cbcvebase.

Debian Openjdk-11 vulnerabilities

165 known vulnerabilities affecting debian/openjdk-11.

Total CVEs
165
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH23MEDIUM77LOW65

Vulnerabilities

Page 2 of 9
CVE-2026-21945P3HIGHCVSS 7.5fixed in openjdk-11 11.0.30+7-1~deb11u1 (bullseye)2026
CVE-2026-21945 [HIGH] CVE-2026-21945: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and 21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily explo
debian
CVE-2024-20952P3HIGHCVSS 7.4fixed in openjdk-11 11.0.22+7-1~deb11u1 (bullseye)2024
CVE-2024-20952 [HIGH] CVE-2024-20952: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and 22.3.4. Difficult to expl
debian
CVE-2024-20918P3HIGHCVSS 7.4fixed in openjdk-11 11.0.22+7-1~deb11u1 (bullseye)2024
CVE-2024-20918 [HIGH] CVE-2024-20918: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and 22.3.4. Difficult to explo
debian
CVE-2020-14593P3HIGHCVSS 7.4fixed in openjdk-11 11.0.8+10-1 (bullseye)2020
CVE-2020-14593 [HIGH] CVE-2020-14593: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (compon... Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks
debian
CVE-2026-21932P3HIGHCVSS 7.4fixed in openjdk-11 11.0.30+7-1~deb11u1 (bullseye)2026
CVE-2026-21932 [HIGH] CVE-2026-21932: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and 21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily ex
debian
CVE-2021-35550P3MEDIUMCVSS 5.9fixed in openjdk-11 11.0.13+8-1~deb11u1 (bullseye)2021
CVE-2021-35550 [MEDIUM] CVE-2021-35550: openjdk-11 - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracl... Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Oracle Gr
debian
CVE-2020-2601P3MEDIUMCVSS 6.8fixed in openjdk-11 11.0.6+10-1 (bullseye)2020
CVE-2020-2601 [MEDIUM] CVE-2020-2601: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (compon... Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerabil
debian
CVE-2019-2949P3MEDIUMCVSS 6.8fixed in openjdk-11 11.0.5+10-1 (bullseye)2019
CVE-2019-2949 [MEDIUM] CVE-2019-2949: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (compon... Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerability
debian
CVE-2019-2989P3MEDIUMCVSS 6.8fixed in openjdk-11 11.0.5+10-1 (bullseye)2019
CVE-2019-2989 [MEDIUM] CVE-2019-2989: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (compon... Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. While the vu
debian
CVE-2021-35559P3MEDIUMCVSS 5.3fixed in openjdk-11 11.0.13+8-1~deb11u1 (bullseye)2021
CVE-2021-35559 [MEDIUM] CVE-2021-35559: openjdk-11 - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracl... Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise
debian
CVE-2021-35556P3MEDIUMCVSS 5.3fixed in openjdk-11 11.0.13+8-1~deb11u1 (bullseye)2021
CVE-2021-35556 [MEDIUM] CVE-2021-35556: openjdk-11 - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracl... Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise
debian
CVE-2021-35567P3MEDIUMCVSS 6.8fixed in openjdk-11 11.0.13+8-1~deb11u1 (bullseye)2021
CVE-2021-35567 [MEDIUM] CVE-2021-35567: openjdk-11 - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracl... Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via Kerberos to compromise Java SE, Oracl
debian
CVE-2022-21293P3MEDIUMCVSS 5.3fixed in openjdk-11 11.0.14+9-1~deb11u1 (bullseye)2022
CVE-2022-21293 [MEDIUM] CVE-2022-21293: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product o... Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple pr
debian
CVE-2022-21541P3MEDIUMCVSS 5.9fixed in openjdk-11 11.0.16+8-1~deb11u1 (bullseye)2022
CVE-2022-21541 [MEDIUM] CVE-2022-21541: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product o... Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle GraalVM Enterprise Edition: 20.3.6, 21.3.2 and 22.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network
debian
CVE-2025-53057P3MEDIUMCVSS 5.9fixed in openjdk-11 11.0.29+6-1~deb11u1 (bullseye)2025
CVE-2025-53057 [MEDIUM] CVE-2025-53057: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Difficult to exploit vuln
debian
CVE-2022-21340P4MEDIUMCVSS 5.3fixed in openjdk-11 11.0.14+9-1~deb11u1 (bullseye)2022
CVE-2022-21340 [MEDIUM] CVE-2022-21340: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product o... Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple pr
debian
CVE-2021-35565P4MEDIUMCVSS 5.3fixed in openjdk-11 11.0.13+8-1~deb11u1 (bullseye)2021
CVE-2021-35565 [MEDIUM] CVE-2021-35565: openjdk-11 - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracl... Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Oracle Graa
debian
CVE-2021-35564P4MEDIUMCVSS 5.3fixed in openjdk-11 11.0.13+8-1~deb11u1 (bullseye)2021
CVE-2021-35564 [MEDIUM] CVE-2021-35564: openjdk-11 - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracl... Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromis
debian
CVE-2021-35561P4MEDIUMCVSS 5.3fixed in openjdk-11 11.0.13+8-1~deb11u1 (bullseye)2021
CVE-2021-35561 [MEDIUM] CVE-2021-35561: openjdk-11 - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracl... Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromis
debian
CVE-2021-35586P4MEDIUMCVSS 5.3fixed in openjdk-11 11.0.13+8-1~deb11u1 (bullseye)2021
CVE-2021-35586 [MEDIUM] CVE-2021-35586: openjdk-11 - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracl... Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromis
debian
Debian Openjdk-11 vulnerabilities | cvebase