CVE-2017-1541

Severity: high (CVSS 7.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-10-04 · updated 2026-06-17
Weakness: CWE-20

Description

A flaw in the AIX 5.3, 6.1, 7.1, and 7.2 JRE/SDK installp and updatep packages prevented the java.security, java.policy and javaws.policy files from being updated correctly. IBM X-Force ID: 130809.

Affected products

IBM AIX: 5.3, 6.1, 7.1, 7.2

References

http://aix.software.ibm.com/aix/efixes/security/java_july2017_advisory.asc
http://www.securityfocus.com/bid/100914
http://www.securityfocus.com/bid/100915
http://www.securitytracker.com/id/1039372
https://exchange.xforce.ibmcloud.com/vulnerabilities/130809
http://aix.software.ibm.com/aix/efixes/security/java_july2017_advisory.asc
http://www.securityfocus.com/bid/100914
http://www.securityfocus.com/bid/100915
http://www.securitytracker.com/id/1039372
https://exchange.xforce.ibmcloud.com/vulnerabilities/130809

Get alerted when CVE-2017-1541 or the next vulnerability affects your stack