NVD脆弱性詳細

CVE-2015-4000

概要	The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.
公表日	2015年5月21日9:59
登録日	2021年1月26日10:40
最終更新日	2024年11月21日11:30

CVSS3.0 : LOW
スコア	3.7
ベクター	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	高
攻撃に必要な特権レベル(PR)	不要
利用者の関与(UI)	不要
影響の想定範囲(S)	変更なし
機密性への影響(C)	なし
完全性への影響(I)	低
可用性への影響(A)	なし

CVSS2.0 : MEDIUM
スコア	4.3
ベクター	AV:N/AC:M/Au:N/C:N/I:P/A:N
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	不要
機密性への影響(C)	なし
完全性への影響(I)	低
可用性への影響(A)	なし
全ての特権を取得	いいえ
ユーザー権限を取得	いいえ
その他の権限を取得	いいえ
ユーザー操作が必要	いいえ

影響を受けるソフトウェアの構成

構成1	以上	以下	より上	未満
cpe:2.3:a:openssl:openssl::::::::	1.0.1	1.0.1m
cpe:2.3:a:openssl:openssl::::::::	1.0.2	1.0.2a

構成2	以上	以下	より上	未満
cpe:2.3:o:canonical:ubuntu_linux:12.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:14.10:::::::*
cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:15.04:::::::*

構成3	以上	以下	より上	未満
cpe:2.3:a:openssl:openssl::::::::		1.0.1m
cpe:2.3:o:hp:hp-ux:b.11.31:::::::*

構成4		以上	以下	より上	未満
cpe:2.3:a:ibm:content_manager:8.5:::::enterprise::

構成5		以上	以下	より上	未満
cpe:2.3:a:oracle:jrockit:r28.3.6:::::::*

構成6	以上	以下	より上	未満
cpe:2.3:o:debian:debian_linux:8.0:::::::*
cpe:2.3:o:debian:debian_linux:7.0:::::::*

構成7	以上	以下	より上	未満
cpe:2.3:a:oracle:jdk:1.8.0:update_33::::::
cpe:2.3:a:oracle:jre:1.7.0:update_75::::::
cpe:2.3:a:oracle:jre:1.6.0:update_95::::::
cpe:2.3:a:oracle:jre:1.8.0:update_45::::::
cpe:2.3:a:oracle:jre:1.8.0:update_33::::::
cpe:2.3:a:oracle:jre:1.7.0:update_80::::::
cpe:2.3:a:oracle:jdk:1.8.0:update45::::::
cpe:2.3:a:oracle:jdk:1.7.0:update75::::::
cpe:2.3:a:oracle:jdk:1.6.0:update95::::::
cpe:2.3:a:oracle:jdk:1.7.0:update80::::::

構成8	以上	以下	より上	未満
cpe:2.3:o:suse:linux_enterprise_server:11.0:sp4::::::
cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:::::::*
cpe:2.3:o:suse:linux_enterprise_desktop:12:::::::*
cpe:2.3:o:suse:suse_linux_enterprise_server:12:::::::*

構成9	以上	以下	より上	未満
cpe:2.3:o:apple:mac_os_x::::::::		10.10.3
cpe:2.3:o:apple:iphone_os::::::::		8.3

構成10		以上	以下	より上	未満
cpe:2.3:a:mozilla:network_security_services:3.19:::::::*

構成11		以上	以下	より上	未満
cpe:2.3:a:oracle:sparc-opl_service_processor::::::::			1121

構成12	以上	以下	より上	未満
cpe:2.3:a:opera:opera_browser:-:::::::*
cpe:2.3:a:microsoft:internet_explorer:-:::::::*
cpe:2.3:a:google:chrome:-:::::::*
cpe:2.3:a:mozilla:firefox:-:::::::*
cpe:2.3:a:apple:safari:-:::::::*

構成13	以上	以下	より上	未満
cpe:2.3:a:mozilla:seamonkey:2.35:::::::*
cpe:2.3:a:mozilla:thunderbird:38.1:::::::*
cpe:2.3:a:mozilla:thunderbird:31.8:::::::*
cpe:2.3:o:mozilla:firefox_os:2.2:::::::*
cpe:2.3:a:mozilla:firefox:39.0:::::::*
cpe:2.3:a:mozilla:firefox_esr:31.8:::::::*
cpe:2.3:a:mozilla:firefox:38.1.0:::::::*

関連情報、対策とツール

No	URL	タグ
1	http://www.debian.org/security/2015/dsa-3324	Third Party Advisory
2	http://www.debian.org/security/2015/dsa-3339	Third Party Advisory
3	http://www.debian.org/security/2015/dsa-3339	Third Party Advisory
4	http://www.debian.org/security/2016/dsa-3688	Third Party Advisory
5	http://www.debian.org/security/2016/dsa-3688	Third Party Advisory
6	http://www.fortiguard.com/advisory/2015-05-20-logjam-attack	Third Party Advisory
7	http://www.fortiguard.com/advisory/2015-05-20-logjam-attack	Third Party Advisory
8	http://www.mozilla.org/security/announce/2015/mfsa2015-70.html	Third Party Advisory
9	http://www.mozilla.org/security/announce/2015/mfsa2015-70.html	Third Party Advisory
10	http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html	Patch Third Party Advisory
11	http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html	Patch Third Party Advisory
12	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html	Patch Third Party Advisory
13	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html	Patch Third Party Advisory
14	http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html	Third Party Advisory
15	http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html	Third Party Advisory
16	http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html	Third Party Advisory
17	http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html	Third Party Advisory
18	http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html	Third Party Advisory
19	http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html	Third Party Advisory
20	http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html	Third Party Advisory
21	http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html	Third Party Advisory
22	http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html	Third Party Advisory
23	http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html	Third Party Advisory
24	http://www.securityfocus.com/bid/74733	Third Party Advisory VDB Entry
25	http://www.securityfocus.com/bid/74733	Third Party Advisory VDB Entry
26	http://www.securityfocus.com/bid/91787	Third Party Advisory VDB Entry
27	http://www.securityfocus.com/bid/91787	Third Party Advisory VDB Entry
28	http://www.securitytracker.com/id/1032474	Third Party Advisory VDB Entry
29	http://www.securitytracker.com/id/1032474	Third Party Advisory VDB Entry
30	http://www.securitytracker.com/id/1032475	Third Party Advisory VDB Entry
31	http://www.securitytracker.com/id/1032475	Third Party Advisory VDB Entry
32	http://www.securitytracker.com/id/1032476	Third Party Advisory VDB Entry
33	http://www.securitytracker.com/id/1032476	Third Party Advisory VDB Entry
34	http://www.securitytracker.com/id/1032637	Third Party Advisory VDB Entry
35	http://www.securitytracker.com/id/1032637	Third Party Advisory VDB Entry
36	http://www.securitytracker.com/id/1032645	Third Party Advisory VDB Entry
37	http://www.securitytracker.com/id/1032645	Third Party Advisory VDB Entry
38	http://www.securitytracker.com/id/1032647	Third Party Advisory VDB Entry
39	http://www.securitytracker.com/id/1032647	Third Party Advisory VDB Entry
40	http://www.securitytracker.com/id/1032648	Third Party Advisory VDB Entry
41	http://www.securitytracker.com/id/1032648	Third Party Advisory VDB Entry
42	http://www.securitytracker.com/id/1032649	Third Party Advisory VDB Entry
43	http://www.securitytracker.com/id/1032649	Third Party Advisory VDB Entry
44	http://www.securitytracker.com/id/1032650	Third Party Advisory VDB Entry
45	http://www.securitytracker.com/id/1032650	Third Party Advisory VDB Entry
46	http://www.securitytracker.com/id/1032651	Third Party Advisory VDB Entry
47	http://www.securitytracker.com/id/1032651	Third Party Advisory VDB Entry
48	http://www.securitytracker.com/id/1032652	Third Party Advisory VDB Entry
49	http://www.securitytracker.com/id/1032652	Third Party Advisory VDB Entry
50	http://www.securitytracker.com/id/1032653	Third Party Advisory VDB Entry
51	http://www.securitytracker.com/id/1032653	Third Party Advisory VDB Entry
52	http://www.securitytracker.com/id/1032654	Third Party Advisory VDB Entry
53	http://www.securitytracker.com/id/1032654	Third Party Advisory VDB Entry
54	http://www.securitytracker.com/id/1032655	Third Party Advisory VDB Entry
55	http://www.securitytracker.com/id/1032655	Third Party Advisory VDB Entry
56	http://www.securitytracker.com/id/1032656	Third Party Advisory VDB Entry
57	http://www.securitytracker.com/id/1032656	Third Party Advisory VDB Entry
58	http://www.securitytracker.com/id/1032688	Third Party Advisory VDB Entry
59	http://www.securitytracker.com/id/1032688	Third Party Advisory VDB Entry
60	http://www.securitytracker.com/id/1032699	Third Party Advisory VDB Entry
61	http://www.securitytracker.com/id/1032699	Third Party Advisory VDB Entry
62	http://www.securitytracker.com/id/1032702	Third Party Advisory VDB Entry
63	http://www.securitytracker.com/id/1032702	Third Party Advisory VDB Entry
64	http://www.securitytracker.com/id/1032727	Third Party Advisory VDB Entry
65	http://www.securitytracker.com/id/1032727	Third Party Advisory VDB Entry
66	http://www.securitytracker.com/id/1032759	Third Party Advisory VDB Entry
67	http://www.securitytracker.com/id/1032759	Third Party Advisory VDB Entry
68	http://www.securitytracker.com/id/1032777	Third Party Advisory VDB Entry
69	http://www.securitytracker.com/id/1032777	Third Party Advisory VDB Entry
70	http://www.securitytracker.com/id/1032778	Third Party Advisory VDB Entry
71	http://www.securitytracker.com/id/1032778	Third Party Advisory VDB Entry
72	http://www.securitytracker.com/id/1032783	Third Party Advisory VDB Entry
73	http://www.securitytracker.com/id/1032783	Third Party Advisory VDB Entry
74	http://www.securitytracker.com/id/1032784	Third Party Advisory VDB Entry
75	http://www.securitytracker.com/id/1032784	Third Party Advisory VDB Entry
76	http://www.securitytracker.com/id/1032856	Third Party Advisory VDB Entry
77	http://www.securitytracker.com/id/1032856	Third Party Advisory VDB Entry
78	http://www.securitytracker.com/id/1032864	Third Party Advisory VDB Entry
79	http://www.securitytracker.com/id/1032864	Third Party Advisory VDB Entry
80	http://www.securitytracker.com/id/1032865	Third Party Advisory VDB Entry
81	http://www.securitytracker.com/id/1032865	Third Party Advisory VDB Entry
82	http://www.securitytracker.com/id/1032871	Third Party Advisory VDB Entry
83	http://www.securitytracker.com/id/1032871	Third Party Advisory VDB Entry
84	http://www.securitytracker.com/id/1032884	Third Party Advisory VDB Entry
85	http://www.securitytracker.com/id/1032884	Third Party Advisory VDB Entry
86	http://www.securitytracker.com/id/1032910	Third Party Advisory VDB Entry
87	http://www.securitytracker.com/id/1032910	Third Party Advisory VDB Entry
88	http://www.securitytracker.com/id/1032932	Third Party Advisory VDB Entry
89	http://www.securitytracker.com/id/1032932	Third Party Advisory VDB Entry
90	http://www.securitytracker.com/id/1032960	Third Party Advisory VDB Entry
91	http://www.securitytracker.com/id/1032960	Third Party Advisory VDB Entry
92	http://www.securitytracker.com/id/1033019	Third Party Advisory VDB Entry
93	http://www.securitytracker.com/id/1033019	Third Party Advisory VDB Entry
94	http://www.securitytracker.com/id/1033064	Third Party Advisory VDB Entry
95	http://www.securitytracker.com/id/1033064	Third Party Advisory VDB Entry
96	http://www.securitytracker.com/id/1033065	Third Party Advisory VDB Entry
97	http://www.securitytracker.com/id/1033065	Third Party Advisory VDB Entry
98	http://www.securitytracker.com/id/1033067	Third Party Advisory VDB Entry
99	http://www.securitytracker.com/id/1033067	Third Party Advisory VDB Entry
100	http://www.securitytracker.com/id/1033208	Third Party Advisory VDB Entry
101	http://www.securitytracker.com/id/1033208	Third Party Advisory VDB Entry
102	http://www.securitytracker.com/id/1033209	Third Party Advisory VDB Entry
103	http://www.securitytracker.com/id/1033209	Third Party Advisory VDB Entry
104	http://www.securitytracker.com/id/1033210	Third Party Advisory VDB Entry
105	http://www.securitytracker.com/id/1033210	Third Party Advisory VDB Entry
106	http://www.securitytracker.com/id/1033222	Third Party Advisory VDB Entry
107	http://www.securitytracker.com/id/1033222	Third Party Advisory VDB Entry
108	http://www.securitytracker.com/id/1033341	Third Party Advisory VDB Entry
109	http://www.securitytracker.com/id/1033341	Third Party Advisory VDB Entry
110	http://www.securitytracker.com/id/1033385	Third Party Advisory VDB Entry
111	http://www.securitytracker.com/id/1033385	Third Party Advisory VDB Entry
112	http://www.securitytracker.com/id/1033416	Third Party Advisory VDB Entry
113	http://www.securitytracker.com/id/1033416	Third Party Advisory VDB Entry
114	http://www.securitytracker.com/id/1033430	Third Party Advisory VDB Entry
115	http://www.securitytracker.com/id/1033430	Third Party Advisory VDB Entry
116	http://www.securitytracker.com/id/1033433	Third Party Advisory VDB Entry
117	http://www.securitytracker.com/id/1033433	Third Party Advisory VDB Entry
118	http://www.securitytracker.com/id/1033513	Third Party Advisory VDB Entry
119	http://www.securitytracker.com/id/1033513	Third Party Advisory VDB Entry
120	http://www.securitytracker.com/id/1033760	Third Party Advisory VDB Entry
121	http://www.securitytracker.com/id/1033760	Third Party Advisory VDB Entry
122	http://www.securitytracker.com/id/1033891	Third Party Advisory VDB Entry
123	http://www.securitytracker.com/id/1033891	Third Party Advisory VDB Entry
124	http://www.securitytracker.com/id/1033991	Third Party Advisory VDB Entry
125	http://www.securitytracker.com/id/1033991	Third Party Advisory VDB Entry
126	http://www.securitytracker.com/id/1034087	Third Party Advisory VDB Entry
127	http://www.securitytracker.com/id/1034087	Third Party Advisory VDB Entry
128	http://www.securitytracker.com/id/1034728	Third Party Advisory VDB Entry
129	http://www.securitytracker.com/id/1034728	Third Party Advisory VDB Entry
130	http://www.securitytracker.com/id/1034884	Third Party Advisory VDB Entry
131	http://www.securitytracker.com/id/1034884	Third Party Advisory VDB Entry
132	http://www.securitytracker.com/id/1036218	Third Party Advisory VDB Entry
133	http://www.securitytracker.com/id/1036218	Third Party Advisory VDB Entry
134	http://www.securitytracker.com/id/1040630	Third Party Advisory VDB Entry
135	http://www.securitytracker.com/id/1040630	Third Party Advisory VDB Entry
136	http://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/releaseNotes.htm	Third Party Advisory
137	http://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/releaseNotes.htm	Third Party Advisory
138	http://www.ubuntu.com/usn/USN-2656-1	Third Party Advisory
139	http://www.ubuntu.com/usn/USN-2656-1	Third Party Advisory
140	http://www.ubuntu.com/usn/USN-2656-2	Third Party Advisory
141	http://www.ubuntu.com/usn/USN-2656-2	Third Party Advisory
142	http://www.ubuntu.com/usn/USN-2673-1	Third Party Advisory
143	http://www.ubuntu.com/usn/USN-2673-1	Third Party Advisory
144	http://www.ubuntu.com/usn/USN-2696-1	Third Party Advisory
145	http://www.ubuntu.com/usn/USN-2696-1	Third Party Advisory
146	http://www.ubuntu.com/usn/USN-2706-1	Third Party Advisory
147	http://www.ubuntu.com/usn/USN-2706-1	Third Party Advisory
148	http://www-01.ibm.com/support/docview.wss?uid=swg21959111	Third Party Advisory
149	http://www-01.ibm.com/support/docview.wss?uid=swg21959111	Third Party Advisory
150	http://www-01.ibm.com/support/docview.wss?uid=swg21959195	Third Party Advisory
151	http://www-01.ibm.com/support/docview.wss?uid=swg21959195	Third Party Advisory
152	http://www-01.ibm.com/support/docview.wss?uid=swg21959325	Third Party Advisory
153	http://www-01.ibm.com/support/docview.wss?uid=swg21959325	Third Party Advisory
154	http://www-01.ibm.com/support/docview.wss?uid=swg21959453	Third Party Advisory
155	http://www-01.ibm.com/support/docview.wss?uid=swg21959453	Third Party Advisory
156	http://www-01.ibm.com/support/docview.wss?uid=swg21959481	Third Party Advisory
157	http://www-01.ibm.com/support/docview.wss?uid=swg21959481	Third Party Advisory
158	http://www-01.ibm.com/support/docview.wss?uid=swg21959517	Third Party Advisory
159	http://www-01.ibm.com/support/docview.wss?uid=swg21959517	Third Party Advisory
160	http://www-01.ibm.com/support/docview.wss?uid=swg21959530	Third Party Advisory
161	http://www-01.ibm.com/support/docview.wss?uid=swg21959530	Third Party Advisory
162	http://www-01.ibm.com/support/docview.wss?uid=swg21959539	Third Party Advisory
163	http://www-01.ibm.com/support/docview.wss?uid=swg21959539	Third Party Advisory
164	http://www-01.ibm.com/support/docview.wss?uid=swg21959636	Third Party Advisory
165	http://www-01.ibm.com/support/docview.wss?uid=swg21959636	Third Party Advisory
166	http://www-01.ibm.com/support/docview.wss?uid=swg21959812	Third Party Advisory
167	http://www-01.ibm.com/support/docview.wss?uid=swg21959812	Third Party Advisory
168	http://www-01.ibm.com/support/docview.wss?uid=swg21960191	Third Party Advisory
169	http://www-01.ibm.com/support/docview.wss?uid=swg21960191	Third Party Advisory
170	http://www-01.ibm.com/support/docview.wss?uid=swg21961717	Third Party Advisory
171	http://www-01.ibm.com/support/docview.wss?uid=swg21961717	Third Party Advisory
172	http://www-01.ibm.com/support/docview.wss?uid=swg21962455	Third Party Advisory
173	http://www-01.ibm.com/support/docview.wss?uid=swg21962455	Third Party Advisory
174	http://www-01.ibm.com/support/docview.wss?uid=swg21962739	Third Party Advisory
175	http://www-01.ibm.com/support/docview.wss?uid=swg21962739	Third Party Advisory
176	http://www-304.ibm.com/support/docview.wss?uid=swg21958984	Third Party Advisory
177	http://www-304.ibm.com/support/docview.wss?uid=swg21958984	Third Party Advisory
178	http://www-304.ibm.com/support/docview.wss?uid=swg21959132	Third Party Advisory
179	http://www-304.ibm.com/support/docview.wss?uid=swg21959132	Third Party Advisory
180	http://www-304.ibm.com/support/docview.wss?uid=swg21960041	Third Party Advisory
181	http://www-304.ibm.com/support/docview.wss?uid=swg21960041	Third Party Advisory
182	http://www-304.ibm.com/support/docview.wss?uid=swg21960194	Third Party Advisory
183	http://www-304.ibm.com/support/docview.wss?uid=swg21960194	Third Party Advisory
184	http://www-304.ibm.com/support/docview.wss?uid=swg21960380	Third Party Advisory
185	http://www-304.ibm.com/support/docview.wss?uid=swg21960380	Third Party Advisory
186	http://www-304.ibm.com/support/docview.wss?uid=swg21960418	Third Party Advisory
187	http://www-304.ibm.com/support/docview.wss?uid=swg21960418	Third Party Advisory
188	http://www-304.ibm.com/support/docview.wss?uid=swg21962816	Third Party Advisory
189	http://www-304.ibm.com/support/docview.wss?uid=swg21962816	Third Party Advisory
190	http://www-304.ibm.com/support/docview.wss?uid=swg21967893	Third Party Advisory
191	http://www-304.ibm.com/support/docview.wss?uid=swg21967893	Third Party Advisory
192	https://blog.cloudflare.com/logjam-the-latest-tls-vulnerability-explained/	Third Party Advisory
193	https://blog.cloudflare.com/logjam-the-latest-tls-vulnerability-explained/	Third Party Advisory
194	https://bto.bluecoat.com/security-advisory/sa98	Third Party Advisory
195	https://bto.bluecoat.com/security-advisory/sa98	Third Party Advisory
196	https://bugzilla.mozilla.org/show_bug.cgi?id=1138554	Issue Tracking Third Party Advisory
197	https://bugzilla.mozilla.org/show_bug.cgi?id=1138554	Issue Tracking Third Party Advisory
198	https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf	Third Party Advisory
199	https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf	Third Party Advisory
200	https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes	Third Party Advisory
201	https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes	Third Party Advisory
202	https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04718196	Third Party Advisory
203	https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04718196	Third Party Advisory
204	https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140	Third Party Advisory
205	https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140	Third Party Advisory
206	https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190	Third Party Advisory
207	https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190	Third Party Advisory
208	https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119	Third Party Advisory
209	https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119	Third Party Advisory
210	https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241	Third Party Advisory
211	https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241	Third Party Advisory
212	https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246	Third Party Advisory
213	https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246	Third Party Advisory
214	https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04918839	Third Party Advisory
215	https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04918839	Third Party Advisory
216	https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04923929	Third Party Advisory
217	https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04923929	Third Party Advisory
218	http://aix.software.ibm.com/aix/efixes/security/sendmail_advisory2.asc	Third Party Advisory
219	http://aix.software.ibm.com/aix/efixes/security/sendmail_advisory2.asc	Third Party Advisory
220	http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery	Third Party Advisory
221	http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery	Third Party Advisory
222	http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc	Mailing List Third Party Advisory
223	http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc	Mailing List Third Party Advisory
224	http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04876402	Third Party Advisory
225	http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04876402	Third Party Advisory
226	http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04949778	Third Party Advisory
227	http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04949778	Third Party Advisory
228	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10681	Third Party Advisory
229	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10681	Third Party Advisory
230	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727	Third Party Advisory
231	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727	Third Party Advisory
232	http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html	Mailing List Third Party Advisory
233	http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html	Mailing List Third Party Advisory
234	http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html	Mailing List Third Party Advisory
235	http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html	Mailing List Third Party Advisory
236	http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159314.html	Mailing List Third Party Advisory
237	http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159314.html	Mailing List Third Party Advisory
238	http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159351.html	Mailing List Third Party Advisory
239	http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159351.html	Mailing List Third Party Advisory
240	http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160117.html	Mailing List Third Party Advisory
241	http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160117.html	Mailing List Third Party Advisory
242	http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html	Mailing List Third Party Advisory
243	http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html	Mailing List Third Party Advisory
244	http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html	Mailing List Third Party Advisory
245	http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html	Mailing List Third Party Advisory
246	http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html	Mailing List Third Party Advisory
247	http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html	Mailing List Third Party Advisory
248	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00001.html	Mailing List Third Party Advisory
249	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00001.html	Mailing List Third Party Advisory
250	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html	Mailing List Third Party Advisory
251	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html	Mailing List Third Party Advisory
252	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html	Mailing List Third Party Advisory
253	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html	Mailing List Third Party Advisory
254	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html	Mailing List Third Party Advisory
255	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html	Mailing List Third Party Advisory
256	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html	Mailing List Third Party Advisory
257	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html	Mailing List Third Party Advisory
258	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html	Mailing List Third Party Advisory
259	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html	Mailing List Third Party Advisory
260	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html	Mailing List Third Party Advisory
261	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html	Mailing List Third Party Advisory
262	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html	Mailing List Third Party Advisory
263	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html	Mailing List Third Party Advisory
264	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html	Mailing List Third Party Advisory
265	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html	Mailing List Third Party Advisory
266	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html	Mailing List Third Party Advisory
267	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html	Mailing List Third Party Advisory
268	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html	Mailing List Third Party Advisory
269	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html	Mailing List Third Party Advisory
270	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html	Mailing List Third Party Advisory
271	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html	Mailing List Third Party Advisory
272	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html	Mailing List Third Party Advisory
273	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html	Mailing List Third Party Advisory
274	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html	Mailing List Third Party Advisory
275	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html	Mailing List Third Party Advisory
276	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html	Mailing List Third Party Advisory
277	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html	Mailing List Third Party Advisory
278	http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html	Mailing List Third Party Advisory
279	http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html	Mailing List Third Party Advisory
280	http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html	Mailing List Third Party Advisory
281	http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html	Mailing List Third Party Advisory
282	http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00001.html	Mailing List Third Party Advisory
283	http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00001.html	Mailing List Third Party Advisory
284	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00031.html	Mailing List Third Party Advisory
285	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00031.html	Mailing List Third Party Advisory
286	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00032.html	Mailing List Third Party Advisory
287	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00032.html	Mailing List Third Party Advisory
288	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00037.html	Mailing List Third Party Advisory
289	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00037.html	Mailing List Third Party Advisory
290	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00039.html	Mailing List Third Party Advisory
291	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00039.html	Mailing List Third Party Advisory
292	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00040.html	Mailing List Third Party Advisory
293	http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00040.html	Mailing List Third Party Advisory
294	http://lists.opensuse.org/opensuse-updates/2015-07/msg00016.html	Mailing List Third Party Advisory
295	http://lists.opensuse.org/opensuse-updates/2015-07/msg00016.html	Mailing List Third Party Advisory
296	http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html	Mailing List Third Party Advisory
297	http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html	Mailing List Third Party Advisory
298	http://lists.opensuse.org/opensuse-updates/2016-02/msg00094.html	Mailing List Third Party Advisory
299	http://lists.opensuse.org/opensuse-updates/2016-02/msg00094.html	Mailing List Third Party Advisory
300	http://lists.opensuse.org/opensuse-updates/2016-02/msg00097.html	Mailing List Third Party Advisory
301	http://lists.opensuse.org/opensuse-updates/2016-02/msg00097.html	Mailing List Third Party Advisory
302	http://marc.info/?l=bugtraq&m=143506486712441&w=2	Mailing List Third Party Advisory
303	http://marc.info/?l=bugtraq&m=143506486712441&w=2	Mailing List Third Party Advisory
304	http://marc.info/?l=bugtraq&m=143557934009303&w=2	Mailing List Third Party Advisory
305	http://marc.info/?l=bugtraq&m=143557934009303&w=2	Mailing List Third Party Advisory
306	http://marc.info/?l=bugtraq&m=143558092609708&w=2	Mailing List Third Party Advisory
307	http://marc.info/?l=bugtraq&m=143558092609708&w=2	Mailing List Third Party Advisory
308	http://marc.info/?l=bugtraq&m=143628304012255&w=2	Mailing List Third Party Advisory
309	http://marc.info/?l=bugtraq&m=143628304012255&w=2	Mailing List Third Party Advisory
310	http://marc.info/?l=bugtraq&m=143637549705650&w=2	Mailing List Third Party Advisory
311	http://marc.info/?l=bugtraq&m=143637549705650&w=2	Mailing List Third Party Advisory
312	http://marc.info/?l=bugtraq&m=143655800220052&w=2	Mailing List Third Party Advisory
313	http://marc.info/?l=bugtraq&m=143655800220052&w=2	Mailing List Third Party Advisory
314	http://marc.info/?l=bugtraq&m=143880121627664&w=2	Mailing List Third Party Advisory
315	http://marc.info/?l=bugtraq&m=143880121627664&w=2	Mailing List Third Party Advisory
316	http://marc.info/?l=bugtraq&m=143880121627664&w=2	Mailing List Third Party Advisory
317	http://marc.info/?l=bugtraq&m=143880121627664&w=2	Mailing List Third Party Advisory
318	http://marc.info/?l=bugtraq&m=144043644216842&w=2	Mailing List Third Party Advisory
319	http://marc.info/?l=bugtraq&m=144043644216842&w=2	Mailing List Third Party Advisory
320	http://marc.info/?l=bugtraq&m=144050121701297&w=2	Mailing List Third Party Advisory
321	http://marc.info/?l=bugtraq&m=144050121701297&w=2	Mailing List Third Party Advisory
322	http://marc.info/?l=bugtraq&m=144060576831314&w=2	Mailing List Third Party Advisory
323	http://marc.info/?l=bugtraq&m=144060576831314&w=2	Mailing List Third Party Advisory
324	http://marc.info/?l=bugtraq&m=144060606031437&w=2	Mailing List Third Party Advisory
325	http://marc.info/?l=bugtraq&m=144060606031437&w=2	Mailing List Third Party Advisory
326	http://marc.info/?l=bugtraq&m=144061542602287&w=2	Mailing List Third Party Advisory
327	http://marc.info/?l=bugtraq&m=144061542602287&w=2	Mailing List Third Party Advisory
328	http://marc.info/?l=bugtraq&m=144069189622016&w=2	Mailing List Third Party Advisory
329	http://marc.info/?l=bugtraq&m=144069189622016&w=2	Mailing List Third Party Advisory
330	http://marc.info/?l=bugtraq&m=144102017024820&w=2	Mailing List Third Party Advisory
331	http://marc.info/?l=bugtraq&m=144102017024820&w=2	Mailing List Third Party Advisory
332	http://marc.info/?l=bugtraq&m=144104533800819&w=2	Mailing List Third Party Advisory
333	http://marc.info/?l=bugtraq&m=144104533800819&w=2	Mailing List Third Party Advisory
334	http://marc.info/?l=bugtraq&m=144493176821532&w=2	Mailing List Third Party Advisory
335	http://marc.info/?l=bugtraq&m=144493176821532&w=2	Mailing List Third Party Advisory
336	http://marc.info/?l=bugtraq&m=144493176821532&w=2	Mailing List Third Party Advisory
337	http://marc.info/?l=bugtraq&m=144493176821532&w=2	Mailing List Third Party Advisory
338	http://marc.info/?l=bugtraq&m=145409266329539&w=2	Mailing List Third Party Advisory
339	http://marc.info/?l=bugtraq&m=145409266329539&w=2	Mailing List Third Party Advisory
340	http://openwall.com/lists/oss-security/2015/05/20/8	Mailing List Third Party Advisory
341	http://openwall.com/lists/oss-security/2015/05/20/8	Mailing List Third Party Advisory
342	http://rhn.redhat.com/errata/RHSA-2015-1072.html	Third Party Advisory
343	http://rhn.redhat.com/errata/RHSA-2015-1072.html	Third Party Advisory
344	http://rhn.redhat.com/errata/RHSA-2015-1185.html	Third Party Advisory
345	http://rhn.redhat.com/errata/RHSA-2015-1185.html	Third Party Advisory
346	http://rhn.redhat.com/errata/RHSA-2015-1197.html	Third Party Advisory
347	http://rhn.redhat.com/errata/RHSA-2015-1197.html	Third Party Advisory
348	http://rhn.redhat.com/errata/RHSA-2015-1228.html	Third Party Advisory
349	http://rhn.redhat.com/errata/RHSA-2015-1228.html	Third Party Advisory
350	http://rhn.redhat.com/errata/RHSA-2015-1229.html	Third Party Advisory
351	http://rhn.redhat.com/errata/RHSA-2015-1229.html	Third Party Advisory
352	http://rhn.redhat.com/errata/RHSA-2015-1230.html	Third Party Advisory
353	http://rhn.redhat.com/errata/RHSA-2015-1230.html	Third Party Advisory
354	http://rhn.redhat.com/errata/RHSA-2015-1241.html	Third Party Advisory
355	http://rhn.redhat.com/errata/RHSA-2015-1241.html	Third Party Advisory
356	http://rhn.redhat.com/errata/RHSA-2015-1242.html	Third Party Advisory
357	http://rhn.redhat.com/errata/RHSA-2015-1242.html	Third Party Advisory
358	http://rhn.redhat.com/errata/RHSA-2015-1243.html	Third Party Advisory
359	http://rhn.redhat.com/errata/RHSA-2015-1243.html	Third Party Advisory
360	http://rhn.redhat.com/errata/RHSA-2015-1485.html	Third Party Advisory
361	http://rhn.redhat.com/errata/RHSA-2015-1485.html	Third Party Advisory
362	http://rhn.redhat.com/errata/RHSA-2015-1486.html	Third Party Advisory
363	http://rhn.redhat.com/errata/RHSA-2015-1486.html	Third Party Advisory
364	http://rhn.redhat.com/errata/RHSA-2015-1488.html	Third Party Advisory
365	http://rhn.redhat.com/errata/RHSA-2015-1488.html	Third Party Advisory
366	http://rhn.redhat.com/errata/RHSA-2015-1526.html	Third Party Advisory
367	http://rhn.redhat.com/errata/RHSA-2015-1526.html	Third Party Advisory
368	http://rhn.redhat.com/errata/RHSA-2015-1544.html	Third Party Advisory
369	http://rhn.redhat.com/errata/RHSA-2015-1544.html	Third Party Advisory
370	http://rhn.redhat.com/errata/RHSA-2015-1604.html	Third Party Advisory
371	http://rhn.redhat.com/errata/RHSA-2015-1604.html	Third Party Advisory
372	http://rhn.redhat.com/errata/RHSA-2016-1624.html	Third Party Advisory
373	http://rhn.redhat.com/errata/RHSA-2016-1624.html	Third Party Advisory
374	http://rhn.redhat.com/errata/RHSA-2016-2056.html	Third Party Advisory
375	http://rhn.redhat.com/errata/RHSA-2016-2056.html	Third Party Advisory
376	http://support.apple.com/kb/HT204941	Third Party Advisory
377	http://support.apple.com/kb/HT204941	Third Party Advisory
378	http://support.apple.com/kb/HT204942	Third Party Advisory
379	http://support.apple.com/kb/HT204942	Third Party Advisory
380	http://support.citrix.com/article/CTX201114	Third Party Advisory
381	http://support.citrix.com/article/CTX201114	Third Party Advisory
382	http://www.debian.org/security/2015/dsa-3287	Third Party Advisory
383	http://www.debian.org/security/2015/dsa-3287	Third Party Advisory
384	http://www.debian.org/security/2015/dsa-3300	Third Party Advisory
385	http://www.debian.org/security/2015/dsa-3300	Third Party Advisory
386	http://www.debian.org/security/2015/dsa-3316	Third Party Advisory
387	http://www.debian.org/security/2015/dsa-3316	Third Party Advisory
388	http://www.debian.org/security/2015/dsa-3324	Third Party Advisory
389	https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789	Third Party Advisory
390	https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789	Third Party Advisory
391	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04740527	Third Party Advisory
392	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04740527	Third Party Advisory
393	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04953655	Third Party Advisory
394	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04953655	Third Party Advisory
395	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763	Third Party Advisory
396	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763	Third Party Advisory
397	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128722	Third Party Advisory
398	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128722	Third Party Advisory
399	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193083	Third Party Advisory
400	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193083	Third Party Advisory
401	https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes	Third Party Advisory
402	https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes	Third Party Advisory
403	https://kc.mcafee.com/corporate/index?page=content&id=SB10122	Third Party Advisory
404	https://kc.mcafee.com/corporate/index?page=content&id=SB10122	Third Party Advisory
405	https://openssl.org/news/secadv/20150611.txt	Vendor Advisory
406	https://openssl.org/news/secadv/20150611.txt	Vendor Advisory
407	https://puppet.com/security/cve/CVE-2015-4000	Third Party Advisory
408	https://puppet.com/security/cve/CVE-2015-4000	Third Party Advisory
409	https://security.gentoo.org/glsa/201506-02	Third Party Advisory
410	https://security.gentoo.org/glsa/201506-02	Third Party Advisory
411	https://security.gentoo.org/glsa/201512-10	Third Party Advisory
412	https://security.gentoo.org/glsa/201512-10	Third Party Advisory
413	https://security.gentoo.org/glsa/201603-11	Third Party Advisory
414	https://security.gentoo.org/glsa/201603-11	Third Party Advisory
415	https://security.gentoo.org/glsa/201701-46	Third Party Advisory
416	https://security.gentoo.org/glsa/201701-46	Third Party Advisory
417	https://security.netapp.com/advisory/ntap-20150619-0001/	Third Party Advisory
418	https://security.netapp.com/advisory/ntap-20150619-0001/	Third Party Advisory
419	https://support.citrix.com/article/CTX216642	Third Party Advisory
420	https://support.citrix.com/article/CTX216642	Third Party Advisory
421	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03831en_us	Third Party Advisory
422	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03831en_us	Third Party Advisory
423	https://weakdh.org/	Third Party Advisory
424	https://weakdh.org/	Third Party Advisory
425	https://weakdh.org/imperfect-forward-secrecy.pdf	Third Party Advisory
426	https://weakdh.org/imperfect-forward-secrecy.pdf	Third Party Advisory
427	https://www.openssl.org/blog/blog/2015/05/20/logjam-freak-upcoming-changes/	Vendor Advisory
428	https://www.openssl.org/blog/blog/2015/05/20/logjam-freak-upcoming-changes/	Vendor Advisory
429	https://www.openssl.org/news/secadv_20150611.txt	Vendor Advisory
430	https://www.openssl.org/news/secadv_20150611.txt	Vendor Advisory
431	https://www.oracle.com/security-alerts/cpujan2021.html	Third Party Advisory
432	https://www.oracle.com/security-alerts/cpujan2021.html	Third Party Advisory
433	https://www.suse.com/security/cve/CVE-2015-4000.html	Third Party Advisory
434	https://www.suse.com/security/cve/CVE-2015-4000.html	Third Party Advisory
435	https://www-304.ibm.com/support/docview.wss?uid=swg21959745	Third Party Advisory
436	https://www-304.ibm.com/support/docview.wss?uid=swg21959745	Third Party Advisory
437	https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098403	Third Party Advisory
438	https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098403	Third Party Advisory

共通脆弱性一覧

No	CWE	名前	URL
1	CWE-310	暗号の問題	https://cwe.mitre.org/data/definitions/310.html

JVN脆弱性情報

TLS プロトコルにおける暗号アルゴリズムのダウングレード攻撃を実行される脆弱性

タイトル	TLS プロトコルにおける暗号アルゴリズムのダウングレード攻撃を実行される脆弱性
概要	TLS プロトコルは、DHE_EXPORT 暗号スイートがサーバで有効になっており、クライアントではなっていない場合に、DHE_EXPORT が選択されたことをクライアントに適切に通知しないため、暗号アルゴリズムのダウングレード攻撃を実行される脆弱性が存在します。本脆弱性は、"Logjam" と呼ばれています。
想定される影響	中間者攻撃 (man-in-the-middle attack) により、ClientHello の DHE を DHE_EXPORT に書き換えられ、その後、ServerHello の DHE_EXPORT を DHE に書き換えられることで、暗号アルゴリズムのダウングレード攻撃を実行される可能性があります。
対策	ベンダ情報および参考情報を参照して適切な対策を実施してください。
公表日	2015年5月20日0:00
登録日	2015年5月22日14:49
最終更新日	2018年9月21日12:32

影響を受けるシステム

マイクロソフト

Microsoft Internet Explorer

オラクル

JDK 6 Update 95

JDK 7 Update 80

JDK 8 Update 45

JRE 6 Update 95

JRE 7 Update 80

JRE 8 Update 45

Oracle Communications Applications の Oracle Communications Messaging Server 7.0.5

Oracle Communications Applications の Oracle Communications Messaging Server 8.0

Oracle GlassFish Server 2.1.1

Oracle iPlanet Web Proxy Server 4.0

Oracle iPlanet Web Server 7.0

Oracle Java SE Embedded 7 Update 75

Oracle Java SE Embedded 8 Update 33

Oracle JRockit R28.3.6

Oracle OpenSSO 3.0-0.7

Oracle Traffic Director 11.1.1.7.0

Oracle Traffic Director 11.1.1.9.0

Oracle Virtualization の Oracle Secure Global Desktop 4.63

Oracle Virtualization の Oracle Secure Global Desktop 4.71

Oracle Virtualization の Oracle Secure Global Desktop 5.2

SPARC Enterprise M3000 サーバ

SPARC Enterprise M4000 サーバ

SPARC Enterprise M5000 サーバ

SPARC Enterprise M8000 サーバ

SPARC Enterprise M9000 サーバ

XCP 1121 未満 (SPARC Enterprise M3000/M4000/M5000/M8000/M9000 サーバ)

XCP 2271 未満 (Fujitsu M10-1/M10-4/M10-4S サーバ)

Mozilla Foundation

Mozilla Firefox

アップル

Apple Mac OS X 10.10 から 10.10.3

iOS 8.4 未満 (iPad 2 以降)

iOS 8.4 未満 (iPhone 4s 以降)

iOS 8.4 未満 (iPod touch 第 5 世代以降)

Safari

日本電気

CapsSuite V3.0 から V4.0 のマネージャコンポーネント

EnterpriseDirectoryServer Ver7.1 以前

Express5800 /SG シリーズ InterSecVM/SG v1.2,v3.0,v3.1,v4.0

Express5800 /SG シリーズ SG3600LM/LG/LJ v6.1,v6.2,v7.0,v7.1,v8.0

Express5800 /SG シリーズ UNIVERGE SG3000LG/LJ

IP38X/N500 全てのリビジョン

iStorage HSシリーズ全バージョン

iStorage NV7400/NV5400/NV3400シリーズ

iStorage NV7500/NV5500/NV3500シリーズ

IX2000シリーズ

IX3000シリーズ

SecureWare/PKIアプリケーション開発キット Ver3.0

SecureWare/PKIアプリケーション開発キット Ver3.01

SecureWare/PKIアプリケーション開発キット Ver3.02

SecureWare/PKIアプリケーション開発キット Ver3.1

UNIVERGE 3C CMM

UNIVERGE 3C UCM

WebOTX Enterprise Edition V4.2 から V6.5

WebOTX Standard Edition V4.2 から V6.5

WebOTX Standard-J Edition V4.1 から V6.5

WebOTX UDDI Registry V1.1 から V7.1

WebOTX Web Edition V4.1 から V6.5

WebOTX Application Server Enterprise Edition V7.1

WebOTX Application Server Enterprise V8.2 から V9.2

WebOTX Application Server Express V8.2 から V9.2

WebOTX Application Server Foundation V8.2 から V8.5

WebOTX Application Server Standard Edition V7.1

WebOTX Application Server Standard V8.2 から V9.2

WebOTX Application Server Standard-J Edition V7.1 から V8.1

WebOTX Application Server Web Edition V7.1 から V8.1

WebOTX Enterprise Service Bus V6.4 から V9.2

WebOTX Portal V8.2 から V9.1

WebOTX SIP Application Server Standard Edition V7.1 から V8.1

WebSAM Application Navigator Agent Ver3.3 から Ver4.1

WebSAM Application Navigator Manager Ver3.2.2 から Ver4.1

WebSAM Application Navigator Probe Option Ver3.1.0.x から Ver4.1.0.x

WebSAM JobCenter R14.1

WebSAM MCOperations Ver3.6.2 から Ver4.2

WebSAM SystemManager Ver5.5.2 から Ver6.2.1

日立

Cosminexus Developer's Kit for Java(TM)

HA8500シリーズ

Hitachi Application Server

Hitachi Application Server for Developers

Hitachi Developer's Kit for Java

uCosminexus Application Server

uCosminexus Application Server -R

uCosminexus Application Server Express

uCosminexus Application Server Light

uCosminexus Application Server Standard-R

uCosminexus Application Server Enterprise

uCosminexus Application Server Smart Edition

uCosminexus Application Server Standard

uCosminexus Client

uCosminexus Client for Plug-in

uCosminexus Developer

uCosminexus Developer 01

uCosminexus Developer Professional

uCosminexus Developer Professional for Plug-in

uCosminexus Developer Light

uCosminexus Developer Standard

uCosminexus Operator

uCosminexus Operator for Service Platform

uCosminexus Primary Server Base

uCosminexus Server Standard-R

uCosminexus Service Architect

uCosminexus Service Platform

uCosminexus Service Platform - Messaging

UPS管理ソフトウエア PowerChute Business Edition

UPS管理ソフトウエア PowerChute Network Shutdown

Opera Software ASA

Opera

Google

Google Chrome

CVE (情報セキュリティ共通脆弱性識別子)

No	名前	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2015-4000	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4000
National Vulnerability Database (NVD)
2	CVE-2015-4000	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-4000
SUSE Security Announcement
3	CVE-2015-4000	https://www.suse.com/security/cve/CVE-2015-4000.html

CWE (共通脆弱性タイプ一覧)

No	名前	URL
JVNDB
1	CWE-310	https://jvndb.jvn.jp/ja/cwe/CWE-310.html

ベンダー情報

No	名前	URL
Apple Mailing Lists
1	APPLE-SA-2015-06-30-1 iOS 8.4	http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html
2	APPLE-SA-2015-06-30-2 OS X Yosemite v10.10.4 and Security Update 2015-005	http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html
Apple Security Updates
3	HT204941	http://support.apple.com/en-us/HT204941
4	HT204942	http://support.apple.com/en-us/HT204942
Apple セキュリティアップデート
5	HT204941	http://support.apple.com/ja-jp/HT204941
6	HT204942	http://support.apple.com/ja-jp/HT204942
Debian Security Advisory
7	DSA-3324	https://www.debian.org/security/2015/dsa-3324
Google
8	Google Chrome	https://www.google.co.jp/chrome/browser/desktop/index.html
Hitachi Software Vulnerability Information
9	hitachi-sec-2018-128	http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2018-128/index.html
10	HS15-026	http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS15-026/index.html
11	HS16-004	http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS16-004/index.html
HP Security Bulletin
12	HPSBGN03351	http://marc.info/?l=bugtraq&m=143557934009303&w=2
13	HPSBGN03361	http://marc.info/?l=bugtraq&m=143628304012255&w=2
14	HPSBGN03362	http://marc.info/?l=bugtraq&m=143558092609708&w=2
15	HPSBGN03399	http://marc.info/?l=bugtraq&m=144060576831314&w=2
16	HPSBGN03402	http://marc.info/?l=bugtraq&m=144069189622016&w=2
17	HPSBGN03404	http://marc.info/?l=bugtraq&m=144050121701297&w=2
18	HPSBGN03405	http://marc.info/?l=bugtraq&m=144060606031437&w=2
19	HPSBGN03407	http://marc.info/?l=bugtraq&m=144102017024820&w=2
20	HPSBGN03411	http://marc.info/?l=bugtraq&m=144061542602287&w=2
21	HPSBMU03345	http://marc.info/?l=bugtraq&m=144043644216842&w=2
22	HPSBMU03356	http://marc.info/?l=bugtraq&m=143506486712441&w=2
23	HPSBMU03401	http://marc.info/?l=bugtraq&m=144104533800819&w=2
24	HPSBUX03363	http://marc.info/?l=bugtraq&m=143637549705650&w=2
25	HPSBUX03388	http://marc.info/?l=bugtraq&m=143880121627664&w=2
26	HPSBUX03512	http://marc.info/?l=bugtraq&m=144493176821532&w=2
HPE Security Bulletin
27	HPSBGN03373	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04740527
28	HPSBGN03533	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04953655
29	HPSBGN03626	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193083
30	HPSBHF03510	http://marc.info/?l=bugtraq&m=145408559027301&w=2
31	HPSBMU03546	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763
32	HPSBST03586	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128722
33	HPSBUX03435	http://marc.info/?l=bugtraq&m=145249627028751&w=2
IBM Support Document
34	1962455	http://www-01.ibm.com/support/docview.wss?uid=swg21962455
JVN
35	アライドテレシス株式会社からの情報	http://jvn.jp/vu/JVNVU91445763/522154/index.html
Microsoft
36	Windows Internet Explorer	http://windows.microsoft.com/ja-jp/internet-explorer/download-ie
Mozilla
37	NSS 3.19.1 release notes	https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes
Mozilla Bugzilla
38	Bug 1138554	https://bugzilla.mozilla.org/show_bug.cgi?id=1138554
Mozilla Foundation
39	Firefox	https://www.mozilla.org/ja/firefox/new/
Mozilla Foundation Security Advisory
40	MFSA2015-70	http://www.mozilla.org/security/announce/2015/mfsa2015-70.html
Mozilla Foundation セキュリティアドバイザリ
41	MFSA2015-70	http://www.mozilla-japan.org/security/announce/2015/mfsa2015-70.html
NEC製品セキュリティ情報
42	NV15-010	http://jpn.nec.com/security-info/secinfo/nv15-010.html
OpenSSL
43	Logjam, FREAK and Upcoming Changes in OpenSSL	https://www.openssl.org/blog/blog/2015/05/20/logjam-freak-upcoming-changes/
OpenSSL Security Advisory
44	DHE man-in-the-middle protection (Logjam)	https://www.openssl.org/news/secadv/20150611.txt
opensuse-security-announce
45	SUSE-SU-2015:1268	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html
46	SUSE-SU-2015:1269	http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html
Opera
47	Opera	http://www.opera.com/ja
Oracle Critical Patch Update
48	Oracle Critical Patch Update Advisory - April 2016	http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
49	Oracle Critical Patch Update Advisory - January 2016	http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
50	Oracle Critical Patch Update Advisory - July 2015	http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
51	Oracle Critical Patch Update Advisory - July 2016	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
52	Oracle Critical Patch Update Advisory - October 2015	http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
53	Oracle Critical Patch Update CVSS V2 Risk Matrices - April 2016	http://www.oracle.com/technetwork/topics/security/cpuapr2016-2881694.html
54	Text Form of Oracle Critical Patch Update - April 2016 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpuapr2016verbose-2881709.html
55	Text Form of Oracle Critical Patch Update - January 2016 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpujan2016verbose-2367956.html
56	Text Form of Oracle Critical Patch Update - July 2015 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpujul2015verbose-2367947.html
57	Text Form of Oracle Critical Patch Update - October 2015 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpuoct2015verbose-2367954.html
Oracle Technology Network
58	Oracle Solaris Third Party Bulletin - January 2016	http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
59	Oracle Solaris Third Party Bulletin - July 2015	http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
SECURITY BLOG
60	April 2016 Critical Patch Update Released	https://blogs.oracle.com/security/entry/april_2016_critical_patch_update
61	January 2016 Critical Patch Update Released	https://blogs.oracle.com/security/entry/january_2016_critical_patch_update
62	July 2015 Critical Patch Update Released	https://blogs.oracle.com/security/entry/july_2015_critical_patch_update
63	October 2015 Critical Patch Update Released	https://blogs.oracle.com/security/entry/october_2015_critical_patch_update
SolarWinds
64	SRM Profiler Module 6.2.3 Release Notes (CVE-2015-4000: "Logjam" TLS vulnerabilities)	http://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/releaseNotes.htm
Ubuntu Security Notice
65	USN-2673-1	http://www.ubuntu.com/usn/USN-2673-1
アップル
66	Safari	https://www.apple.com/jp/safari/
サーバ・クライアント製品セキュリティ情報
67	Logjamと呼ばれるTLSプロトコルの脆弱性によるHA8500サーバへの影響について	http://www.hitachi.co.jp/products/it/server/security/info/vulnerable/Logjam_ha8500.html
68	Logjamと呼ばれるTLSプロトコルの脆弱性による日立アドバンストサーバHA8000への影響について	http://www.hitachi.co.jp/products/it/server/security/info/vulnerable/Logjam_ha8000.html
69	Logjamと呼ばれるTLSプロトコルの脆弱性による無停電電源装置(UPS)への影響について	http://www.hitachi.co.jp/products/it/server/security/info/vulnerable/Logjam_ucp.html
ソフトウェア製品セキュリティ情報
70	hitachi-sec-2018-128	http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2018-128/index.html
71	HS15-026	http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS15-026/index.html
72	HS16-004	http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS16-004/index.html

その他

No	名前	URL
JVN
1	JVNVU#91445763	http://jvn.jp/vu/JVNVU91445763/
関連文書
2	Imperfect Forward Secrecy: How Diffie-Hellman Fails in Practice	https://weakdh.org/imperfect-forward-secrecy.pdf
3	The Logjam Attack	https://weakdh.org/

変更履歴

No	変更内容	変更日
0	[2015年05月22日] 掲載 [2015年07月07日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：アップル (HT204941) を追加ベンダ情報：アップル (HT204942) を追加ベンダ情報：アップル (APPLE-SA-2015-06-30-1 iOS 8.4) を追加ベンダ情報：アップル (APPLE-SA-2015-06-30-2 OS X Yosemite v10.10.4 and Security Update 2015-005) を追加 [2015年07月29日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - July 2015) を追加ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - July 2015 Risk Matrices) を追加ベンダ情報：オラクル (July 2015 Critical Patch Update Released) を追加ベンダ情報：オラクル (Oracle Solaris Third Party Bulletin - July 2015) を追加ベンダ情報：日立 (HS15-026) を追加参考情報：IPA 重要なセキュリティ情報 (Oracle Java の脆弱性対策について(CVE-2015-2590等)) を追加参考情報：JPCERT 注意喚起 (JPCERT-AT-2015-0022) を追加 [2015年08月06日] 参考情報：JVN (JVNVU#91445763) を追加 [2015年09月04日] ベンダ情報：IBM (1962455) を追加ベンダ情報：ヒューレット・パッカード (HPSBUX03388) を追加 [2015年10月23日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - October 2015) を追加ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - October 2015 Risk Matrices) を追加ベンダ情報：オラクル (October 2015 Critical Patch Update Released) を追加 [2015年10月28日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：日本電気 (NV15-010) を追加 [2015年11月05日] 影響を受けるシステム：ベンダ情報の更新に伴い内容を更新 [2015年12月10日] 影響を受けるシステム：ベンダ情報の更新に伴い内容を更新 [2015年12月16日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：日立 (Logjamと呼ばれるTLSプロトコルの脆弱性による日立アドバンストサーバHA8000への影響について) を追加ベンダ情報：日立 (Logjamと呼ばれるTLSプロトコルの脆弱性によるHA8500サーバへの影響について) を追加ベンダ情報：日立 (Logjamと呼ばれるTLSプロトコルの脆弱性による無停電電源装置(UPS)への影響について) を追加 [2016年01月27日] 影響を受けるシステム：ベンダ情報の更新に伴い内容を更新 [2016年01月28日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - January 2016 Risk Matrices) を追加ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - January 2016) を追加ベンダ情報：オラクル (January 2016 Critical Patch Update Released) を追加 [2016年02月01日] 影響を受けるシステム：ベンダ情報の更新に伴い内容を更新 [2016年02月12日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：日立 (HS16-004) を追加 [2016年03月07日] 影響を受けるシステム：ベンダ情報の更新に伴い内容を更新 [2016年05月31日] CVSS による深刻度：内容を更新影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：オラクル (Oracle Critical Patch Update CVSS V2 Risk Matrices - April 2016) を追加ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - April 2016) を追加ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - April 2016 Risk Matrices) を追加ベンダ情報：オラクル (April 2016 Critical Patch Update Released) を追加 [2016年06月23日] 影響を受けるシステム：ベンダ情報の更新に伴い内容を更新 [2016年07月27日] 影響を受けるシステム：ベンダ情報の更新に伴い内容を更新 [2016年08月24日] 影響を受けるシステム：ベンダ情報の更新に伴い内容を更新 [2016年09月30日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：Canonical (USN-2673-1) を追加ベンダ情報：Debian (DSA-3324) を追加ベンダ情報：Mozilla Foundation (MFSA2015-70) を追加ベンダ情報：Mozilla Foundation (NSS 3.19.1 release notes) を追加ベンダ情報：Mozilla Foundation (Bug 1138554) を追加ベンダ情報：OpenSSL Project (DHE man-in-the-middle protection (Logjam)) を追加ベンダ情報：SolarWinds (SRM Profiler Module 6.2.3 Release Notes (CVE-2015-4000: "Logjam" TLS vulnerabilities)) を追加ベンダ情報：openSUSE project (SUSE-SU-2015:1268) を追加ベンダ情報：openSUSE project (SUSE-SU-2015:1269) を追加ベンダ情報：ヒューレット・パッカード (HPSBMU03345) を追加ベンダ情報：ヒューレット・パッカード (HPSBGN03351) を追加ベンダ情報：ヒューレット・パッカード (HPSBMU03401) を追加ベンダ情報：ヒューレット・パッカード (HPSBGN03362) を追加ベンダ情報：ヒューレット・パッカード (HPSBGN03405) を追加ベンダ情報：ヒューレット・パッカード (HPSBGN03404) を追加ベンダ情報：ヒューレット・パッカード (HPSBGN03402) を追加ベンダ情報：ヒューレット・パッカード (HPSBGN03361) を追加ベンダ情報：ヒューレット・パッカード (HPSBGN03411) を追加ベンダ情報：ヒューレット・パッカード (HPSBUX03512) を追加ベンダ情報：ヒューレット・パッカード (HPSBMU03356) を追加ベンダ情報：ヒューレット・パッカード (HPSBGN03407) を追加ベンダ情報：ヒューレット・パッカード (HPSBUX03363) を追加ベンダ情報：ヒューレット・パッカード (HPSBGN03399) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBMU03546) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBST03586) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBGN03533) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBGN03626) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBGN03373) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBHF03510) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBUX03435) を追加 [2016年10月07日] 影響を受けるシステム：ベンダ情報の更新に伴い内容を更新ベンダ情報：アライドテレシス (アライドテレシス株式会社からの情報) を追加 [2016年11月22日] ベンダ情報：オラクル (Oracle Solaris Third Party Bulletin - January 2016) を追加ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - July 2016) を追加 [2017年03月09日] 影響を受けるシステム：ベンダ情報の更新に伴い内容を更新	2018年2月17日10:37
1	[2018年09月21日] ベンダ情報：日立 (hitachi-sec-2018-128) を追加	2018年9月21日12:29

構成7	以上	以下	より上	未満
cpe:2.3:a:oracle:jdk:1.8.0:update_33::::::
cpe:2.3:a:oracle:jre:1.7.0:update_75::::::
cpe:2.3:a:oracle:jre:1.6.0:update_95::::::
cpe:2.3:a:oracle:jre:1.8.0:update_45::::::
cpe:2.3:a:oracle:jre:1.8.0:update_33::::::
cpe:2.3:a:oracle:jre:1.7.0:update_80::::::
cpe:2.3:a:oracle:jdk:1.8.0:update45::::::
cpe:2.3:a:oracle:jdk:1.7.0:update75::::::
cpe:2.3:a:oracle:jdk:1.6.0:update95::::::
cpe:2.3:a:oracle:jdk:1.7.0:update80::::::

構成13	以上	以下	より上	未満
cpe:2.3:a:mozilla:seamonkey:2.35:::::::*
cpe:2.3:a:mozilla:thunderbird:38.1:::::::*
cpe:2.3:a:mozilla:thunderbird:31.8:::::::*
cpe:2.3:o:mozilla:firefox_os:2.2:::::::*
cpe:2.3:a:mozilla:firefox:39.0:::::::*
cpe:2.3:a:mozilla:firefox_esr:31.8:::::::*
cpe:2.3:a:mozilla:firefox:38.1.0:::::::*