Sun Jdk vulnerabilities

392 known vulnerabilities affecting sun/jdk.

Total CVEs
392
CISA KEV
0
Public exploits
27
Exploited in wild
1
Severity breakdown
CRITICAL151HIGH70MEDIUM149LOW20

Vulnerabilities

Page 12 of 20
CVE-2010-3559CRITICALCVSS 10.0≤ 1.6.0v1.6.0+38 more2010-10-19
CVE-2010-3559 [CRITICAL] CVE-2010-3559: Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21 Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliab
nvd
CVE-2010-3569CRITICALCVSS 10.0≤ 1.6.0v1.6.0+2 more2010-10-19
CVE-2010-3569 [CRITICAL] CVE-2010-3569: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for B Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from
nvd
CVE-2010-3567CRITICALCVSS 10.0≤ 1.6.0v1.6.0+2 more2010-10-19
CVE-2010-3567 [CRITICAL] CVE-2010-3567: Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, a Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor th
nvd
CVE-2010-3553CRITICALCVSS 10.0≤ 1.6.0v1.6.0+38 more2010-10-19
CVE-2010-3553 [CRITICAL] CVE-2010-3553: Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21 Unspecified vulnerability in the Swing component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliab
nvd
CVE-2010-3568CRITICALCVSS 10.0≤ 1.6.0v1.6.0+2 more2010-10-19
CVE-2010-3568 [CRITICAL] CVE-2010-3568: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for B Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from
nvd
CVE-2010-3555CRITICALCVSS 9.3≤ 1.6.0v1.6.02010-10-19
CVE-2010-3555 [CRITICAL] CVE-2010-3555: Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Upda Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party coordinator that th
nvd
CVE-2010-3556CRITICALCVSS 10.0≤ 1.6.0v1.6.0+38 more2010-10-19
CVE-2010-3556 [CRITICAL] CVE-2010-3556: Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5 Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
nvd
CVE-2010-3566CRITICALCVSS 10.0≤ 1.6.0v1.6.0+2 more2010-10-19
CVE-2010-3566 [CRITICAL] CVE-2010-3566: Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5 Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update and 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable researcher that this
nvd
CVE-2010-3571CRITICALCVSS 10.0≤ 1.6.0v1.6.0+38 more2010-10-19
CVE-2010-3571 [CRITICAL] CVE-2010-3571: Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5 Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable
nvd
CVE-2010-3554CRITICALCVSS 10.0≤ 1.6.0v1.6.0+38 more2010-10-19
CVE-2010-3554 [CRITICAL] CVE-2010-3554: Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliab
nvd
CVE-2010-3572CRITICALCVSS 10.0≤ 1.6.0v1.6.0+38 more2010-10-19
CVE-2010-3572 [CRITICAL] CVE-2010-3572: Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21 Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
nvd
CVE-2010-3552CRITICALCVSS 10.0PoC≤ 1.6.0v1.6.02010-10-19
CVE-2010-3552 [CRITICAL] CVE-2010-3552: Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
nvd
CVE-2010-3562CRITICALCVSS 10.0≤ 1.6.0v1.6.0+38 more2010-10-19
CVE-2010-3562 [CRITICAL] CVE-2010-3562: Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5 Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable
nvd
CVE-2010-3574CRITICALCVSS 10.0≤ 1.6.0v1.6.0+38 more2010-10-19
CVE-2010-3574 [CRITICAL] CVE-2010-3574: Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Upda Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a r
nvd
CVE-2010-3561HIGHCVSS 7.5≤ 1.6.0v1.6.0+2 more2010-10-19
CVE-2010-3561 [HIGH] CVE-2010-3561: Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 Unspecified vulnerability in the CORBA component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that
nvd
CVE-2010-3570HIGHCVSS 7.6≤ 1.6.0v1.6.02010-10-19
CVE-2010-3570 [HIGH] CVE-2010-3570: Unspecified vulnerability in the Deployment Toolkit component in Oracle Java SE and Java for Busines Unspecified vulnerability in the Deployment Toolkit component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
nvd
CVE-2010-3541MEDIUMCVSS 5.1≤ 1.6.0v1.6.0+38 more2010-10-19
CVE-2010-3541 [MEDIUM] CVE-2010-3541: Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Upda Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a rel
nvd
CVE-2010-3573MEDIUMCVSS 5.1PoC≤ 1.6.0v1.6.0+2 more2010-10-19
CVE-2010-3573 [MEDIUM] CVE-2010-3573: Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Upda Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vend
nvd
CVE-2010-3551MEDIUMCVSS 5.0≤ 1.6.0v1.6.0+2 more2010-10-19
CVE-2010-3551 [MEDIUM] CVE-2010-3551: Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Upda Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality via unknown vectors.
nvd
CVE-2010-3549MEDIUMCVSS 6.8≤ 1.6.0v1.6.0+38 more2010-10-19
CVE-2010-3549 [MEDIUM] CVE-2010-3549: Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Upda Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a rel
nvd