Debian Openjdk-8 vulnerabilities
333 known vulnerabilities affecting debian/openjdk-8.
Total CVEs
333
CISA KEV
2
actively exploited
Public exploits
7
Exploited in wild
3
Severity breakdown
CRITICAL46HIGH45MEDIUM166LOW76
Vulnerabilities
Page 11 of 17
CVE-2017-10281P4MEDIUMCVSS 5.3fixed in openjdk-8 8u151-b12-1 (sid)2017
CVE-2017-10281 [MEDIUM] CVE-2017-10281: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java...
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java S
debian
CVE-2015-4903P4MEDIUMCVSS 5.0fixed in openjdk-8 8u66-b17-1 (sid)2015
CVE-2015-4903 [MEDIUM] CVE-2015-4903: openjdk-8 - Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE E...
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to RMI.
Scope: local
sid: resolved (fixed in 8u66-b17-1)
debian
CVE-2015-4840P4MEDIUMCVSS 5.0fixed in openjdk-8 8u66-b17-1 (sid)2015
CVE-2015-4840 [MEDIUM] CVE-2015-4840: openjdk-8 - Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded ...
Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via unknown vectors related to 2D.
Scope: local
sid: resolved (fixed in 8u66-b17-1)
debian
CVE-2015-2621P4MEDIUMCVSS 5.0fixed in openjdk-8 8u66-b01-1 (sid)2015
CVE-2015-2621 [MEDIUM] CVE-2015-2621: openjdk-8 - Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Em...
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33, allows remote attackers to affect confidentiality via vectors related to JMX.
Scope: local
sid: resolved (fixed in 8u66-b01-1)
debian
CVE-2017-10109P4MEDIUMCVSS 5.3fixed in openjdk-8 8u141-b15-1 (sid)2017
CVE-2017-10109 [MEDIUM] CVE-2017-10109: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java...
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE,
debian
CVE-2017-10108P4MEDIUMCVSS 5.3fixed in openjdk-8 8u141-b15-1 (sid)2017
CVE-2017-10108 [MEDIUM] CVE-2017-10108: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java...
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE,
debian
CVE-2015-2613P4MEDIUMCVSS 5.0fixed in openjdk-8 8u66-b01-1 (sid)2015
CVE-2015-2613 [MEDIUM] CVE-2015-2613: openjdk-8 - Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded ...
Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.
Scope: local
sid: resolved (fixed in 8u66-b01-1)
debian
CVE-2015-2659P4MEDIUMCVSS 5.0fixed in openjdk-8 8u66-b01-1 (sid)2015
CVE-2015-2659 [MEDIUM] CVE-2015-2659: openjdk-8 - Unspecified vulnerability in Oracle Java SE 8u45 and Java SE Embedded 8u33 allow...
Unspecified vulnerability in Oracle Java SE 8u45 and Java SE Embedded 8u33 allows remote attackers to affect availability via unknown vectors related to Security.
Scope: local
sid: resolved (fixed in 8u66-b01-1)
debian
CVE-2023-22081P4MEDIUMCVSS 5.3fixed in openjdk-11 11.0.21+9-1~deb11u1 (bullseye)2023
CVE-2023-22081 [MEDIUM] CVE-2023-22081: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente...
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and 22.3.3. Easily exploitable vulnerab
debian
CVE-2023-22067P4MEDIUMCVSS 5.3fixed in openjdk-8 8u392-ga-1 (sid)2023
CVE-2023-22067 [MEDIUM] CVE-2023-22067: openjdk-8 - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product o...
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf; Oracle GraalVM Enterprise Edition: 20.3.11 and 21.3.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via CORBA to compromise Oracle
debian
CVE-2014-6511P4MEDIUMCVSS 5.0fixed in openjdk-8 8u40~b09-1 (sid)2014
CVE-2014-6511 [MEDIUM] CVE-2014-6511: openjdk-8 - Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20 allows ...
Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
Scope: local
sid: resolved (fixed in 8u40~b09-1)
debian
CVE-2015-2601P4MEDIUMCVSS 5.0fixed in openjdk-8 8u66-b01-1 (sid)2015
CVE-2015-2601 [MEDIUM] CVE-2015-2601: openjdk-8 - Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3....
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.
Scope: local
sid: resolved (fixed in 8u66-b01-1)
debian
CVE-2014-6504P4MEDIUMCVSS 5.0fixed in openjdk-8 8u40~b09-1 (sid)2014
CVE-2014-6504 [MEDIUM] CVE-2014-6504: openjdk-8 - Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, and 7u67, and Java SE ...
Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, and 7u67, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality via unknown vectors related to Hotspot.
Scope: local
sid: resolved (fixed in 8u40~b09-1)
debian
CVE-2020-14556P4MEDIUMCVSS 4.8fixed in openjdk-11 11.0.8+10-1 (bullseye)2020
CVE-2020-14556 [MEDIUM] CVE-2020-14556: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (compon...
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful att
debian
CVE-2020-2800P4MEDIUMCVSS 4.8fixed in openjdk-11 11.0.7+10-1 (bullseye)2020
CVE-2020-2800 [MEDIUM] CVE-2020-2800: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (compon...
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded.
debian
CVE-2023-21830P4MEDIUMCVSS 5.3fixed in openjdk-21 21~7ea-1 (forky)2023
CVE-2023-21830 [MEDIUM] CVE-2023-21830: openjdk-21 - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product o...
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf; Oracle GraalVM Enterprise Edition: 20.3.8 and 21.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols
debian
CVE-2017-10356P4MEDIUMCVSS 6.2fixed in openjdk-8 8u151-b12-1 (sid)2017
CVE-2017-10356 [MEDIUM] CVE-2017-10356: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java...
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded, JR
debian
CVE-2018-2599P4MEDIUMCVSS 4.8fixed in openjdk-8 8u162-b12-1 (sid)2018
CVE-2018-2599 [MEDIUM] CVE-2018-2599: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java...
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Ja
debian
CVE-2014-6519P4MEDIUMCVSS 5.0fixed in openjdk-8 8u40~b09-1 (sid)2014
CVE-2014-6519 [MEDIUM] CVE-2014-6519: openjdk-8 - Unspecified vulnerability in Oracle Java SE 7u67 and 8u20, and Java SE Embedded ...
Unspecified vulnerability in Oracle Java SE 7u67 and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect integrity via unknown vectors related to Hotspot.
Scope: local
sid: resolved (fixed in 8u40~b09-1)
debian
CVE-2020-2593P4MEDIUMCVSS 4.8fixed in openjdk-11 11.0.6+10-1 (bullseye)2020
CVE-2020-2593 [MEDIUM] CVE-2020-2593: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (compon...
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successf
debian