Oracle Java Virtual Machine vulnerabilities
11 known vulnerabilities affecting oracle/java_virtual_machine.
Total CVEs
11
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH3MEDIUM7LOW1
Vulnerabilities
Page 1 of 1
CVE-2026-21975MEDIUMCVSS 4.5≥ 19.3, ≤ 19.29≥ 21.3, ≤ 21.202026-01-20
CVE-2026-21975 [MEDIUM] CWE-404 CVE-2026-21975: Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affec
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.29 and 21.3-21.20. Easily exploitable vulnerability allows high privileged attacker having Authenticated User privilege with network access via Oracle Net to compromise Java VM. Successful attacks require human interaction from a person
nvd
CVE-2025-61881MEDIUMCVSS 5.9≥ 19.3, ≤ 19.28≥ 21.3, ≤ 21.19+1 more2025-10-21
CVE-2025-61881 [MEDIUM] CWE-284 CVE-2025-61881: Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affec
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.28, 21.3-21.19 and 23.4-23.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Java VM. Successful attacks of this vulnerability can result in unauthorized creation, del
nvd
CVE-2025-50069HIGHCVSS 7.7≥ 19.3, ≤ 19.27≥ 21.3, ≤ 21.182025-07-15
CVE-2025-50069 [HIGH] CWE-269 CVE-2025-50069: Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affec
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.27 and 21.3-21.18. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via Oracle Net to compromise Java VM. While the vulnerability is in Java VM, attacks
nvd
CVE-2025-30736HIGHCVSS 7.4≥ 19.3, ≤ 19.26≥ 21.3, ≤ 21.17+1 more2025-04-15
CVE-2025-30736 [HIGH] CWE-284 CVE-2025-30736: Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affec
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.26, 21.3-21.17 and 23.4-23.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java VM. Successful attacks of this vulnerability can result in unauthorized creatio
nvd
CVE-2025-21553MEDIUMCVSS 4.2≥ 19.3, ≤ 19.25≥ 21.3, ≤ 21.16+1 more2025-01-21
CVE-2025-21553 [MEDIUM] CWE-863 CVE-2025-21553: Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affec
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.25, 21.3-21.16 and 23.4-23.6. Difficult to exploit vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via Oracle Net to compromise Java VM. Successful attacks of this vulne
nvd
CVE-2024-21093MEDIUMCVSS 5.3≥ 19.3, ≤ 19.22≥ 21.3, ≤ 21.132024-04-16
CVE-2024-21093 [MEDIUM] CVE-2024-21093: Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affec
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.22 and 21.3-21.13. Difficult to exploit vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via Oracle Net to compromise Java VM. Successful attacks of this vulnerability can result
nvd
CVE-2022-39429MEDIUMCVSS 4.3v19cv21c2023-01-18
CVE-2022-39429 [MEDIUM] CVE-2022-39429: Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affec
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via Oracle Net to compromise Java VM. Successful attacks of this vulnerability can result in unauthorized ability to caus
nvd
CVE-2022-39419MEDIUMCVSS 4.3v19cv21c2022-10-18
CVE-2022-39419 [MEDIUM] CVE-2022-39419: Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affect
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via Oracle Net to compromise Java VM. Successful attacks of this vulnerability can result in unauthorized read access to
nvd
CVE-2021-35619HIGHCVSS 7.1v12.1.0.2v12.2.0.1+2 more2021-10-20
CVE-2021-35619 [HIGH] CVE-2021-35619: Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affect
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 19c and 21c. Difficult to exploit vulnerability allows low privileged attacker having Create Procedure privilege with network access via Oracle Net to compromise Java VM. Successful attacks require human interaction from a person othe
nvd
CVE-2021-2438MEDIUMCVSS 4.3v12.1.0.2v12.2.0.1+1 more2021-07-21
CVE-2021-2438 [MEDIUM] CVE-2021-2438: Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affect
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via Oracle Net to compromise Java VM. Successful attacks of this vulnerability can result in unauthorized ab
nvd
CVE-2020-14743LOWCVSS 3.1v11.2.0.4v12.1.0.2+3 more2020-10-21
CVE-2020-14743 [LOW] CVE-2020-14743: Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affect
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Procedure privilege with network access via multiple protocols to compromise Java VM. Successful attacks of this vulnerability can r
nvd