JS
Product
Java SE
by Oracle · last CVE Apr 27, 2022
On CISA KEVExploited in the wildRansomware-linked
12
CVEs
7
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 1Medium 4Low 1
Watch

Add Java SE to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2015-2590
In wildKEV
9.8
25%
Jul 16
Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2013-2465
RansomwareIn wildKEV
9.8
99%
Jun 18
Oracle Java SE Unspecified Vulnerability
Affected: All versions, or not specified
CVE-2012-5076
In wildKEV
9.8
91%
Oct 16
Oracle Java SE Sandbox Bypass Vulnerability
Affected: All versions, or not specified
CVE-2012-4681
RansomwareIn wildKEV
9.8
99%
Aug 28
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2012-1723
RansomwareIn wildKEV
9.8
94%
Jun 16
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2012-0507
RansomwareIn wildKEV
9.8
98%
Jun 7
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2015-4902
In wildKEV
5.3
14%
Oct 21
Oracle Java SE Integrity Check Vulnerability
Affected: All versions, or not specified
CVE-2021-21349
8.6
47%
Mar 22
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
Affected: 7u321; 8u311
CVE-2021-41041
5.3
1%
Apr 27
In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation,…
Affected: 8; 11
CVE-2022-21496
5.3
3%
Apr 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI)
Affected: 7u331; 8u321; 11.0.14; 17.0.2; 18
CVE-2019-7317
5.3
9%
Feb 4
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute
Affected: 7u221; 8u212
CVE-2022-21443
3.7
3%
Apr 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)
Affected: 7u331; 8u321; 11.0.14; 17.0.2; 18
Showing 12