VRT 391,192 CVEs tracked · 15,442 in RASP scope · data as of 16 hours ago
Reset
More filters (1)
Columns
Advisory: Java SE CPU Oct 2011✕
Overview 20 matches · 15 in RASP scope · 11 protected · 1 KEV · 3 public PoC · 1 CISA SSVC · 3 EPSS ≥ 0.5 · 0 disputed
20matches 15in RASP scope75.0% 11protected55.0% 1KEV5.0% 3public PoC15.0% 1CISA SSVC5.0% 3EPSS ≥ 0.515.0% 0disputed0.0%
Critical 1 5.0% High 9 45.0% Medium 7 35.0% Low 3 15.0% None 0 0.0% Unknown 0 0.0%
Protected by RASP 1 5.0% Rule in development 0 0.0% Mitigation candidate 1 5.0% No exploit published 2 10.0% No fix identified 1 5.0% Mitigated by environment configuration 10 50.0% Queued for review 0 0.0% Not applicable 1 5.0% Out of RASP scope 4 20.0% Rejected 0 0.0%
blocked by ARMR today 11 55.0% not blocked 9 45.0% not established 0 0.0% unrecorded 0 0.0%
Exploited in the wild 1 5.0% Working exploit published 1 5.0% Proof of concept only 1 5.0% Forecast only 0 0.0% No public exploit 17 85.0%
split by peak 19 / month
Unknown: 0None: 0Low: 3Medium: 7High: 9Critical: 1 Rejected: 0Out of RASP scope: 4Not applicable: 1Queued for review: 0Mitigated by environment configuration: 10No fix identified: 1No exploit published: 2Mitigation candidate: 1Rule in development: 0Protected by RASP: 1 unrecorded: 0not established: 0not blocked: 9blocked by ARMR today: 11 No public exploit: 17Forecast only: 0Proof of concept only: 1Working exploit published: 1Exploited in the wild: 1 September 2011: 1 CVE October 2011: 19 CVEs
Sep 11Oct 11
20 matches CSV JSON
CVE Severity Published▾ Status Exploitation Description
CVE-2011-3561 Low 2011-10-19 Out of RASP scope No public exploit Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JavaFX 2.0 allows remote attackers to affect confidentiality via unknown vectors related to Deployment.
CVE-2011-3560 Medium 2011-10-19 Mitigated by environment configuration No public exploit Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity, related to JSSE.
CVE-2011-3558 Medium 2011-10-19 Mitigated by environment configuration No public exploit Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to HotSpot.
CVE-2011-3557 Medium 2011-10-19 No exploit published No public exploit Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to RMI, a different vulnerability than CVE-2011-3556.
CVE-2011-3556 High 2011-10-19 Protected by RASP Working exploit published Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to RMI, a different vulnerability than CVE-2011-3557.
CVE-2011-3555 Medium 2011-10-19 Mitigated by environment configuration No public exploit Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, and 7 allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity and availability via unknown vectors.
CVE-2011-3554 High 2011-10-19 Mitigated by environment configuration No public exploit Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2011-3553 Low 2011-10-19 No exploit published No public exploit Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote authenticated users to affect confidentiality, related to JAXWS.
CVE-2011-3552 Low 2011-10-19 Mitigated by environment configuration No public exploit Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote attackers to affect integrity via unknown vectors related to Networking.
CVE-2011-3551 High 2011-10-19 Out of RASP scope No public exploit Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVE-2011-3550 High 2011-10-19 Mitigated by environment configuration No public exploit Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability, related to AWT.
CVE-2011-3549 High 2011-10-19 Mitigated by environment configuration No public exploit Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Swing.
CVE-2011-3548 High 2011-10-19 Mitigated by environment configuration No public exploit Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability, related to AWT.
CVE-2011-3547 Medium 2011-10-19 Mitigated by environment configuration No public exploit Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to Networking.
CVE-2011-3546 Medium 2011-10-19 Out of RASP scope No public exploit Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JavaFX 2.0 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity via unknown vectors related to Deployment.
CVE-2011-3545 High 2011-10-19 No fix identified No public exploit Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.
CVE-2011-3544 Critical 2011-10-19 Mitigation candidate Exploited in the wild Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.
CVE-2011-3521 High 2011-10-19 Mitigated by environment configuration No public exploit Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE, 7, 6 Update 27 and earlier, and 5.0 Update 31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deserialization.
CVE-2011-3516 High 2011-10-19 Out of RASP scope No public exploit Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, when running on Windows, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVE-2011-3389 Medium 2011-09-06 Not applicable Proof of concept only The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.