "java-17-openjdk-17.0.10.0-1.1.s390x",
                  "product_id": "java-17-openjdk-17.0.10.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-demo-17.0.10.0-1.1.s390x",
                "product": {
                  "name": "java-17-openjdk-demo-17.0.10.0-1.1.s390x",
                  "product_id": "java-17-openjdk-demo-17.0.10.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-devel-17.0.10.0-1.1.s390x",
                "product": {
                  "name": "java-17-openjdk-devel-17.0.10.0-1.1.s390x",
                  "product_id": "java-17-openjdk-devel-17.0.10.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-headless-17.0.10.0-1.1.s390x",
                "product": {
                  "name": "java-17-openjdk-headless-17.0.10.0-1.1.s390x",
                  "product_id": "java-17-openjdk-headless-17.0.10.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-javadoc-17.0.10.0-1.1.s390x",
                "product": {
                  "name": "java-17-openjdk-javadoc-17.0.10.0-1.1.s390x",
                  "product_id": "java-17-openjdk-javadoc-17.0.10.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-jmods-17.0.10.0-1.1.s390x",
                "product": {
                  "name": "java-17-openjdk-jmods-17.0.10.0-1.1.s390x",
                  "product_id": "java-17-openjdk-jmods-17.0.10.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-src-17.0.10.0-1.1.s390x",
                "product": {
                  "name": "java-17-openjdk-src-17.0.10.0-1.1.s390x",
                  "product_id": "java-17-openjdk-src-17.0.10.0-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-17-openjdk-17.0.10.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openjdk-17.0.10.0-1.1.x86_64",
                  "product_id": "java-17-openjdk-17.0.10.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-demo-17.0.10.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openjdk-demo-17.0.10.0-1.1.x86_64",
                  "product_id": "java-17-openjdk-demo-17.0.10.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-devel-17.0.10.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openjdk-devel-17.0.10.0-1.1.x86_64",
                  "product_id": "java-17-openjdk-devel-17.0.10.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-headless-17.0.10.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openjdk-headless-17.0.10.0-1.1.x86_64",
                  "product_id": "java-17-openjdk-headless-17.0.10.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-javadoc-17.0.10.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openjdk-javadoc-17.0.10.0-1.1.x86_64",
                  "product_id": "java-17-openjdk-javadoc-17.0.10.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-jmods-17.0.10.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openjdk-jmods-17.0.10.0-1.1.x86_64",
                  "product_id": "java-17-openjdk-jmods-17.0.10.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-src-17.0.10.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openjdk-src-17.0.10.0-1.1.x86_64",
                  "product_id": "java-17-openjdk-src-17.0.10.0-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-17.0.10.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.aarch64"
        },
        "product_reference": "java-17-openjdk-17.0.10.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-17.0.10.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openjdk-17.0.10.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-17.0.10.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.s390x"
        },
        "product_reference": "java-17-openjdk-17.0.10.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-17.0.10.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.x86_64"
        },
        "product_reference": "java-17-openjdk-17.0.10.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-demo-17.0.10.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.aarch64"
        },
        "product_reference": "java-17-openjdk-demo-17.0.10.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-demo-17.0.10.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openjdk-demo-17.0.10.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-demo-17.0.10.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.s390x"
        },
        "product_reference": "java-17-openjdk-demo-17.0.10.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-demo-17.0.10.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.x86_64"
        },
        "product_reference": "java-17-openjdk-demo-17.0.10.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-devel-17.0.10.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.aarch64"
        },
        "product_reference": "java-17-openjdk-devel-17.0.10.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-devel-17.0.10.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openjdk-devel-17.0.10.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-devel-17.0.10.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.s390x"
        },
        "product_reference": "java-17-openjdk-devel-17.0.10.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-devel-17.0.10.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.x86_64"
        },
        "product_reference": "java-17-openjdk-devel-17.0.10.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-headless-17.0.10.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.aarch64"
        },
        "product_reference": "java-17-openjdk-headless-17.0.10.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-headless-17.0.10.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openjdk-headless-17.0.10.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-headless-17.0.10.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.s390x"
        },
        "product_reference": "java-17-openjdk-headless-17.0.10.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-headless-17.0.10.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.x86_64"
        },
        "product_reference": "java-17-openjdk-headless-17.0.10.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-javadoc-17.0.10.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.aarch64"
        },
        "product_reference": "java-17-openjdk-javadoc-17.0.10.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-javadoc-17.0.10.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openjdk-javadoc-17.0.10.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-javadoc-17.0.10.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.s390x"
        },
        "product_reference": "java-17-openjdk-javadoc-17.0.10.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-javadoc-17.0.10.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.x86_64"
        },
        "product_reference": "java-17-openjdk-javadoc-17.0.10.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-jmods-17.0.10.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.aarch64"
        },
        "product_reference": "java-17-openjdk-jmods-17.0.10.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-jmods-17.0.10.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openjdk-jmods-17.0.10.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-jmods-17.0.10.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.s390x"
        },
        "product_reference": "java-17-openjdk-jmods-17.0.10.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-jmods-17.0.10.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.x86_64"
        },
        "product_reference": "java-17-openjdk-jmods-17.0.10.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-src-17.0.10.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.aarch64"
        },
        "product_reference": "java-17-openjdk-src-17.0.10.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-src-17.0.10.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openjdk-src-17.0.10.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-src-17.0.10.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.s390x"
        },
        "product_reference": "java-17-openjdk-src-17.0.10.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-src-17.0.10.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.x86_64"
        },
        "product_reference": "java-17-openjdk-src-17.0.10.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-20918",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-20918"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-20918",
          "url": "https://www.suse.com/security/cve/CVE-2024-20918"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1218907 for CVE-2024-20918",
          "url": "https://bugzilla.suse.com/1218907"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1219843 for CVE-2024-20918",
          "url": "https://bugzilla.suse.com/1219843"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-20918"
    },
    {
      "cve": "CVE-2024-20919",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-20919"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-20919",
          "url": "https://www.suse.com/security/cve/CVE-2024-20919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1218903 for CVE-2024-20919",
          "url": "https://bugzilla.suse.com/1218903"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1219843 for CVE-2024-20919",
          "url": "https://bugzilla.suse.com/1219843"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-20919"
    },
    {
      "cve": "CVE-2024-20921",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-20921"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-20921",
          "url": "https://www.suse.com/security/cve/CVE-2024-20921"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1218905 for CVE-2024-20921",
          "url": "https://bugzilla.suse.com/1218905"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1219843 for CVE-2024-20921",
          "url": "https://bugzilla.suse.com/1219843"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-20921"
    },
    {
      "cve": "CVE-2024-20932",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-20932"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-20932",
          "url": "https://www.suse.com/security/cve/CVE-2024-20932"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1218908 for CVE-2024-20932",
          "url": "https://bugzilla.suse.com/1218908"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1219843 for CVE-2024-20932",
          "url": "https://bugzilla.suse.com/1219843"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-20932"
    },
    {
      "cve": "CVE-2024-20945",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-20945"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-20945",
          "url": "https://www.suse.com/security/cve/CVE-2024-20945"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1218909 for CVE-2024-20945",
          "url": "https://bugzilla.suse.com/1218909"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1219843 for CVE-2024-20945",
          "url": "https://bugzilla.suse.com/1219843"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-20945"
    },
    {
      "cve": "CVE-2024-20952",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-20952"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-20952",
          "url": "https://www.suse.com/security/cve/CVE-2024-20952"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1218911 for CVE-2024-20952",
          "url": "https://bugzilla.suse.com/1218911"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1219843 for CVE-2024-20952",
          "url": "https://bugzilla.suse.com/1219843"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.10.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.10.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2024-20952"
    }
  ]
}