VRT 391,192 CVEs tracked · 15,442 in RASP scope · data as of 18 hours ago
Reset
More filters (1)
Columns
Oracle product: Oracle Java SE / Java SE✕
Overview 9 matches, all in RASP scope · 8 protected · 1 KEV · 0 public PoC · 1 CISA SSVC · 0 EPSS ≥ 0.5 · 0 disputed
9matches, all in RASP scope 8protected88.9% 1KEV11.1% 0public PoC0.0% 1CISA SSVC11.1% 0EPSS ≥ 0.50.0% 0disputed0.0%
Critical 0 0.0% High 0 0.0% Medium 9 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
Protected by RASP 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% No fix identified 1 11.1% Mitigated by environment configuration 8 88.9% Queued for review 0 0.0% Not applicable 0 0.0% Out of RASP scope 0 0.0% Rejected 0 0.0%
blocked by ARMR today 8 88.9% not blocked 1 11.1% not established 0 0.0% unrecorded 0 0.0%
Exploited in the wild 1 11.1% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 8 88.9%
split by peak 4 / quarter
Unknown: 0None: 0Low: 0Medium: 9High: 0Critical: 0 Rejected: 0Out of RASP scope: 0Not applicable: 0Queued for review: 0Mitigated by environment configuration: 8No fix identified: 1No exploit published: 0Mitigation candidate: 0Rule in development: 0Protected by RASP: 0 unrecorded: 0not established: 0not blocked: 1blocked by ARMR today: 8 No public exploit: 8Forecast only: 0Proof of concept only: 0Working exploit published: 0Exploited in the wild: 1 Q1 2015: 4 CVEs Q2 2015: 0 CVEs Q3 2015: 2 CVEs Q4 2015: 2 CVEs Q1 2016: 0 CVEs Q2 2016: 0 CVEs Q3 2016: 0 CVEs Q4 2016: 0 CVEs Q1 2017: 1 CVE
Q1 15Q2 15Q3 15Q4 15Q1 16Q2 16Q3 16Q4 16Q1 17
9 matches CSV JSON
CVE Severity Published▾ Status Exploitation Description
CVE-2017-3262 Medium 2017-01-27 Mitigated by environment configuration No public exploit Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java Mission Control). The supported version that is affected is Java SE: 8u112. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: Applies to Java Mission Control Installation. CVSS v3.0 Base Score 5.3 (Confidentiality impacts).
CVE-2015-4902 Medium 2015-10-22 No fix identified Exploited in the wild Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.
CVE-2015-4871 Medium 2015-10-21 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 7u85 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.
CVE-2015-2632 Medium 2015-07-16 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
CVE-2015-2596 Medium 2015-07-16 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 7u80 allows remote attackers to affect integrity via unknown vectors related to Hotspot.
CVE-2015-0421 Medium 2015-01-21 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process.
CVE-2015-0407 Medium 2015-01-21 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Swing.
CVE-2015-0400 Medium 2015-01-21 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Libraries.
CVE-2014-6587 Medium 2015-01-21 Mitigated by environment configuration No public exploit Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.