Java vulnerabilities | LiveThreat CVE Feed

Product

Java

by Ibm · last CVE Apr 29, 2023

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities27 In the news0 Timeline

Severity mix

Critical 1High 3Medium 0Low 0

Severity

All severities27 Critical1 High3 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Java to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2015-0192	9.8	4%	Jul 2	Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to… Affected: 5.0.0.0 before 5.0.16.10; 6.0.0.0 through 6.0.16.4; 6.1.0.0 before 6.1.8.4; 7.0.0.0 through 7.0.9; 7.1.0.0 before 7.1.2.11; 8.0 before 8.0.1.0
CVE-2019-4473	7.8	0%	Aug 5	Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by… Affected: 7.0.0.0; 7.1.4.50; 8.0
CVE-2023-30441	7.5	1%	Apr 29	IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and… Affected: 8.0.7.0 before 8.0.7.15
CVE-2015-1916	7.5	3%	Jul 2	Unspecified vulnerability in IBM Java 8 before SR1 allows remote attackers to cause a denial of service via unknown vectors related to SSL/TLS and the Secure Socket Extension… Affected: 8.0
CVE-2015-1914	–	4%	Jul 2	IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to bypass "permission checks" and obtain sensitive… Affected: 5.0.0.0 before 5.0.16.10; 6.0.0.0 before 6.0.16.4; 6.1.0.0 before 6.1.8.4; 7.0.0.0 before 7.0.9.0; 7.1.0.0 before 7.1.3.0
CVE-2014-3068	–	1%	Dec 2	IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1 (7.0.7.1), 6 R1 before SR8 FP1 (6.1.8.1), 6 before SR16 FP1 (6.0.16.1), and before 5.0 SR16 FP7… Affected: 5.0.0.0; 5.0.11.0; 5.0.11.1; 5.0.11.2; 5.0.12.0; 5.0.12.1; +34 more
CVE-2014-3065	–	1%	Dec 2	Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7 before SR8 (7.0.8.0), 6 R1 before SR8 FP2 (6.1.8.2), 6 before SR16 FP2 (6.0.16.2), and… Affected: 5.0.0.0; 5.0.11.0; 5.0.11.1; 5.0.11.2; 5.0.12.0; 5.0.12.1; +34 more
CVE-2013-0485	–	2%	Jan 21	Unspecified vulnerability in IBM Java SDK 7 before SR4-FP1, 6 before SR13-FP1, 5.0 before SR16-FP1, and 1.4.2 before SR13-FP16 has unknown impact and attack vectors related to… Affected: 1.4.2; 5.0.0.0; 6.0.0.0; 7.0.0.0
CVE-2013-5458	–	5%	Nov 24	Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6 allows remote attackers to execute arbitrary code via unspecified vectors Affected: 7.0.0.0
CVE-2013-5457	–	6%	Nov 24	Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to execute arbitrary code via unspecified vectors Affected: 6.0.0.0; 6.0.1.0; 7.0.0.0
CVE-2013-5456	–	6%	Nov 24	The com.ibm.rmi.io.SunSerializableFactory class in IBM Java SDK 7.0.0 before SR6 allows remote attackers to bypass a sandbox protection mechanism and execute arbitrary code via… Affected: 7.0.0.0
CVE-2013-5375	–	3%	Nov 24	Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, 6.0.0 before SR15, and 5.0.0 before SR16 FP4 allows remote attackers to access restricted classes via… Affected: 5.0.0.0; 6.0.0.0; 6.0.1.0; 7.0.0.0
CVE-2013-4041	–	3%	Nov 24	Unspecified vulnerability in IBM Java SDK 5.0.0 before SR16 FP4, 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to access restricted classes via… Affected: 5.0.0.0; 6.0.0.0; 6.0.1.0; 7.0.0.0
CVE-2013-4002	–	25%	Jul 23	XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1… Affected: 5.0.0.0; 5.0.11.0; 5.0.11.1; 5.0.11.2; 5.0.12.0; 5.0.12.1; +34 more
CVE-2013-3012	–	4%	Jul 23	Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7… Affected: 5.0.0.0; 5.0.11.0; 5.0.11.1; 5.0.11.2; 5.0.12.0; 5.0.12.1; +34 more
CVE-2013-3011	–	4%	Jul 23	Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7… Affected: 5.0.0.0; 5.0.11.0; 5.0.11.1; 5.0.11.2; 5.0.12.0; 5.0.12.1; +34 more
CVE-2013-3010	–	4%	Jul 23	Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1 SR6 and 7 before 7 SR5 allows remote attackers to affect confidentiality,… Affected: 6.0.1.0; 7.0.0.0; 7.0.1.0; 7.0.2.0; 7.0.3.0; 7.0.4.0; +2 more
CVE-2013-3009	–	4%	Jul 23	The com.ibm.CORBA.iiop.ClientDelegate class in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5… Affected: 1.4.2; 1.4.2.13; 1.4.2.13.1; 1.4.2.13.2; 1.4.2.13.3; 1.4.2.13.4; +34 more
CVE-2013-3008	–	4%	Jul 23	Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via… Affected: 7.0.0.0; 7.0.1.0; 7.0.2.0; 7.0.3.0; 7.0.4.0; 7.0.4.1; +1 more
CVE-2013-3007	–	4%	Jul 23	Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1 SR6 and 7 before 7 SR5 allows remote attackers to affect confidentiality,… Affected: 6.0.1.0; 7.0.0.0; 7.0.1.0; 7.0.2.0; 7.0.3.0; 7.0.4.0; +2 more
CVE-2013-3006	–	4%	Jul 23	Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via… Affected: 7.0.0.0; 7.0.1.0; 7.0.2.0; 7.0.3.0; 7.0.4.0; 7.0.4.1; +1 more
CVE-2012-4823	–	7%	Jan 11	Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13… Affected: 1.4.2 through 1.4.2.13.13; 5.0.0.0 through 5.0.14.0; 6.0.0.0 through 6.0.11.0; 7.0.0.0 through 7.0.2.0
CVE-2012-4822	–	7%	Jan 11	Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142… Affected: 1.4.2 through 1.4.2.13.13; 5.0.0.0 through 5.0.14.0; 6.0.0.0 through 6.0.11.0; 7.0.0.0 through 7.0.2.0
CVE-2012-4821	–	7%	Jan 11	Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142… Affected: 1.4.2 through 1.4.2.13.13; 5.0.0.0 through 5.0.14.0; 6.0.0.0 through 6.0.11.0; 7.0.0.0 through 7.0.2.0
CVE-2012-4820	–	5%	Jan 11	Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13… Affected: 1.4.2 through 1.4.2.13.13; 5.0.0.0 through 5.0.14.0; 6.0.0.0 through 6.0.11.0; 7.0.0.0 through 7.0.2.0
CVE-2011-3387	–	2%	Sep 2	The class file parser in IBM Java 1.4.2 SR13 FP9 allows remote authenticated users to cause a denial of service (memory consumption or an infinite loop) via a crafted attribute… Affected: 1.4.2.13.9
CVE-2011-0311	–	2%	Sep 2	The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java Technology 5.0.0 before SR13 and 6.0.0 before SR10, allows remote authenticated users to… Affected: through 1.4.2.13.8; 1.4.2; 1.4.2.13; 1.4.2.13.1; 1.4.2.13.2; 1.4.2.13.3; +4 more