Login Request a demo
OJ
Product
Oracle Java SE
by Oracle Corporation · last CVE Jan 21, 2025
On CISA KEVExploited in the wildRansomware-linked
18
CVEs
7
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 6High 1Medium 6Low 5
Severity
All severities18Critical6High1Medium6Low5
Exploitation
On CISA KEV7Exploited in the wild7
Watch

Add Oracle Java SE to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2015-2590
In wildKEV
9.8
25%
Jul 16
Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2013-2465
RansomwareIn wildKEV
9.8
99%
Jun 18
Oracle Java SE Unspecified Vulnerability
Affected: All versions, or not specified
CVE-2012-5076
In wildKEV
9.8
91%
Oct 16
Oracle Java SE Sandbox Bypass Vulnerability
Affected: All versions, or not specified
CVE-2012-4681
RansomwareIn wildKEV
9.8
99%
Aug 28
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2012-1723
RansomwareIn wildKEV
9.8
94%
Jun 16
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2012-0507
RansomwareIn wildKEV
9.8
98%
Jun 7
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Affected: All versions, or not specified
CVE-2015-4902
In wildKEV
5.3
14%
Oct 21
Oracle Java SE Integrity Check Vulnerability
Affected: All versions, or not specified
CVE-2021-21349
8.6
47%
Mar 22
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
Affected: 7u321; 8u311
CVE-2021-41041
5.3
1%
Apr 27
In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation,…
Affected: 8; 11
CVE-2022-21496
5.3
3%
Apr 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI)
Affected: 7u331; 8u321; 11.0.14; 17.0.2; 18
CVE-2019-7317
5.3
9%
Feb 4
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute
Affected: 7u221; 8u212
CVE-2025-21502
4.8
1%
Jan 21
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)
Affected: Oracle Java SE:8u431-perf; Oracle Java SE:11.0.25; Oracle Java SE:17.0.13; Oracle Java SE:21.0.5; Oracle Java SE:23.0.1; Oracle GraalVM for JDK:17.0.13; +4 more
CVE-2024-21235
4.8
1%
Oct 15
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)
Affected: Oracle Java SE:8u421; Oracle Java SE:8u421-perf; Oracle Java SE:11.0.24; Oracle Java SE:17.0.12; Oracle Java SE:21.0.4; Oracle Java SE:23; +5 more
CVE-2024-21217
3.7
1%
Oct 15
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization)
Affected: Oracle Java SE:8u421; Oracle Java SE:8u421-perf; Oracle Java SE:11.0.24; Oracle Java SE:17.0.12; Oracle Java SE:21.0.4; Oracle Java SE:23; +5 more
CVE-2024-21211
3.7
1%
Oct 15
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler)
Affected: Oracle Java SE:23; Oracle GraalVM for JDK:17.0.12; Oracle GraalVM for JDK:21.0.4; Oracle GraalVM for JDK:23; Oracle GraalVM Enterprise Edition:20.3.15; Oracle GraalVM Enterprise Edition:21.3.11
CVE-2024-21210
3.7
1%
Oct 15
Vulnerability in Oracle Java SE (component: Hotspot)
Affected: Oracle Java SE:8u421; Oracle Java SE:8u421-perf; Oracle Java SE:11.0.24; Oracle Java SE:17.0.12; Oracle Java SE:21.0.4; Oracle Java SE:23
CVE-2024-21208
3.7
1%
Oct 15
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking)
Affected: Oracle Java SE:8u421; Oracle Java SE:8u421-perf; Oracle Java SE:11.0.24; Oracle Java SE:17.0.12; Oracle Java SE:21.0.4; Oracle Java SE:23; +5 more
CVE-2022-21443
3.7
3%
Apr 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)
Affected: 7u331; 8u321; 11.0.14; 17.0.2; 18
Showing 18