OP
Product
Openjdk
On CISA KEVExploited in the wildRansomware-linked
98
CVEs
1
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 14Medium 46Low 28
Watch
Add Openjdk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-0431 RansomwareIn wildKEV | 3.7 | Jan 31 | Oracle JRE Sandbox Bypass Vulnerability Affected: 7 |
| CVE-2021-3517 | 8.6 | May 19 | There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11 Affected: 8 |
| CVE-2020-14583 | 8.3 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 7; 7; 7; 7; 7; 7; +34 more |
| CVE-2020-2805 | 8.3 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 11 through 11.0.6; 13 through 13.0.2; 7; 7; 7; 7; +34 more |
| CVE-2020-2803 | 8.3 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 11 through 11.0.6; 13 through 13.0.2; 7; 7; 7; 7; +34 more |
| CVE-2020-2604 | 8.1 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: 11 through 11.0.5; 13 through 13.0.1; 7; 7; 7; 7; +17 more |
| CVE-2021-20264 | 7.8 | Oct 6 | An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers Affected: 1.8.0; 11 |
| CVE-2022-34169 | 7.5 | Jul 19 | The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets Affected: 11 through 11.0.15; 13 through 13.0.11; 15 through 15.0.7; 17 through 17.0.3; 7; 7; +34 more |
| CVE-2022-21476 | 7.5 | Apr 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 11 through 11.0.14; 13 through 13.0.10; 15 through 15.0.6; 17 through 17.0.2; 7; 7; +34 more |
| CVE-2021-35560 | 7.5 | Oct 20 | Vulnerability in the Java SE product of Oracle Java SE (component: Deployment) Affected: 8 |
| CVE-2021-2388 | 7.5 | Jul 21 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 8; 8; 8; 8; 8; 8; +34 more |
| CVE-2020-2816 | 7.5 | Apr 15 | Vulnerability in the Java SE product of Oracle Java SE (component: JSSE) Affected: 11 through 11.0.6; 13 through 13.0.2; 7; 7; 7; 7; +34 more |
| CVE-2024-20952 | 7.4 | Jan 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: 11 before 11.0.24; 17 before 17.0.10; 21 before 21.0.2; 8; 8; 8; +34 more |
| CVE-2023-21930 | 7.4 | Apr 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: before 8; 11 through 11.0.18; 17 through 17.0.6; 8; 8; 8; +34 more |
| CVE-2020-14593 | 7.4 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D) Affected: 7; 7; 7; 7; 7; 7; +34 more |
| CVE-2021-35567 | 6.8 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 8; 8; 8; 8; 8; 8; +34 more |
| CVE-2020-2601 | 6.8 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security) Affected: 7; 7; 7; 7; 8; 8; +23 more |
| CVE-2023-21967 | 5.9 | Apr 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: before 8; 11 through 11.0.18; 17 through 17.0.6; 8; 8; 8; +34 more |
| CVE-2023-21954 | 5.9 | Apr 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: before 8; 11 through 11.0.18; 17 through 17.0.6; 8; 8; 8; +34 more |
| CVE-2022-21541 | 5.9 | Jul 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 11 through 11.0.15; 13 through 13.0.11; 15 through 15.0.7; 17 through 17.0.3; 7; 7; +34 more |
| CVE-2021-35550 | 5.9 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: 7; 8; 11.0.12 |
| CVE-2021-3537 | 5.9 | May 14 | A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference Affected: 8 |
| CVE-2021-2161 | 5.9 | Apr 22 | Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 11 through 11.0.10; 13 through 13.0.6; 15 through 15.0.2; 7; 7; 7; +34 more |
| CVE-2021-32553 | 5.5 | Jun 12 | It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs Affected: 17 |
| CVE-2021-3522 | 5.5 | Jun 2 | GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags Affected: 8 |
| CVE-2023-21939 | 5.3 | Apr 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing) Affected: before 8; 11 through 11.0.18; 17 through 17.0.6; 8; 8; 8; +34 more |
| CVE-2022-21540 | 5.3 | Jul 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 11 through 11.0.15; 13 through 13.0.11; 15 through 15.0.7; 17 through 17.0.3; 7; 7; +34 more |
| CVE-2022-21366 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: 11 through 11.0.13; 13 through 13.0.9; 15 through 15.0.5; 17; 17.0.1 |
| CVE-2022-21365 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: 11 through 11.0.13; 13 through 13.0.9; 15 through 15.0.5; 7; 7; 7; +34 more |
| CVE-2022-21360 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: 11 through 11.0.13; 13 through 13.0.9; 15 through 15.0.5; 7; 7; 7; +34 more |
| CVE-2022-21349 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D) Affected: 7; 7; 7; 7; 7; 7; +34 more |
| CVE-2022-21341 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization) Affected: 11 through 11.0.13; 13 through 13.0.9; 15 through 15.0.5; 7; 7; 7; +34 more |
| CVE-2022-21340 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 11 through 11.0.13; 13 through 13.0.9; 15 through 15.0.5; 7; 7; 7; +34 more |
| CVE-2022-21305 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 11 through 11.0.13; 13 through 13.0.9; 15 through 15.0.5; 7; 7; 7; +34 more |
| CVE-2022-21299 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: 11 through 11.0.13; 13 through 13.0.9; 15 through 15.0.5; 7; 7; 7; +34 more |
| CVE-2022-21296 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: 11 through 11.0.13; 13 through 13.0.9; 15 through 15.0.5; 7; 7; 7; +34 more |
| CVE-2022-21294 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 11 through 11.0.13; 13 through 13.0.9; 15 through 15.0.5; 7; 7; 7; +34 more |
| CVE-2022-21293 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 11 through 11.0.13; 13 through 13.0.9; 15 through 15.0.5; 7; 7; 7; +34 more |
| CVE-2022-21291 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 11 through 11.0.13; 13 through 13.0.9; 15 through 15.0.5; 17; 17.0.1 |
| CVE-2022-21283 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 11 through 11.0.13; 13 through 13.0.9; 15 through 15.0.5; 7; 7; 7; +34 more |
| CVE-2022-21282 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: 11 through 11.0.13; 13 through 13.0.9; 15 through 15.0.5; 7; 7; 7; +34 more |
| CVE-2022-21277 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: 11 through 11.0.13; 13 through 13.0.9; 15 through 15.0.5; 17; 17.0.1 |
| CVE-2021-35586 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: 7; 8; 11.0.12; 17 |
| CVE-2021-35578 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: 8; 11.0.12; 17 |
| CVE-2021-35565 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: 7; 8; 11.0.12 |
| CVE-2021-35564 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool) Affected: 7; 8; 11.0.12; 17 |
| CVE-2021-35561 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility) Affected: 7; 8; 11.0.12; 17 |
| CVE-2021-35559 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing) Affected: 7; 8; 11.0.12; 17 |
| CVE-2021-35556 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing) Affected: 7; 8; 11.0.12; 17 |
| CVE-2021-2163 | 5.3 | Apr 22 | Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 11 through 11.0.10; 13 through 13.0.6; 15 through 15.0.2; 7; 7; 7; +34 more |
