Oracle Jdk vulnerabilities
778 known vulnerabilities affecting oracle/jdk.
Total CVEs
778
CISA KEV
8
actively exploited
Public exploits
25
Exploited in wild
10
Severity breakdown
CRITICAL196HIGH119MEDIUM343LOW118
Vulnerabilities
Page 28 of 39
CVE-2013-5884MEDIUMCVSS 5.0v1.5.0v1.6.02014-01-15
CVE-2013-5884 [MEDIUM] CVE-2013-5884: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJ
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an incorrect check for code permissions
nvd
CVE-2013-5899MEDIUMCVSS 5.0v1.6.02014-01-15
CVE-2013-5899 [MEDIUM] CVE-2013-5899: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confiden
Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality via unknown vectors related to Deployment.
nvd
CVE-2013-5906MEDIUMCVSS 5.1v1.6.0v1.5.02014-01-15
CVE-2013-5906 [MEDIUM] CVE-2013-5906: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45 allows remote attackers to affect
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install, a different vulnerability than CVE-2013-5905.
nvd
CVE-2014-0418MEDIUMCVSS 5.1v1.6.02014-01-15
CVE-2014-0418 [MEDIUM] CVE-2014-0418: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confiden
Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0410, CVE-2014-0415, and CVE-2014-0424.
nvd
CVE-2014-0375MEDIUMCVSS 5.8v1.6.0v1.7.02014-01-15
CVE-2014-0375 [MEDIUM] CVE-2014-0375: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confiden
Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5898 and CVE-2014-0403.
nvd
CVE-2014-0423MEDIUMCVSS 5.5v1.6.0v1.5.02014-01-15
CVE-2014-0423 [MEDIUM] CVE-2014-0423: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Jav
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote authenticated users to affect confidentiality and availability via unknown vectors related to Beans. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that
nvd
CVE-2013-5829CRITICALCVSS 10.0v1.5.0v1.6.0+1 more2013-10-16
CVE-2013-5829 [CRITICAL] CVE-2013-5829: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-5809.
nvd
CVE-2013-5814CRITICALCVSS 10.0≤ 1.6.0v1.6.0+4 more2013-10-16
CVE-2013-5814 [CRITICAL] CVE-2013-5814: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA.
nvd
CVE-2013-5806CRITICALCVSS 9.3≤ 1.7.0v1.7.02013-10-16
CVE-2013-5806 [CRITICAL] CVE-2013-5806: Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier a
Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing, a different vulnerability than CVE-2013-5805.
nvd
CVE-2013-5782CRITICALCVSS 10.0≤ 1.5.0v1.5.0+4 more2013-10-16
CVE-2013-5782 [CRITICAL] CVE-2013-5782: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
nvd
CVE-2013-5850CRITICALCVSS 9.3≤ 1.6.0v1.6.0+4 more2013-10-16
CVE-2013-5850 [CRITICAL] CVE-2013-5850: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-5842.
nvd
CVE-2013-5843CRITICALCVSS 10.0v1.5.0v1.6.0+1 more2013-10-16
CVE-2013-5843 [CRITICAL] CVE-2013-5843: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JavaFX 2.2.40 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
nvd
CVE-2013-5844CRITICALCVSS 9.3≤ 1.7.0v1.7.02013-10-16
CVE-2013-5844 [CRITICAL] CVE-2013-5844: Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows re
Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.
nvd
CVE-2013-5838CRITICALCVSS 9.3≤ 1.7.0v1.7.02013-10-16
CVE-2013-5838 [CRITICAL] CVE-2013-5838: Unspecified vulnerability in Oracle Java SE 7u25 and earlier, and Java SE Embedded 7u25 and earlier,
Unspecified vulnerability in Oracle Java SE 7u25 and earlier, and Java SE Embedded 7u25 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
nvd
CVE-2013-5809CRITICALCVSS 10.0≤ 1.6.0v1.6.0+4 more2013-10-16
CVE-2013-5809 [CRITICAL] CVE-2013-5809: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-5829.
nvd
CVE-2013-5830CRITICALCVSS 10.0v1.5.0v1.6.0+1 more2013-10-16
CVE-2013-5830 [CRITICAL] CVE-2013-5830: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
nvd
CVE-2013-5842CRITICALCVSS 10.0v1.5.0v1.6.0+1 more2013-10-16
CVE-2013-5842 [CRITICAL] CVE-2013-5842: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-5850.
nvd
CVE-2013-5787CRITICALCVSS 10.0≤ 1.6.0v1.6.0+2 more2013-10-16
CVE-2013-5787 [CRITICAL] CVE-2013-5787: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5789, CVE-2013-5824, CVE-2013-5832, and CVE-2013-5852.
nvd
CVE-2013-5846CRITICALCVSS 9.3≤ 1.7.0v1.7.02013-10-16
CVE-2013-5846 [CRITICAL] CVE-2013-5846: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, and JavaFX 2.2.40 and earlier, allows
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, and JavaFX 2.2.40 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.
nvd
CVE-2013-5817CRITICALCVSS 10.0≤ 1.5.0v1.5.0+4 more2013-10-16
CVE-2013-5817 [CRITICAL] CVE-2013-5817: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI.
nvd