cbcvebase.

Debian Openjdk-11 vulnerabilities

165 known vulnerabilities affecting debian/openjdk-11.

Total CVEs
165
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH23MEDIUM77LOW65

Vulnerabilities

Page 1 of 9
CVE-2019-2698P2LOWCVSS 8.1PoCfixed in openjdk-11 11.0.3+7-1 (bullseye)2019
CVE-2019-2698 [HIGH] CVE-2019-2698: openjdk-11 - Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Sup... Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 7u211 and 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vul
debian
CVE-2022-34169P2HIGHCVSS 7.5fixed in bcel 6.5.0-2 (bookworm)2022
CVE-2022-34169 [HIGH] CVE-2022-34169: bcel - The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue ... The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 or later. Note: Java runtimes (such as OpenJDK) include repackaged copies o
debian
CVE-2020-2604P3HIGHCVSS 8.1fixed in openjdk-11 11.0.6+10-1 (bullseye)2020
CVE-2020-2604 [HIGH] CVE-2020-2604: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (compon... Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Success
debian
CVE-2019-2684P3MEDIUMCVSS 5.9fixed in openjdk-11 11.0.3+7-1 (bullseye)2019
CVE-2019-2684 [MEDIUM] CVE-2019-2684: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subc... Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful att
debian
CVE-2020-2803P3HIGHCVSS 8.3fixed in openjdk-11 11.0.7+10-1 (bullseye)2020
CVE-2020-2803 [HIGH] CVE-2020-2803: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (compon... Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful atta
debian
CVE-2022-21476P3HIGHCVSS 7.5fixed in openjdk-11 11.0.15+10-1~deb11u1 (bullseye)2022
CVE-2022-21476 [HIGH] CVE-2022-21476: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product o... Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via
debian
CVE-2025-50059P3HIGHCVSS 8.6fixed in openjdk-11 11.0.28+6-1~deb11u1 (bullseye)2025
CVE-2025-50059 [HIGH] CVE-2025-50059: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable v
debian
CVE-2018-3149P3HIGHCVSS 8.3fixed in openjdk-11 11.0.1+13-1 (bullseye)2018
CVE-2018-3149 [HIGH] CVE-2018-3149: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java... Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java S
debian
CVE-2025-50106P3HIGHCVSS 8.1fixed in openjdk-11 11.0.28+6-1~deb11u1 (bullseye)2025
CVE-2025-50106 [HIGH] CVE-2025-50106: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit
debian
CVE-2025-30749P3HIGHCVSS 8.1fixed in openjdk-11 11.0.28+6-1~deb11u1 (bullseye)2025
CVE-2025-30749 [HIGH] CVE-2025-30749: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit
debian
CVE-2025-53066P3HIGHCVSS 7.5fixed in openjdk-11 11.0.29+6-1~deb11u1 (bullseye)2025
CVE-2025-53066 [HIGH] CVE-2025-53066: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Easily exploitable vulnerabilit
debian
CVE-2020-2805P3HIGHCVSS 8.3fixed in openjdk-11 11.0.7+10-1 (bullseye)2020
CVE-2020-2805 [HIGH] CVE-2020-2805: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (compon... Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful atta
debian
CVE-2020-14583P3HIGHCVSS 8.3fixed in openjdk-11 11.0.8+10-1 (bullseye)2020
CVE-2020-14583 [HIGH] CVE-2020-14583: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (compon... Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successfu
debian
CVE-2025-21587P3HIGHCVSS 7.4fixed in openjdk-11 11.0.27+6-1~deb11u1 (bullseye)2025
CVE-2025-21587 [HIGH] CVE-2025-21587: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21.0.6, 24; Oracle GraalVM Enterprise Edition:20.3.17 and 21.3.13. Difficult to exploit
debian
CVE-2021-2388P3HIGHCVSS 7.5fixed in openjdk-11 11.0.12+7-1 (bullseye)2021
CVE-2021-2388 [HIGH] CVE-2021-2388: openjdk-11 - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracl... Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Jav
debian
CVE-2019-2602P3HIGHCVSS 7.5fixed in openjdk-11 11.0.3+7-1 (bullseye)2019
CVE-2019-2602 [HIGH] CVE-2019-2602: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subc... Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful a
debian
CVE-2023-21930P3HIGHCVSS 7.4fixed in openjdk-11 11.0.20+8-1~deb11u1 (bullseye)2023
CVE-2023-21930 [HIGH] CVE-2023-21930: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product o... Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via
debian
CVE-2024-21147P3HIGHCVSS 7.4fixed in openjdk-11 11.0.24+8-2~deb11u1 (bullseye)2024
CVE-2024-21147 [HIGH] CVE-2024-21147: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficu
debian
CVE-2018-3169P3HIGHCVSS 8.3fixed in openjdk-11 11.0.1+13-1 (bullseye)2018
CVE-2018-3169 [HIGH] CVE-2018-3169: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subc... Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks r
debian
CVE-2020-2816P3HIGHCVSS 7.5fixed in openjdk-11 11.0.7+10-1 (bullseye)2020
CVE-2020-2816 [HIGH] CVE-2020-2816: openjdk-11 - Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Suppor... Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access
debian
Debian Openjdk-11 vulnerabilities | cvebase