Oracle Jre vulnerabilities

790 known vulnerabilities affecting oracle/jre.

Total CVEs
790
CISA KEV
14
actively exploited
Public exploits
32
Exploited in wild
16
Severity breakdown
CRITICAL205HIGH119MEDIUM346LOW118

Vulnerabilities

Page 28 of 40
CVE-2014-0423MEDIUMCVSS 5.5v1.7.0v1.6.0+1 more2014-01-15
CVE-2014-0423 [MEDIUM] CVE-2014-0423: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Jav Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote authenticated users to affect confidentiality and availability via unknown vectors related to Beans. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that
nvd
CVE-2013-5870MEDIUMCVSS 6.8v1.7.02014-01-15
CVE-2013-5870 [MEDIUM] CVE-2013-5870: Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.
nvd
CVE-2013-5904MEDIUMCVSS 6.8v1.7.02014-01-15
CVE-2013-5904 [MEDIUM] CVE-2013-5904: Unspecified vulnerability in Oracle Java SE 7u45 allows remote attackers to affect confidentiality, Unspecified vulnerability in Oracle Java SE 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
nvd
CVE-2013-5829CRITICALCVSS 10.0v1.5.0v1.6.0+1 more2013-10-16
CVE-2013-5829 [CRITICAL] CVE-2013-5829: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-5809.
nvd
CVE-2013-5814CRITICALCVSS 10.0≤ 1.6.0v1.6.0+4 more2013-10-16
CVE-2013-5814 [CRITICAL] CVE-2013-5814: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA.
nvd
CVE-2013-5806CRITICALCVSS 9.3≤ 1.7.0v1.7.02013-10-16
CVE-2013-5806 [CRITICAL] CVE-2013-5806: Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier a Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing, a different vulnerability than CVE-2013-5805.
nvd
CVE-2013-5782CRITICALCVSS 10.0≤ 1.6.0v1.6.0+4 more2013-10-16
CVE-2013-5782 [CRITICAL] CVE-2013-5782: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
nvd
CVE-2013-5850CRITICALCVSS 9.3≤ 1.6.0v1.6.0+4 more2013-10-16
CVE-2013-5850 [CRITICAL] CVE-2013-5850: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-5842.
nvd
CVE-2013-5843CRITICALCVSS 10.0v1.5.0v1.6.0+1 more2013-10-16
CVE-2013-5843 [CRITICAL] CVE-2013-5843: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JavaFX 2.2.40 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
nvd
CVE-2013-5844CRITICALCVSS 9.3≤ 1.7.0v1.7.02013-10-16
CVE-2013-5844 [CRITICAL] CVE-2013-5844: Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows re Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.
nvd
CVE-2013-5838CRITICALCVSS 9.3≤ 1.7.0v1.7.02013-10-16
CVE-2013-5838 [CRITICAL] CVE-2013-5838: Unspecified vulnerability in Oracle Java SE 7u25 and earlier, and Java SE Embedded 7u25 and earlier, Unspecified vulnerability in Oracle Java SE 7u25 and earlier, and Java SE Embedded 7u25 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
nvd
CVE-2013-5809CRITICALCVSS 10.0≤ 1.5.0v1.5.0+4 more2013-10-16
CVE-2013-5809 [CRITICAL] CVE-2013-5809: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2013-5829.
nvd
CVE-2013-5830CRITICALCVSS 10.0v1.5.0v1.6.0+1 more2013-10-16
CVE-2013-5830 [CRITICAL] CVE-2013-5830: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
nvd
CVE-2013-5842CRITICALCVSS 10.0v1.5.0v1.6.0+1 more2013-10-16
CVE-2013-5842 [CRITICAL] CVE-2013-5842: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-5850.
nvd
CVE-2013-5787CRITICALCVSS 10.0≤ 1.6.0v1.6.0+2 more2013-10-16
CVE-2013-5787 [CRITICAL] CVE-2013-5787: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5789, CVE-2013-5824, CVE-2013-5832, and CVE-2013-5852.
nvd
CVE-2013-5846CRITICALCVSS 9.3≤ 1.7.0v1.7.02013-10-16
CVE-2013-5846 [CRITICAL] CVE-2013-5846: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, and JavaFX 2.2.40 and earlier, allows Unspecified vulnerability in Oracle Java SE 7u40 and earlier, and JavaFX 2.2.40 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.
nvd
CVE-2013-5817CRITICALCVSS 10.0≤ 1.6.0v1.6.0+4 more2013-10-16
CVE-2013-5817 [CRITICAL] CVE-2013-5817: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI.
nvd
CVE-2013-5832CRITICALCVSS 9.3≤ 1.6.0v1.6.0+2 more2013-10-16
CVE-2013-5832 [CRITICAL] CVE-2013-5832: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5787, CVE-2013-5789, CVE-2013-5824, and CVE-2013-5852.
nvd
CVE-2013-5824CRITICALCVSS 10.0≤ 1.7.0v1.7.0+2 more2013-10-16
CVE-2013-5824 [CRITICAL] CVE-2013-5824: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5787, CVE-2013-5789, CVE-2013-5832, and CVE-2013-5852.
nvd
CVE-2013-5789CRITICALCVSS 10.0≤ 1.7.0v1.7.0+2 more2013-10-16
CVE-2013-5789 [CRITICAL] CVE-2013-5789: Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5787, CVE-2013-5824, CVE-2013-5832, and CVE-2013-5852.
nvd
← Previous28 / 40Next →