VRT 391,192 CVEs tracked · 15,442 in RASP scope · data as of 20 hours ago
Reset
More filters (1)
Columns
Oracle product: Oracle Java SE / Java SE✕
Overview 24 matches, all in RASP scope · 23 protected · 1 KEV · 0 public PoC · 1 CISA SSVC · 0 EPSS ≥ 0.5 · 0 disputed
24matches, all in RASP scope 23protected95.8% 1KEV4.2% 0public PoC0.0% 1CISA SSVC4.2% 0EPSS ≥ 0.50.0% 0disputed0.0%
Critical 0 0.0% High 10 41.7% Medium 9 37.5% Low 5 20.8% None 0 0.0% Unknown 0 0.0%
Protected by RASP 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% No fix identified 1 4.2% Mitigated by environment configuration 23 95.8% Queued for review 0 0.0% Not applicable 0 0.0% Out of RASP scope 0 0.0% Rejected 0 0.0%
blocked by ARMR today 23 95.8% not blocked 1 4.2% not established 0 0.0% unrecorded 0 0.0%
Exploited in the wild 1 4.2% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 23 95.8%
split by peak 13 / quarter
Unknown: 0None: 0Low: 5Medium: 9High: 10Critical: 0 Rejected: 0Out of RASP scope: 0Not applicable: 0Queued for review: 0Mitigated by environment configuration: 23No fix identified: 1No exploit published: 0Mitigation candidate: 0Rule in development: 0Protected by RASP: 0 unrecorded: 0not established: 0not blocked: 1blocked by ARMR today: 23 No public exploit: 23Forecast only: 0Proof of concept only: 0Working exploit published: 0Exploited in the wild: 1 Q4 2013: 1 CVE Q1 2014: 2 CVEs Q2 2014: 0 CVEs Q3 2014: 0 CVEs Q4 2014: 0 CVEs Q1 2015: 13 CVEs Q2 2015: 0 CVEs Q3 2015: 3 CVEs Q4 2015: 2 CVEs Q1 2016: 0 CVEs Q2 2016: 0 CVEs Q3 2016: 0 CVEs Q4 2016: 0 CVEs Q1 2017: 3 CVEs
Q1 14Q3 14Q1 15Q3 15Q1 16Q3 16Q1 17
24 matches CSV JSON
CVE Severity Published▾ Status Exploitation Description
CVE-2017-3262 Medium 2017-01-27 Mitigated by environment configuration No public exploit Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java Mission Control). The supported version that is affected is Java SE: 8u112. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: Applies to Java Mission Control Installation. CVSS v3.0 Base Score 5.3 (Confidentiality impacts).
CVE-2017-3260 High 2017-01-27 Mitigated by environment configuration No public exploit Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 7u121 and 8u112. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts).
CVE-2016-8328 Low 2017-01-27 Mitigated by environment configuration No public exploit Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java Mission Control). The supported version that is affected is Java SE: 8u112. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: Applies to Java Mission Control Installation. CVSS v3.0 Base Score 3.7 (Integrity impacts).
CVE-2015-4902 Medium 2015-10-22 No fix identified Exploited in the wild Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.
CVE-2015-4871 Medium 2015-10-21 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 7u85 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.
CVE-2015-4760 High 2015-07-16 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
CVE-2015-2632 Medium 2015-07-16 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
CVE-2015-2596 Medium 2015-07-16 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 7u80 allows remote attackers to affect integrity via unknown vectors related to Hotspot.
CVE-2015-0437 High 2015-01-21 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVE-2015-0421 Medium 2015-01-21 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process.
CVE-2015-0413 Low 2015-01-21 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity via unknown vectors related to Serviceability.
CVE-2015-0412 High 2015-01-21 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS.
CVE-2015-0408 High 2015-01-21 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.
CVE-2015-0407 Medium 2015-01-21 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Swing.
CVE-2015-0400 Medium 2015-01-21 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Libraries.
CVE-2015-0395 High 2015-01-21 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVE-2014-6601 High 2015-01-21 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVE-2014-6591 Low 2015-01-21 Mitigated by environment configuration No public exploit Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6585.
CVE-2014-6587 Medium 2015-01-21 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
CVE-2014-6585 Low 2015-01-21 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6591.
CVE-2014-6549 High 2015-01-21 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
CVE-2014-0408 High 2014-01-15 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 7u45, when running on OS X, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
CVE-2014-0373 High 2014-01-15 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to throwing of an incorrect exception when SnmpStatusException should have been used in the SNMP implementation, which allows attackers to escape the sandbox.
CVE-2013-5772 Low 2013-10-16 Mitigated by environment configuration No public exploit Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u40 and earlier and Java SE 6u60 and earlier allows remote attackers to affect integrity via unknown vectors related to jhat.