Jre

CVEs (817)

• CVE-2016-5546HigJan 27, 2017
  Oracle Corporation

  Jrockit
  risk 0.49cvss 7.5epss 0.03

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows…

• CVE-2026-47058HigJul 21, 2026
  Oracle Corporation

  Java Se
  risk 0.48cvss 7.4epss 0.00

  Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and 11.0.31. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle…

• CVE-2026-21932HigJan 20, 2026
  Graalvm

  Graalvm Ce Builds
  risk 0.48cvss 7.4epss 0.00

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle…

• CVE-2025-21587HigApr 15, 2025
  Oracle Corporation

  Jdk
  risk 0.48cvss 7.4epss 0.01

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14,…

• CVE-2024-21147HigJul 16, 2024
  NetApp

  Oncommand Insight
  risk 0.48cvss 7.4epss 0.01

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK:…

• CVE-2024-20952HigJan 16, 2024
  NetApp

  Oncommand Insight
  risk 0.48cvss 7.4epss 0.01

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9,…

• CVE-2024-20918HigJan 16, 2024
  NetApp

  Oncommand Insight
  risk 0.48cvss 7.4epss 0.01

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9,…

• CVE-2023-21930HigApr 18, 2023
  NetApp

  Oncommand Insight
  risk 0.48cvss 7.4epss 0.01

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1.…

• CVE-2020-14593HigJul 15, 2020
  Fedoraproject

  Fedora
  risk 0.48cvss 7.4epss 0.04

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network…

• CVE-2018-2783HigApr 19, 2018
  Sun Corporation

  Java SE
  risk 0.48cvss 7.4epss 0.04

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows…

• CVE-2018-2637HigJan 18, 2018
  Sun Corporation

  Java SE
  risk 0.48cvss 7.4epss 0.05

  Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows…

• CVE-2015-4902MedKEVOct 22, 2015
  Sun Corporation

  Java SE
  risk 0.48cvss 5.3epss 0.13

  Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.

• CVE-2025-50063HigJul 15, 2025
  Oracle Corporation

  Java Se
  risk 0.47cvss 7.3epss 0.00

  Vulnerability in Oracle Java SE (component: Install). The supported version that is affected is Oracle Java SE: 8u451. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE. …

• CVE-2017-10125HigAug 8, 2017
  NetApp

  Steelstore Cloud Integrated Storage
  risk 0.46cvss 7.1epss 0.01

  Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows physical access to compromise Java SE. While the vulnerability is in Java SE, attacks…

• CVE-2013-2423LowKEVApr 17, 2013
  Openjdk

  OpenJDK
  risk 0.46cvss 3.7epss 0.85

  Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot. NOTE: the previous information is from the April 2013 CPU.…

• CVE-2020-2601MedJan 15, 2020
  NetApp

  Steelstore Cloud Integrated Storage
  risk 0.45cvss 6.8epss 0.04

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with…

• CVE-2018-2634MedJan 18, 2018
  Sun Corporation

  Java SE
  risk 0.45cvss 6.8epss 0.05

  Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JGSS). Supported versions that are affected are Java SE: 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with network…

• CVE-2022-34169HigJul 19, 2022
  Apache

  Xalan Java
  risk 0.44cvss 7.5epss 0.81

  The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update…

• CVE-2021-35567MedOct 20, 2021
  Fedoraproject

  Fedora
  risk 0.44cvss 6.8epss 0.03

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows…

• CVE-2019-2989MedOct 16, 2019
  NetApp

  E Series Santricity Storage Manager
  risk 0.44cvss 6.8epss 0.03

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with…