Skip to content

Product

oracle Java vulnerabilities

179 published CVES affecting oracle Java, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
179
Critical
15
High
39
Medium
76
Low
49
Unscored
0
CISA KEV
0

Latest oracle Java CVEs

Newest publication first · page 8 of 8

  1. HighCVSS 8.3 EPSS 2.5%

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java...

  2. HighCVSS 8.3 EPSS 2.8%

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 7u131 and 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Su...

  3. HighCVSS 7.7 EPSS 0.79%

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 7u131 and 8u121; Java SE Embedded: 8u121; JRockit: R28.3.13. Difficult to exploit vulnerability allows unauthenticated attack...

  4. MediumCVSS 4.2 EPSS 2.5%

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121. Difficult to exploit vulnerability allows unauthenticated attacker with networ...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.