Oracle Jdk vulnerabilities

778 known vulnerabilities affecting oracle/jdk.

Total CVEs
778
CISA KEV
8
actively exploited
Public exploits
25
Exploited in wild
10
Severity breakdown
CRITICAL196HIGH119MEDIUM343LOW118

Vulnerabilities

Page 22 of 39
CVE-2014-6601CRITICALCVSS 10.0v1.6.0v1.7.0+1 more2015-01-21
CVE-2014-6601 [CRITICAL] CVE-2014-6601: Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect c Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
nvd
CVE-2015-0408CRITICALCVSS 10.0v1.5.0v1.6.0+2 more2015-01-21
CVE-2015-0408 [CRITICAL] CVE-2015-0408: Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.
nvd
CVE-2015-0395CRITICALCVSS 9.3v1.5.0v1.6.0+2 more2015-01-21
CVE-2015-0395 [CRITICAL] CVE-2015-0395: Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
nvd
CVE-2014-6549CRITICALCVSS 10.0v1.8.02015-01-21
CVE-2014-6549 [CRITICAL] CVE-2014-6549: Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
nvd
CVE-2015-0437CRITICALCVSS 9.3v1.8.02015-01-21
CVE-2015-0437 [CRITICAL] CVE-2015-0437: Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
nvd
CVE-2015-0412HIGHCVSS 7.2v1.6.0v1.7.0+1 more2015-01-21
CVE-2015-0412 [HIGH] CVE-2015-0412: Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect c Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS.
nvd
CVE-2015-0407MEDIUMCVSS 5.0v1.5.0v1.6.0+2 more2015-01-21
CVE-2015-0407 [MEDIUM] CVE-2015-0407: Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Swing.
nvd
CVE-2014-6587MEDIUMCVSS 4.3v1.6.0v1.7.0+1 more2015-01-21
CVE-2014-6587 [MEDIUM] CVE-2014-6587: Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confid Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
nvd
CVE-2015-0400MEDIUMCVSS 5.0v1.6.0v1.7.0+1 more2015-01-21
CVE-2015-0400 [MEDIUM] CVE-2015-0400: Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect c Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Libraries.
nvd
CVE-2015-0406MEDIUMCVSS 5.8v1.6.0v1.7.0+1 more2015-01-21
CVE-2015-0406 [MEDIUM] CVE-2015-0406: Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect c Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality and availability via unknown vectors related to Deployment.
nvd
CVE-2015-0421MEDIUMCVSS 6.9v1.8.02015-01-21
CVE-2015-0421 [MEDIUM] CVE-2015-0421: Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integ Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process.
nvd
CVE-2014-6593MEDIUMCVSS 4.0PoCv1.5.0v1.6.0+2 more2015-01-21
CVE-2014-6593 [MEDIUM] CVE-2014-6593: Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.
nvd
CVE-2015-0410MEDIUMCVSS 5.0v1.5.0v1.6.0+2 more2015-01-21
CVE-2015-0410 [MEDIUM] CVE-2015-0410: Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows remote attackers to affect availability via unknown vectors related to Security.
nvd
CVE-2015-0383MEDIUMCVSS 5.4v1.5.0v1.6.0+2 more2015-01-21
CVE-2015-0383 [MEDIUM] CVE-2015-0383: Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows local users to affect integrity and availability via unknown vectors related to Hotspot.
nvd
CVE-2015-0403MEDIUMCVSS 6.9v1.6.0v1.7.0+1 more2015-01-21
CVE-2015-0403 [MEDIUM] CVE-2015-0403: Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confid Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
nvd
CVE-2014-6591LOWCVSS 2.6v1.5.0v1.6.0+2 more2015-01-21
CVE-2014-6591 [LOW] CVE-2014-6591: Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 al Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6585.
nvd
CVE-2015-0413LOWCVSS 1.9v1.7.0v1.8.02015-01-21
CVE-2015-0413 [LOW] CVE-2015-0413: Unspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity via Unspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity via unknown vectors related to Serviceability.
nvd
CVE-2014-6585LOWCVSS 2.6v1.5.0v1.6.0+2 more2015-01-21
CVE-2014-6585 [LOW] CVE-2014-6585: Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6591.
nvd
CVE-2014-6513CRITICALCVSS 10.0v1.6.0v1.7.02014-10-15
CVE-2014-6513 [CRITICAL] CVE-2014-6513: Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
nvd
CVE-2014-6532CRITICALCVSS 9.3v1.6.0v1.8.02014-10-15
CVE-2014-6532 [CRITICAL] CVE-2014-6532: Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect c Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503.
nvd