cbcvebase.

Oracle Jdk vulnerabilities

805 known vulnerabilities affecting oracle/jdk.

Total CVEs
805
CISA KEV
8
actively exploited
Public exploits
26
Exploited in wild
18
Severity breakdown
CRITICAL196HIGH125MEDIUM353LOW129

Vulnerabilities

Page 41 of 41
CVE-2024-21002P4LOWCVSS 2.5v1.8.02024-04-16
CVE-2024-21002 [LOW] CWE-276 CVE-2024-21002: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (co Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java
nvd
CVE-2024-21004P4LOWCVSS 2.5v1.8.02024-04-16
CVE-2024-21004 [LOW] CWE-276 CVE-2024-21004: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (co Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java
nvd
CVE-2024-20922P4LOWCVSS 2.5v1.8.02024-01-16
CVE-2024-20922 [LOW] CVE-2024-20922: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (co Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Ora
nvd
CVE-2013-2415P4LOWCVSS 2.1≤ 1.7.0v1.7.02013-04-17
CVE-2013-2415 [LOW] CVE-2013-2415: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows local users to affect confidentiality via vectors related to JAX-WS. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "proce
nvd
CVE-2015-0413P4LOWCVSS 1.9v1.7.0v1.8.02015-01-21
CVE-2015-0413 [LOW] CVE-2015-0413: Unspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity via Unspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity via unknown vectors related to Serviceability.
nvd
Oracle Jdk vulnerabilities | cvebase