cbcvebase.

Debian Openjdk-8 vulnerabilities

333 known vulnerabilities affecting debian/openjdk-8.

Total CVEs
333
CISA KEV
2
actively exploited
Public exploits
7
Exploited in wild
3
Severity breakdown
CRITICAL46HIGH45MEDIUM166LOW76

Vulnerabilities

Page 6 of 17
CVE-2019-2949P3MEDIUMCVSS 6.8fixed in openjdk-11 11.0.5+10-1 (bullseye)2019
CVE-2019-2949 [MEDIUM] CVE-2019-2949: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (compon... Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerability
debian
CVE-2019-2989P3MEDIUMCVSS 6.8fixed in openjdk-11 11.0.5+10-1 (bullseye)2019
CVE-2019-2989 [MEDIUM] CVE-2019-2989: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (compon... Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. While the vu
debian
CVE-2021-35559P3MEDIUMCVSS 5.3fixed in openjdk-11 11.0.13+8-1~deb11u1 (bullseye)2021
CVE-2021-35559 [MEDIUM] CVE-2021-35559: openjdk-11 - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracl... Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise
debian
CVE-2018-2582P3MEDIUMCVSS 6.5fixed in openjdk-8 8u162-b12-1 (sid)2018
CVE-2018-2582 [MEDIUM] CVE-2018-2582: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subc... Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks requir
debian
CVE-2018-2799P3MEDIUMCVSS 5.3fixed in openjdk-8 8u171-b11-1 (sid)2018
CVE-2018-2799 [MEDIUM] CVE-2018-2799: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java... Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedd
debian
CVE-2021-35556P3MEDIUMCVSS 5.3fixed in openjdk-11 11.0.13+8-1~deb11u1 (bullseye)2021
CVE-2021-35556 [MEDIUM] CVE-2021-35556: openjdk-11 - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracl... Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise
debian
CVE-2017-3511P3HIGHCVSS 7.7fixed in openjdk-8 8u131-b11-1 (sid)2017
CVE-2017-3511 [HIGH] CVE-2017-3511: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java... Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded, JRockit executes to
debian
CVE-2018-2794P3HIGHCVSS 7.7fixed in openjdk-8 8u171-b11-1 (sid)2018
CVE-2018-2794 [HIGH] CVE-2018-2794: openjdk-8 - Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent:... Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, JRockit executes to compromise Java SE, JRockit. Successful atta
debian
CVE-2015-4806P3MEDIUMCVSS 6.4fixed in openjdk-8 8u66-b17-1 (sid)2015
CVE-2015-4806 [MEDIUM] CVE-2015-4806: openjdk-8 - Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE E... Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries. Scope: local sid: resolved (fixed in 8u66-b17-1)
debian
CVE-2021-35567P3MEDIUMCVSS 6.8fixed in openjdk-11 11.0.13+8-1~deb11u1 (bullseye)2021
CVE-2021-35567 [MEDIUM] CVE-2021-35567: openjdk-11 - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracl... Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via Kerberos to compromise Java SE, Oracl
debian
CVE-2017-10274P3MEDIUMCVSS 6.8fixed in openjdk-8 8u151-b12-1 (sid)2017
CVE-2017-10274 [MEDIUM] CVE-2017-10274: openjdk-8 - Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Ca... Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other t
debian
CVE-2017-10198P3MEDIUMCVSS 6.8fixed in openjdk-8 8u141-b15-1 (sid)2017
CVE-2017-10198 [MEDIUM] CVE-2017-10198: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java... Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Jav
debian
CVE-2022-21293P3MEDIUMCVSS 5.3fixed in openjdk-11 11.0.14+9-1~deb11u1 (bullseye)2022
CVE-2022-21293 [MEDIUM] CVE-2022-21293: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product o... Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple pr
debian
CVE-2018-2618P3MEDIUMCVSS 5.9fixed in openjdk-8 8u162-b12-1 (sid)2018
CVE-2018-2618 [MEDIUM] CVE-2018-2618: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java... Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Jav
debian
CVE-2015-0480P3MEDIUMCVSS 5.8fixed in openjdk-8 8u45-b14-1 (sid)2015
CVE-2015-0480 [MEDIUM] CVE-2015-0480: openjdk-8 - Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows ... Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity and availability via unknown vectors related to Tools. Scope: local sid: resolved (fixed in 8u45-b14-1)
debian
CVE-2022-21541P3MEDIUMCVSS 5.9fixed in openjdk-11 11.0.16+8-1~deb11u1 (bullseye)2022
CVE-2022-21541 [MEDIUM] CVE-2022-21541: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product o... Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle GraalVM Enterprise Edition: 20.3.6, 21.3.2 and 22.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network
debian
CVE-2025-53057P3MEDIUMCVSS 5.9fixed in openjdk-11 11.0.29+6-1~deb11u1 (bullseye)2025
CVE-2025-53057 [MEDIUM] CVE-2025-53057: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Difficult to exploit vuln
debian
CVE-2022-21340P4MEDIUMCVSS 5.3fixed in openjdk-11 11.0.14+9-1~deb11u1 (bullseye)2022
CVE-2022-21340 [MEDIUM] CVE-2022-21340: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product o... Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple pr
debian
CVE-2018-2641P4MEDIUMCVSS 6.1fixed in openjdk-8 8u162-b12-1 (sid)2018
CVE-2018-2641 [MEDIUM] CVE-2018-2641: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subc... Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful at
debian
CVE-2021-35565P4MEDIUMCVSS 5.3fixed in openjdk-11 11.0.13+8-1~deb11u1 (bullseye)2021
CVE-2021-35565 [MEDIUM] CVE-2021-35565: openjdk-11 - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracl... Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Oracle Graa
debian
Debian Openjdk-8 vulnerabilities | cvebase