Jre Security Vulnerabilities and Issues — Page 13 of Jre CVE List

Lucene search

OracleJre

782 matches found

CVE•added 2017/08/08 3:29 p.m.•107 views

CVE-2017-10125

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows physical access to compromise Java SE. While the vulnerability is in Java SE, attacks may significantly i...

7.1CVSS7.6AI score0.00274EPSS

CVE•added 2018/07/18 1:29 p.m.•107 views

CVE-2018-2941

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u181, 8u172 and 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

8.3CVSS8.5AI score0.01278EPSS

CVE•added 2013/02/02 12:55 a.m.•106 views

CVE-2012-3213

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.

10CVSS5.5AI score0.10133EPSS

CVE•added 2013/02/02 12:55 a.m.•106 views

CVE-2012-3342

10CVSS5.6AI score0.08537EPSS

CVE•added 2013/02/02 12:55 a.m.•106 views

CVE-2013-0445

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the ...

10CVSS5.4AI score0.01587EPSS

CVE•added 2014/04/16 1:55 a.m.•106 views

CVE-2014-0452

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0458 and CVE-2014-2423.

7.5CVSS6.6AI score0.03214EPSS

CVE•added 2014/04/16 1:55 a.m.•106 views

CVE-2014-0458

7.5CVSS6.6AI score0.03214EPSS

CVE•added 2014/04/16 2:55 a.m.•106 views

CVE-2014-2421

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

10CVSS6.5AI score0.08192EPSS

CVE•added 2014/10/15 10:55 p.m.•106 views

CVE-2014-6502

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect integrity via unknown vectors related to Libraries.

2.6CVSS3.4AI score0.03022EPSS

CVE•added 2016/07/21 10:14 a.m.•106 views

CVE-2016-3606

Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot.

9.6CVSS8.4AI score0.02991EPSS

CVE•added 2018/04/19 2:29 a.m.•106 views

CVE-2018-2811

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Install). Supported versions that are affected are Java SE: 8u162 and 10. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Success...

7.7CVSS7.5AI score0.00161EPSS

CVE•added 2013/03/08 6:55 p.m.•105 views

CVE-2013-0401

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via vectors related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competiti...

10CVSS8.8AI score0.10134EPSS

CVE•added 2013/02/02 12:55 a.m.•105 views

CVE-2013-0446

10CVSS5.6AI score0.08537EPSS

CVE•added 2016/04/21 11:0 a.m.•105 views

CVE-2016-3425

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect availability via vectors related to JAXP.

5CVSS6.2AI score0.06497EPSS

CVE•added 2013/02/02 12:55 a.m.•104 views

CVE-2013-0419

7.6CVSS5.6AI score0.08026EPSS

CVE•added 2014/04/16 1:55 a.m.•104 views

CVE-2014-0459

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D.

4.3CVSS8.3AI score0.03305EPSS

CVE•added 2014/10/15 10:55 p.m.•104 views

CVE-2014-6506

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

6.8CVSS3.5AI score0.07693EPSS

CVE•added 2015/04/16 4:59 p.m.•104 views

CVE-2015-0477

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity via unknown vectors related to Beans.

4.3CVSS3.7AI score0.02793EPSS

CVE•added 2018/10/17 1:31 a.m.•104 views

CVE-2018-3157

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Sound). The supported version that is affected is Java SE: 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vuln...

4.3CVSS3.9AI score0.00889EPSS

CVE•added 2014/07/17 5:10 a.m.•103 views

CVE-2014-4219

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

9.3CVSS3.5AI score0.21404EPSS

CVE•added 2018/04/19 2:29 a.m.•103 views

CVE-2018-2825

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require ...

8.3CVSS8AI score0.01133EPSS

CVE•added 2014/10/15 10:55 p.m.•102 views

CVE-2014-6531

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality via unknown vectors related to Libraries.

4.3CVSS3.4AI score0.02643EPSS

CVE•added 2014/04/16 1:55 a.m.•101 views

CVE-2014-2398

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.

3.5CVSS6.2AI score0.00231EPSS

CVE•added 2016/01/21 3:0 a.m.•101 views

CVE-2016-0475

Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.

5.8CVSS5.2AI score0.01352EPSS

CVE•added 2016/10/25 2:30 p.m.•101 views

CVE-2016-5568

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.

9.6CVSS8.3AI score0.01234EPSS

CVE•added 2013/02/02 12:55 a.m.•100 views

CVE-2013-0438

4.3CVSS5.3AI score0.05451EPSS

CVE•added 2014/01/15 4:8 p.m.•100 views

CVE-2014-0422

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JNDI. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented ...

10CVSS4.5AI score0.10647EPSS

CVE•added 2016/07/21 10:13 a.m.•100 views

CVE-2016-3508

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3500.

5.3CVSS6.5AI score0.06423EPSS

CVE•added 2018/01/18 2:29 a.m.•100 views

CVE-2018-2627

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer). Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Suc...

7.5CVSS7.4AI score0.00373EPSS

CVE•added 2018/07/18 1:29 p.m.•100 views

CVE-2018-2942

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL). Supported versions that are affected are Java SE: 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful at...

8.3CVSS8.3AI score0.00583EPSS

CVE•added 2013/02/02 12:55 a.m.•99 views

CVE-2013-1473

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect integrity via unknown vectors related to Deployment.

5CVSS5.4AI score0.05083EPSS

CVE•added 2016/04/21 11:0 a.m.•99 views

CVE-2016-3449

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Deployment.

8.3CVSS6.3AI score0.05413EPSS

CVE•added 2018/01/18 2:29 a.m.•99 views

CVE-2018-2581

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u161, 8u152 and 9.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful at...

4.7CVSS4.4AI score0.00665EPSS

CVE•added 2013/02/02 12:55 a.m.•98 views

CVE-2013-0444

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans. NOTE: the previous information is from the February 20...

7.6CVSS7.9AI score0.08026EPSS

CVE•added 2014/07/17 11:17 a.m.•98 views

CVE-2014-4266

Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown vectors related to Serviceability.

5CVSS3.4AI score0.02042EPSS

CVE•added 2015/04/16 4:59 p.m.•98 views

CVE-2015-0491

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0459.

10CVSS3.8AI score0.10713EPSS

CVE•added 2014/01/15 4:8 p.m.•97 views

CVE-2014-0428

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented...

10CVSS4.6AI score0.10647EPSS

CVE•added 2014/07/17 11:17 a.m.•97 views

CVE-2014-4262

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

9.3CVSS3.5AI score0.21404EPSS

CVE•added 2020/07/15 6:15 p.m.•97 views

CVE-2020-14664

Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human...

8.3CVSS8.1AI score0.01002EPSS

CVE•added 2013/02/20 9:55 p.m.•96 views

CVE-2013-1486

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier, 6 Update 39 and earlier, and 5.0 Update 39 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

10CVSS8.2AI score0.00818EPSS

CVE•added 2016/07/21 10:13 a.m.•96 views

CVE-2016-3550

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality via vectors related to Hotspot.

4.3CVSS6AI score0.01375EPSS

CVE•added 2013/02/02 12:55 a.m.•95 views

CVE-2013-0351

7.5CVSS5.6AI score0.12334EPSS

CVE•added 2014/07/17 5:10 a.m.•95 views

CVE-2014-2490

Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

9.3CVSS5.5AI score0.07313EPSS

CVE•added 2014/07/17 11:17 a.m.•95 views

CVE-2014-4252

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality via unknown vectors related to Security.

5CVSS3.3AI score0.01635EPSS

CVE•added 2015/04/16 4:59 p.m.•95 views

CVE-2015-0459

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0491.

10CVSS3.8AI score0.10713EPSS

CVE•added 2016/07/21 10:12 a.m.•95 views

CVE-2016-3500

5.3CVSS6.5AI score0.06423EPSS

CVE•added 2017/04/24 7:59 p.m.•95 views

CVE-2017-3514

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful att...

8.3CVSS8.2AI score0.01199EPSS

CVE•added 2013/02/02 12:55 a.m.•94 views

CVE-2012-1541

10CVSS6.6AI score0.09545EPSS

CVE•added 2014/04/16 1:55 a.m.•94 views

CVE-2014-0454

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.

7.5CVSS8.2AI score0.0262EPSS

CVE•added 2015/01/21 6:59 p.m.•94 views

CVE-2015-0400

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Libraries.

5CVSS3.2AI score0.0094EPSS

Total number of security vulnerabilities782