What’s Vulnerable › Vulnerabilities

CVE-2017-1376

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-08-29 · updated 2026-06-17
• Weakness: CWE-829

Description

A flaw in the IBM J9 VM class verifier allows untrusted code to disable the security manager and elevate its privileges. IBM X-Force ID: 126873.

Affected products

• IBM Operations Analytics Predictive Insights: 1.3.0, 1.3.1, 1.3.2, 1.3.3, 1.3.5, 1.3.6

References

• http://www.ibm.com/support/docview.wss?uid=swg22007305&myns=swgtiv&mynp=OCSSJQQ3&mync=E&cm_sp=swgtiv-_-OCSSJQQ3-_-E
• https://access.redhat.com/errata/RHSA-2017:2469
• https://access.redhat.com/errata/RHSA-2017:2481
• https://exchange.xforce.ibmcloud.com/vulnerabilities/126873
• http://www.ibm.com/support/docview.wss?uid=swg22007305&myns=swgtiv&mynp=OCSSJQQ3&mync=E&cm_sp=swgtiv-_-OCSSJQQ3-_-E
• https://access.redhat.com/errata/RHSA-2017:2469
• https://access.redhat.com/errata/RHSA-2017:2481
• https://exchange.xforce.ibmcloud.com/vulnerabilities/126873

Get alerted when CVE-2017-1376 or the next vulnerability affects your stack