OJ
Product
Oracle Java SE
On CISA KEVExploited in the wildRansomware-linked
20
CVEs
7
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 2Medium 7Low 5
Watch
Add Oracle Java SE to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-4902 In wildKEV | 5.3 | Oct 21 | Oracle Java SE Integrity Check Vulnerability Affected: All versions, or not specified |
| CVE-2021-41041 | 5.3 | Apr 27 | In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation,… Affected: 8; 11 |
| CVE-2022-21496 | 5.3 | Apr 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI) Affected: 7u331; 8u321; 11.0.14; 17.0.2; 18 |
| CVE-2019-7317 | 5.3 | Feb 4 | png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute Affected: 7u221; 8u212 |
| CVE-2025-21502 | 4.8 | Jan 21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: Oracle Java SE:8u431-perf; Oracle Java SE:11.0.25; Oracle Java SE:17.0.13; Oracle Java SE:21.0.5; Oracle Java SE:23.0.1; Oracle GraalVM for JDK:17.0.13; +4 more |
| CVE-2024-21235 | 4.8 | Oct 15 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: Oracle Java SE:8u421; Oracle Java SE:8u421-perf; Oracle Java SE:11.0.24; Oracle Java SE:17.0.12; Oracle Java SE:21.0.4; Oracle Java SE:23; +5 more |
| CVE-2024-21140 | 4.8 | Jul 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 8u411; 8u411-perf; 11.0.23; 17.0.11; 21.0.3; 22.0.1 |
Showing 7