WaratekVRT Sign in

Medium Oracle Java SE Java SE, JRockit, Java SE Embedded CVEs

6 CVEs, 4 protected by Waratek

Reset
More filters (1)
Columns
Oracle product: Oracle Java SE / Java SE, JRockit, Java SE Embedded✕
Overview 6 matches · 4 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
6matches 4protected66.7% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 4 66.7% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 2 33.3%
Critical 0 0.0% High 0 0.0% Medium 6 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 4 66.7% partly blocked 0 0.0% not blocked 2 33.3% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 6 100.0%
split by peak 3 / quarter
No exploit published: 2Protected by Waratek: 4 Medium: 6 not blocked: 2blocked by ARMR today: 4 No public exploit: 6
Q4 133 Protected by Waratek2 No exploit published1 Medium3 blocked by ARMR today2 not blocked1 No public exploit3 Q1 141 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1 Q2 140 Q3 140 Q4 140 Q1 150 Q2 150 Q3 152 Protected by Waratek1 No exploit published1 Medium2 blocked by ARMR today1 not blocked1 No public exploit2
Q4 13Q1 14Q2 14Q3 14Q4 14Q1 15Q2 15Q3 15
6 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2015-4749 Medium 2015-07-16 No exploit published No public exploit Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect availability via vectors related to JNDI.
CVE-2015-2601 Medium 2015-07-16 Protected by Waratek No public exploit Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.
CVE-2014-0423 Medium 2014-01-15 Protected by Waratek No public exploit Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote authenticated users to affect confidentiality and availability via unknown vectors related to Beans. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability in DocumentHandler.java, related to Beans decoding.
CVE-2013-5825 Medium 2013-10-16 No exploit published No public exploit Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via vectors related to JAXP.
CVE-2013-5823 Medium 2013-10-16 Protected by Waratek No public exploit Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via unknown vectors related to Security.
CVE-2013-5780 Medium 2013-10-16 Protected by Waratek No public exploit Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Libraries.