JS
Product
Java SE
by Oracle · last CVE Apr 27, 2022
On CISA KEVExploited in the wildRansomware-linked
12
CVEs
7
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 1Medium 4Low 1
Watch

Add Java SE to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-21349
8.6
47%
Mar 22
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
Affected: 7u321; 8u311
Showing 1