Jdk

CVEs (805)

• CVE-2016-3508MedJul 21, 2016
  Sun Corporation

  Java SE
  risk 0.35cvss 5.3epss 0.05

  Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3500.

• CVE-2016-3500MedJul 21, 2016
  Sun Corporation

  Java SE
  risk 0.35cvss 5.3epss 0.05

  Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3508.

• CVE-2016-3498MedJul 21, 2016
  Sun Corporation

  Java SE
  risk 0.35cvss 5.3epss 0.05

  Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows remote attackers to affect availability via vectors related to JavaFX.

• CVE-2015-4000LowMay 21, 2015
  OpenSSL Project

  OpenSSL
  risk 0.35cvss 3.7epss 1.00

  The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by…

• CVE-2026-47027MedJul 21, 2026
  Oracle Corporation

  Jdk
  risk 0.34cvss 5.3epss 0.00

  Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily…

• CVE-2026-47021MedJul 21, 2026
  Oracle Corporation

  Jdk
  risk 0.34cvss 5.3epss 0.00

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for…

• CVE-2026-47013MedJul 21, 2026
  Oracle Corporation

  Javafx
  risk 0.34cvss 5.3epss 0.00

  Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks…

• CVE-2026-46917MedJul 21, 2026
  Oracle Corporation

  Jdk
  risk 0.34cvss 5.3epss 0.00

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and …

• CVE-2026-22021MedApr 21, 2026
  Oracle Corporation

  Jdk
  risk 0.34cvss 5.3epss 0.00

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle…

• CVE-2026-22013MedApr 21, 2026
  Oracle Corporation

  Jdk
  risk 0.34cvss 5.3epss 0.00

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle…

• CVE-2023-22041MedJul 18, 2023
  NetApp

  Oncommand Insight
  risk 0.33cvss 5.1epss 0.01

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u371-perf, 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition:…

• CVE-2019-10219MedNov 8, 2019
  Hibernate

  Hibernate Validator
  risk 0.33cvss 6.1epss 0.02

  A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

• CVE-2019-2745MedJul 23, 2019
  McAfee

  Epolicy Orchestrator
  risk 0.33cvss 5.1epss 0.00

  Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE…

• CVE-2018-2599MedJan 18, 2018
  Sun Corporation

  Java SE
  risk 0.32cvss 4.8epss 0.04

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows…

• CVE-2026-21925MedJan 20, 2026
  Graalvm

  Graalvm Ce Builds
  risk 0.31cvss 4.8epss 0.00

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for…

• CVE-2025-30754MedJul 15, 2025
  Oracle Corporation

  Jdk
  risk 0.31cvss 4.8epss 0.00

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK:…

• CVE-2025-30691MedApr 15, 2025
  NetApp

  Hci Bootstrap OS
  risk 0.31cvss 4.8epss 0.01

  Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.6, 24; Oracle GraalVM for JDK: 21.0.6 and 24. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to…

• CVE-2025-21502MedJan 21, 2025
  NetApp

  Oncommand Insight
  risk 0.31cvss 4.8epss 0.01

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1; Oracle GraalVM for JDK: 17.0.13,…

• CVE-2024-21235MedOct 15, 2024
  Oracle Corporation

  Jdk
  risk 0.31cvss 4.8epss 0.01

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK:…

• CVE-2024-21145MedJul 16, 2024
  NetApp

  Oncommand Insight
  risk 0.31cvss 4.8epss 0.01

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK:…