VRT 391,192 CVEs tracked · 15,442 in RASP scope · data as of 20 hours ago
Reset
More filters (1)
Columns
Oracle product: Oracle Java SE / Java Runtime Environment✕
Overview 113 matches, all in RASP scope · 82 protected · 5 KEV · 10 public PoC · 5 CISA SSVC · 7 EPSS ≥ 0.5 · 0 disputed
113matches, all in RASP scope 82protected72.6% 5KEV4.4% 10public PoC8.8% 5CISA SSVC4.4% 7EPSS ≥ 0.56.2% 0disputed0.0%
Critical 3 2.7% High 67 59.3% Medium 36 31.9% Low 7 6.2% None 0 0.0% Unknown 0 0.0%
Protected by RASP 3 2.7% Rule in development 0 0.0% Mitigation candidate 7 6.2% No exploit published 3 2.7% No fix identified 21 18.6% Mitigated by environment configuration 79 69.9% Queued for review 0 0.0% Not applicable 0 0.0% Out of RASP scope 0 0.0% Rejected 0 0.0%
blocked by ARMR today 82 72.6% not blocked 31 27.4% not established 0 0.0% unrecorded 0 0.0%
Exploited in the wild 5 4.4% Working exploit published 4 3.5% Proof of concept only 1 0.9% Forecast only 0 0.0% No public exploit 103 91.2%
split by peak 34 / quarter
Unknown: 0None: 0Low: 7Medium: 36High: 67Critical: 3 Rejected: 0Out of RASP scope: 0Not applicable: 0Queued for review: 0Mitigated by environment configuration: 79No fix identified: 21No exploit published: 3Mitigation candidate: 7Rule in development: 0Protected by RASP: 3 unrecorded: 0not established: 0not blocked: 31blocked by ARMR today: 82 No public exploit: 103Forecast only: 0Proof of concept only: 1Working exploit published: 4Exploited in the wild: 5 Q2 2011: 15 CVEs Q3 2011: 0 CVEs Q4 2011: 0 CVEs Q1 2012: 9 CVEs Q2 2012: 12 CVEs Q3 2012: 0 CVEs Q4 2012: 20 CVEs Q1 2013: 34 CVEs Q2 2013: 23 CVEs
Q2 11Q3 11Q4 11Q1 12Q2 12Q3 12Q4 12Q1 13Q2 13
113 matches CSV JSON ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2011-0871 High 2011-06-14 No fix identified No public exploit Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Swing.
CVE-2011-0869 Medium 2011-06-14 No exploit published No public exploit Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 26 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to SAAJ.
CVE-2011-0868 Medium 2011-06-14 No exploit published No public exploit Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D.
CVE-2011-0867 Medium 2011-06-14 No exploit published No public exploit Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to Networking.
CVE-2011-0866 High 2011-06-14 No fix identified No public exploit Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier, when running on Windows, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Java Runtime Environment.
CVE-2011-0865 Low 2011-06-14 Protected by RASP No public exploit Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via unknown vectors related to Deserialization.
CVE-2011-0864 High 2011-06-14 No fix identified No public exploit Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot.
CVE-2011-0862 High 2011-06-14 No fix identified No public exploit Multiple unspecified vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allow remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVE-2011-0815 High 2011-06-14 No fix identified No public exploit Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to AWT.
CVE-2011-0814 High 2011-06-14 No fix identified No public exploit Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound, a different vulnerability than CVE-2011-0802.
CVE-2011-0802 High 2011-06-14 No fix identified No public exploit Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound, a different vulnerability than CVE-2011-0814.
CVE-2011-0788 High 2011-06-14 No fix identified No public exploit Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, when running on Windows, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2011-0786.
CVE-2011-0786 High 2011-06-14 No fix identified No public exploit Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, when running on Windows, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2011-0788.
‹ prev page 2 of 2 next ›