Privilege Escalation

Java SE is vulnerable to privilege escalation attacks. A remote user can exploit a flaw in the ImageIO component to gain elevated privileges. This may allow the user with lower privileges to perform restricted tasks...

Privilege Escalation

Java SE and Java SE Embedded are vulnerable to privilege escalation. A remote user can exploit a flaw in the Libraries component to gain elevated privileges. This may allow the user with lower privileges to perform restricted actions...

Privilege Escalation

Java SE and Java SE Embedded are vulnerable to privilege escalation attacks. A remote user can exploit a flaw in the Libraries component to gain elevated privileges. This may allow a user with lower privileges to perform restricted actions...

Arbitrary Code Execution

Java SE is vulnerable to arbitrary code execution attacks. A remote authenticated user can exploit a flaw in the Scripting component which leads to access and modify data on the target system...

Privilege Escalation

Java SE is vulnerable to arbitrary privilege escalation attacks. A remote user can exploit a flaw in the Security component to gain elevated privileges. This may allow a user with lower privilege to perform abilities they should not have...

Denial Of Service (DoS)

Java SE and Java SE Embedded are vulnerable to denial of service attacks. A remote attacker could cause an application crash resulting in denial of service conditions via the Libraries component...

Information Disclosure

Java SE is vulnerable to information disclosure. A remote unauthenticated attacker is able to gain access to confidential information through unauthorized read access via the Deployment component...

Unauthorized Modification

Java SE and Java SE Embedded are vulnerable to unauthorized modification attacks. An unauthenticated attacker can exploit a flaw in the FTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate FTP connections established by a...

Unauthorized Modification

Java SE and Java SE Embedded are vulnerable to unauthenticated modification attacks. An unauthenticated attacker can exploit a flaw in the Security component of OpenJDK which does not allow users to restrict the set of algorithms allowed for Jar integrity verification allowing an attacker to modi...

Denial Of Service (DoS)

Java SE and Java SE Embedded are vulnerable to denial of serviceDos attacks. This occurs in JAXP component of OpenJDK which fails to correctly enforce parse tree size limits when parsing XML documents. An attacker could use this flaw to crash the application via consuming an excessive amount of C...

Improper Access Control

Java SE and Java SE Embedded are vulnerable to improper access control attacks. The affected component is JCE of OpenJDK. A local attacker could possibly use this flaw to load an attacker-controlled library which elevates their privileges...

Information Disclosure

Java SE and Java SE Embedded are vulnerable to information disclosure attacks. This allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, which leads to elevated privilege gaining and application crashing...

Privilege Escalation

Java SE and Java SE Embedded component of Oracle Java SE are vulnerable to privilege escalation attacks. Affected Libraries component allows a remote attacker to exploit this flaw. Successful attacks can result in the takeover of Java SE, Java SE Embedded...

Privilege Escalation

Java SE and Java SE Embedded component of Oracle Java SE are vulnerable to privilege escalation. A remote unauthenticated attacker can exploit the flaw in Hotspot component to gain elevated privileges. Successful exploitation of this vulnerability can result in takeover of Java SE, Java SE Embedd...

Denial Of Service

Java SE, Java SE Embedded and JRockit component of Oracle Java SE are vulnerable to denial of service attacks. An attacker is able to make a Java application parse a specially crafted PNG image causing the application to consume an excessive amount of memory and crash. Affected component is 2D...

Privilege Escalation

Java SE, Java SE Embedded and JRockit component of Oracle Java SE are vulnerable to Privilege Escalation. A remote authenticated user can exploit this flaw in the JAAS component for unauthorized creation, deletion or modification access to critical data...

Information Disclosure

Java SE and Java SE Embedded component of Oracle Java SE are vulnerable to information disclosure. A remote unauthenticated attacker is able to gain unauthorized read access to a subset of Java SE, Java SE Embedded accessible data via the Networking component...

Unauthenticated Access

oracle java SE is vulnerable to unauthenticated access vulnerability. This exists due to not validating the length of the object identifier read from the DER input in Libraries component of OpenJDK before allocating memory to store the OID. An attacker able to make a Java application decode a...

Sandbox Restrictions Bypass

Oracle Java SE and Java SE Embedded are vulnerable to sandbox restrictions bypass. Mishandled classloaders in the component JMX of OpenJDK allows an untrusted Java application or applet to bypass certain Java sandbox restrictions to perform unauthorized actions...

Information Disclosure

Oracle Java SE and Java SE Embedded are vulnerable to information disclosure. A remote user can exploit a flaw in the Networking component to access sensitive information...