Debian Openjdk-8 vulnerabilities
333 known vulnerabilities affecting debian/openjdk-8.
Total CVEs
333
CISA KEV
2
actively exploited
Public exploits
7
Exploited in wild
3
Severity breakdown
CRITICAL46HIGH45MEDIUM166LOW76
Vulnerabilities
Page 10 of 17
CVE-2015-0410P4MEDIUMCVSS 5.0fixed in openjdk-8 8u40~b22-1 (sid)2015
CVE-2015-0410 [MEDIUM] CVE-2015-0410: openjdk-8 - Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in...
Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows remote attackers to affect availability via unknown vectors related to Security.
Scope: local
sid: resolved (fixed in 8u40~b22-1)
debian
CVE-2015-4734P4MEDIUMCVSS 5.0fixed in openjdk-8 8u66-b17-1 (sid)2015
CVE-2015-4734 [MEDIUM] CVE-2015-4734: openjdk-8 - Unspecified vulnerability in Oracle Java SE 6u101, 7u85 and 8u60, and Java SE Em...
Unspecified vulnerability in Oracle Java SE 6u101, 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JGSS.
Scope: local
sid: resolved (fixed in 8u66-b17-1)
debian
CVE-2015-4842P4MEDIUMCVSS 5.0fixed in openjdk-8 8u66-b17-1 (sid)2015
CVE-2015-4842 [MEDIUM] CVE-2015-4842: openjdk-8 - Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE E...
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JAXP.
Scope: local
sid: resolved (fixed in 8u66-b17-1)
debian
CVE-2015-2632P4MEDIUMCVSS 5.0fixed in icu 55.1-7 (bookworm)2015
CVE-2015-2632 [MEDIUM] CVE-2015-2632: icu - Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote a...
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
Scope: local
bookworm: resolved (fixed in 55.1-7)
bullseye: resolved (fixed in 55.1-7)
forky: resolved (fixed in 55.1-7)
sid: resolved (fixed in 55.1-7)
trixie: resolved (fixed in 55.1-7)
debian
CVE-2016-5547P4MEDIUMCVSS 5.3fixed in openjdk-8 8u121-b13-1 (sid)2016
CVE-2016-5547 [MEDIUM] CVE-2016-5547: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java...
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embed
debian
CVE-2017-10053P4MEDIUMCVSS 5.3fixed in openjdk-8 8u141-b15-1 (sid)2017
CVE-2017-10053 [MEDIUM] CVE-2017-10053: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java...
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Emb
debian
CVE-2022-21349P4MEDIUMCVSS 5.3fixed in openjdk-8 8u322-ga-1 (sid)2022
CVE-2022-21349 [MEDIUM] CVE-2022-21349: openjdk-8 - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product o...
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 7u321, 8u311; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Ora
debian
CVE-2017-10347P4MEDIUMCVSS 5.3fixed in openjdk-8 8u151-b12-1 (sid)2017
CVE-2017-10347 [MEDIUM] CVE-2017-10347: openjdk-8 - Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent:...
Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks of thi
debian
CVE-2015-4872P4MEDIUMCVSS 5.0fixed in openjdk-8 8u66-b17-1 (sid)2015
CVE-2015-4872 [MEDIUM] CVE-2015-4872: openjdk-8 - Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embed...
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect integrity via unknown vectors related to Security.
Scope: local
sid: resolved (fixed in 8u66-b17-1)
debian
CVE-2015-0488P4MEDIUMCVSS 5.0fixed in openjdk-8 8u45-b14-1 (sid)2015
CVE-2015-0488 [MEDIUM] CVE-2015-0488: openjdk-8 - Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JR...
Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect availability via vectors related to JSSE.
Scope: local
sid: resolved (fixed in 8u45-b14-1)
debian
CVE-2022-21628P4MEDIUMCVSS 5.3fixed in openjdk-11 11.0.18+10-1~deb11u1 (bullseye)2022
CVE-2022-21628 [MEDIUM] CVE-2022-21628: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product o...
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Easily exploitable vulnerability allows unauthenticated attacker
debian
CVE-2022-21626P4MEDIUMCVSS 5.3fixed in openjdk-11 11.0.18+10-1~deb11u1 (bullseye)2022
CVE-2022-21626 [MEDIUM] CVE-2022-21626: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product o...
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS
debian
CVE-2016-0402P4MEDIUMCVSS 5.0fixed in openjdk-8 8u72-b15-1 (sid)2016
CVE-2016-0402 [MEDIUM] CVE-2016-0402: openjdk-8 - Unspecified vulnerability in the Java SE and Java SE Embedded components in Orac...
Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect integrity via unknown vectors related to Networking.
Scope: local
sid: resolved (fixed in 8u72-b15-1)
debian
CVE-2015-4882P4MEDIUMCVSS 5.0fixed in openjdk-8 8u66-b17-1 (sid)2015
CVE-2015-4882 [MEDIUM] CVE-2015-4882: openjdk-8 - Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE E...
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect availability via vectors related to CORBA.
Scope: local
sid: resolved (fixed in 8u66-b17-1)
debian
CVE-2015-0407P4MEDIUMCVSS 5.0fixed in openjdk-8 8u40~b22-1 (sid)2015
CVE-2015-0407 [MEDIUM] CVE-2015-0407: openjdk-8 - Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows ...
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Swing.
Scope: local
sid: resolved (fixed in 8u40~b22-1)
debian
CVE-2014-6517P4MEDIUMCVSS 5.0fixed in openjdk-8 8u40~b09-1 (sid)2014
CVE-2014-6517 [MEDIUM] CVE-2014-6517: openjdk-8 - Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20; Java SE Embedd...
Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and Jrockit R27.8.3 and R28.3.3 allows remote attackers to affect confidentiality via vectors related to JAXP.
Scope: local
sid: resolved (fixed in 8u40~b09-1)
debian
CVE-2017-10350P4MEDIUMCVSS 5.3fixed in openjdk-8 8u151-b12-1 (sid)2017
CVE-2017-10350 [MEDIUM] CVE-2017-10350: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subc...
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of
debian
CVE-2017-10349P4MEDIUMCVSS 5.3fixed in openjdk-8 8u151-b12-1 (sid)2017
CVE-2017-10349 [MEDIUM] CVE-2017-10349: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subc...
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attac
debian
CVE-2017-10357P4MEDIUMCVSS 5.3fixed in openjdk-8 8u151-b12-1 (sid)2017
CVE-2017-10357 [MEDIUM] CVE-2017-10357: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subc...
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Success
debian
CVE-2017-10348P4MEDIUMCVSS 5.3fixed in openjdk-8 8u151-b12-1 (sid)2017
CVE-2017-10348 [MEDIUM] CVE-2017-10348: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subc...
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful
debian