oracle jdk CVEs

CVE-2022-21628

Published Oct 18, 2022

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Ora…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-21626

Published Oct 18, 2022

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-21624

Published Oct 18, 2022

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are Oracle Java SE: 8u341,…

CVSS 3.7 · Low

Vendor/product tagsBeta · best-effort

CVE-2022-21619

Published Oct 18, 2022

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u…

CVSS 3.7 · Low

Vendor/product tagsBeta · best-effort

CVE-2022-21618

Published Oct 18, 2022

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Oracle Java SE: 17.0.4…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-21549

Published Jul 19, 2022

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 1…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-21541

Published Jul 19, 2022

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u3…

CVSS 5.9 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-21540

Published Jul 19, 2022

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u3…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-34169

Published Jul 19, 2022

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2022-21476

Published Apr 19, 2022

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2022-21449

Published Apr 19, 2022

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 1…

CVSS 7.5 · High

evidence mentions: 2
Buzz score: 17.5

Vendor/product tagsBeta · best-effort

CVE-2022-21434

Published Apr 19, 2022

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-21426

Published Apr 19, 2022

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u331,…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-22965

Published Apr 1, 2022

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to ru…

CVSS 9.8 · Critical

evidence mentions: 34
Buzz score: 71.0

KEV listed

Vendor/product tagsBeta · best-effort

CVE-2022-21366

Published Jan 19, 2022

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 11.…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-21365

Published Jan 19, 2022

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 7u3…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-21360

Published Jan 19, 2022

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 7u3…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-21349

Published Jan 19, 2022

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 7u321, 8…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-21341

Published Jan 19, 2022

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java S…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-21340

Published Jan 19, 2022

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-21305

Published Jan 19, 2022

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u3…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-21299

Published Jan 19, 2022

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u321,…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-21296

Published Jan 19, 2022

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u321,…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-21294

Published Jan 19, 2022

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-21293

Published Jan 19, 2022

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

oracle / jdk CVEs