cbcvebase.

Debian Openjdk-8 vulnerabilities

333 known vulnerabilities affecting debian/openjdk-8.

Total CVEs
333
CISA KEV
2
actively exploited
Public exploits
7
Exploited in wild
3
Severity breakdown
CRITICAL46HIGH45MEDIUM166LOW76

Vulnerabilities

Page 12 of 17
CVE-2019-2816P4MEDIUMCVSS 4.8fixed in openjdk-11 11.0.4+11-1 (bullseye)2019
CVE-2019-2816 [MEDIUM] CVE-2019-2816: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subc... Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Suc
debian
CVE-2014-6457P4MEDIUMCVSS 4.0fixed in openjdk-8 8u40~b09-1 (sid)2014
CVE-2014-6457 [MEDIUM] CVE-2014-6457: openjdk-8 - Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java S... Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. Scope: local sid: resolved (fixed in 8u40~b09-1)
debian
CVE-2026-21925P4MEDIUMCVSS 4.8fixed in openjdk-11 11.0.30+7-1~deb11u1 (bullseye)2026
CVE-2026-21925 [MEDIUM] CVE-2026-21925: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and 21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Difficult to ex
debian
CVE-2019-2975P4MEDIUMCVSS 4.8fixed in openjdk-11 11.0.5+10-1 (bullseye)2019
CVE-2019-2975 [MEDIUM] CVE-2019-2975: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (compon... Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks o
debian
CVE-2019-2999P4MEDIUMCVSS 4.7fixed in openjdk-11 11.0.5+10-1 (bullseye)2019
CVE-2019-2999 [MEDIUM] CVE-2019-2999: openjdk-11 - Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Sup... Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the at
debian
CVE-2015-0478P4MEDIUMCVSS 4.3fixed in openjdk-8 8u45-b14-1 (sid)2015
CVE-2015-0478 [MEDIUM] CVE-2015-0478: openjdk-8 - Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JR... Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect confidentiality via vectors related to JCE. Scope: local sid: resolved (fixed in 8u45-b14-1)
debian
CVE-2025-21502P4MEDIUMCVSS 4.8fixed in openjdk-11 11.0.26+4-1~deb11u1 (bullseye)2025
CVE-2025-21502 [MEDIUM] CVE-2025-21502: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1; Oracle GraalVM for JDK: 17.0.13, 21.0.5, 23.0.1; Oracle GraalVM Enterprise Edition: 20.3.16 and 21.3.12. Difficult to
debian
CVE-2018-2800P4MEDIUMCVSS 4.2fixed in openjdk-8 8u171-b11-1 (sid)2018
CVE-2018-2800 [MEDIUM] CVE-2018-2800: openjdk-8 - Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent:... Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks require human interaction
debian
CVE-2016-3425P4MEDIUMCVSS 4.3fixed in openjdk-8 8u91-b14-1 (sid)2016
CVE-2016-3425 [MEDIUM] CVE-2016-3425: openjdk-8 - Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embed... Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect availability via vectors related to JAXP. Scope: local sid: resolved (fixed in 8u91-b14-1)
debian
CVE-2021-2369P4MEDIUMCVSS 4.3fixed in openjdk-11 11.0.12+7-1 (bullseye)2021
CVE-2021-2369 [MEDIUM] CVE-2021-2369: openjdk-11 - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracl... Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Library). Supported versions that are affected are Java SE: 7u301, 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to comprom
debian
CVE-2015-4749P4MEDIUMCVSS 4.3fixed in openjdk-8 8u66-b01-1 (sid)2015
CVE-2015-4749 [MEDIUM] CVE-2015-4749: openjdk-8 - Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.... Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect availability via vectors related to JNDI. Scope: local sid: resolved (fixed in 8u66-b01-1)
debian
CVE-2015-0470P4MEDIUMCVSS 4.3fixed in openjdk-8 8u45-b14-1 (sid)2015
CVE-2015-0470 [MEDIUM] CVE-2015-0470: openjdk-8 - Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affe... Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect integrity via unknown vectors related to Hotspot. Scope: local sid: resolved (fixed in 8u45-b14-1)
debian
CVE-2014-6531P4MEDIUMCVSS 4.3fixed in openjdk-8 8u40~b09-1 (sid)2014
CVE-2014-6531 [MEDIUM] CVE-2014-6531: openjdk-8 - Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Ja... Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality via unknown vectors related to Libraries. Scope: local sid: resolved (fixed in 8u40~b09-1)
debian
CVE-2014-6512P4MEDIUMCVSS 4.3fixed in openjdk-8 8u40~b09-1 (sid)2014
CVE-2014-6512 [MEDIUM] CVE-2014-6512: openjdk-8 - Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java S... Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Libraries. Scope: local sid: resolved (fixed in 8u40~b09-1)
debian
CVE-2024-21140P4MEDIUMCVSS 4.8fixed in openjdk-11 11.0.24+8-2~deb11u1 (bullseye)2024
CVE-2024-21140 [MEDIUM] CVE-2024-21140: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Diffi
debian
CVE-2024-21235P4MEDIUMCVSS 4.8fixed in openjdk-11 11.0.25+9-1~deb11u1 (bullseye)2024
CVE-2024-21235 [MEDIUM] CVE-2024-21235: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and 21.3.11. Difficult to
debian
CVE-2024-21145P4MEDIUMCVSS 4.8fixed in openjdk-11 11.0.24+8-2~deb11u1 (bullseye)2024
CVE-2024-21145 [MEDIUM] CVE-2024-21145: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficult
debian
CVE-2025-30691P4MEDIUMCVSS 4.8fixed in openjdk-11 11.0.27+6-1~deb11u1 (bullseye)2025
CVE-2025-30691 [MEDIUM] CVE-2025-30691: openjdk-11 - Vulnerability in Oracle Java SE (component: Compiler). Supported versions that ... Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.6, 24; Oracle GraalVM for JDK: 21.0.6 and 24. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unaut
debian
CVE-2025-30754P4MEDIUMCVSS 4.8fixed in openjdk-11 11.0.28+6-1~deb11u1 (bullseye)2025
CVE-2025-30754 [MEDIUM] CVE-2025-30754: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to expl
debian
CVE-2018-2678P4MEDIUMCVSS 4.3fixed in openjdk-8 8u162-b12-1 (sid)2018
CVE-2018-2678 [MEDIUM] CVE-2018-2678: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java... Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java
debian
Debian Openjdk-8 vulnerabilities | cvebase