OP
Product
Openjdk
On CISA KEVExploited in the wildRansomware-linked
98
CVEs
1
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 14Medium 46Low 28
Watch
Add Openjdk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-14803 | 5.3 | Oct 21 | Vulnerability in the Java SE product of Oracle Java SE (component: Libraries) Affected: 7; 7; 7; 7; 7; 7; +34 more |
| CVE-2020-14621 | 5.3 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP) Affected: 7; 7; 7; 7; 7; 7; +34 more |
| CVE-2020-2830 | 5.3 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency) Affected: 11 through 11.0.6; 13 through 13.0.2; 7; 7; 7; 7; +34 more |
| CVE-2020-2781 | 5.3 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE) Affected: 11 through 11.0.6; 13 through 13.0.2; 7; 7; 7; 7; +34 more |
| CVE-2019-13117 | 5.3 | Jul 1 | In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers Affected: 8 |
| CVE-2020-14556 | 4.8 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 8; 8; 8; 8; 8; 8; +34 more |
| CVE-2020-2800 | 4.8 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server) Affected: 11 through 11.0.6; 13 through 13.0.2; 7; 7; 7; 7; +34 more |
| CVE-2020-2767 | 4.8 | Apr 15 | Vulnerability in the Java SE product of Oracle Java SE (component: JSSE) Affected: 11 through 11.0.6; 13 through 13.0.2; 7; 7; 7; 7; +34 more |
| CVE-2020-2593 | 4.8 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking) Affected: 7; 7; 7; 7; 8; 8; +23 more |
| CVE-2021-2369 | 4.3 | Jul 21 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Library) Affected: 7; 7; 7; 7; 7; 7; +34 more |
| CVE-2020-14792 | 4.2 | Oct 21 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot) Affected: 7; 7; 7; 7; 7; 7; +34 more |
| CVE-2023-21968 | 3.7 | Apr 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 11 through 11.0.18; 17 through 17.0.6; 8; 8; 8; 8; +34 more |
| CVE-2023-21938 | 3.7 | Apr 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: before 8; 11 through 11.0.18; 17 through 17.0.6; 8; 8; 8; +34 more |
| CVE-2023-21937 | 3.7 | Apr 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking) Affected: before 8; 11 through 11.0.18; 17 through 17.0.6; 8; 8; 8; +34 more |
| CVE-2022-21248 | 3.7 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization) Affected: 11 through 11.0.13; 13 through 13.0.9; 15 through 15.0.5; 7; 7; 7; +34 more |
| CVE-2021-35603 | 3.7 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: 7; 8; 11.0.12; 17 |
| CVE-2020-14797 | 3.7 | Oct 21 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 7; 7; 7; 7; 7; 7; +34 more |
| CVE-2020-14782 | 3.7 | Oct 21 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 7; 7; 7; 7; 7; 7; +34 more |
| CVE-2020-14781 | 3.7 | Oct 21 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI) Affected: 7; 7; 7; 7; 7; 7; +34 more |
| CVE-2020-14779 | 3.7 | Oct 21 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: 7; 7; 7; 7; 7; 7; +34 more |
| CVE-2020-14581 | 3.7 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D) Affected: 7; 7; 7; 7; 7; 7; +34 more |
| CVE-2020-14579 | 3.7 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 7; 7; 7; 7; 7; 7; +34 more |
| CVE-2020-14578 | 3.7 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 7; 7; 7; 7; 7; 7; +34 more |
| CVE-2020-14577 | 3.7 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE) Affected: 7; 7; 7; 7; 7; 7; +34 more |
| CVE-2020-2778 | 3.7 | Apr 15 | Vulnerability in the Java SE product of Oracle Java SE (component: JSSE) Affected: 11 through 11.0.6; 13 through 13.0.2; 7; 7; 7; 7; +34 more |
| CVE-2020-2773 | 3.7 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security) Affected: 11 through 11.0.6; 13 through 13.0.2; 7; 7; 7; 7; +34 more |
| CVE-2020-2757 | 3.7 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: 11 through 11.0.6; 13 through 13.0.2; 7; 7; 7; 7; +34 more |
| CVE-2020-2756 | 3.7 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: 11 through 11.0.6; 13 through 13.0.2; 7; 7; 7; 7; +34 more |
| CVE-2020-2755 | 3.7 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting) Affected: 11 through 11.0.6; 13 through 13.0.2; 7; 7; 7; 7; +34 more |
| CVE-2020-2754 | 3.7 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting) Affected: 11 through 11.0.6; 13 through 13.0.2; 7; 7; 7; 7; +34 more |
| CVE-2020-2659 | 3.7 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking) Affected: 7; 7; 7; 7; 8; 8; +15 more |
| CVE-2020-2654 | 3.7 | Jan 15 | Vulnerability in the Java SE product of Oracle Java SE (component: Libraries) Affected: 7; 7; 7; 7; 8; 8; +23 more |
| CVE-2020-2590 | 3.7 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security) Affected: 7; 7; 7; 7; 8; 8; +23 more |
| CVE-2020-2583 | 3.7 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: 7; 7; 7; 7; 8; 8; +23 more |
| CVE-2021-35588 | 3.1 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 7; 8 |
| CVE-2021-2341 | 3.1 | Jul 21 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking) Affected: 7; 7; 7; 7; 7; 7; +34 more |
| CVE-2020-14798 | 3.1 | Oct 21 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 7; 7; 7; 7; 7; 7; +34 more |
| CVE-2020-14796 | 3.1 | Oct 21 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 7; 7; 7; 7; 7; 7; +34 more |
| CVE-2014-8873 | – | Nov 9 | A .desktop file in the Debian openjdk-7 package 7u79-2.5.5-1~deb8u1 includes a MIME type registration that is added to /etc/mailcap by mime-support, which allows remote attackers… Affected: 1.7.0 |
| CVE-2014-2483 | – | Jul 17 | Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u60 and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via… Affected: 1.7.0 |
| CVE-2014-2405 | – | May 14 | Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different vulnerability than… Affected: 1.6.0 |
| CVE-2014-0462 | – | May 14 | Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different vulnerability than… Affected: 1.6.0 |
| CVE-2014-1876 | – | Feb 10 | The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE… Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2013-2461 | – | Jun 18 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier; the Oracle JRockit component in… Affected: 1.7.0 |
| CVE-2013-0169 | – | Feb 8 | The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on… Affected: 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2012-5373 | – | Nov 28 | Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows… Affected: through 1.7.0 |
| CVE-2012-2739 | – | Nov 28 | Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39, computes hash values without restricting the ability to trigger hash collisions… Affected: through 1.7.0; 1.6.0; 1.8.0 |
| CVE-2009-0581 | – | Mar 23 | Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a denial of service… Affected: through 7 |
