Fixes 118 records
Priority CRITICAL 100KEV
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.98773 · Published 2013-06-18 · Fixed CWE-693
Priority CRITICAL 85
The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.86151 · Published 2013-03-04 · Fixed CWE-119
Priority HIGH 80
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availabil…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.69037 · Published 2012-10-16 · Partial fix
Priority MEDIUM 63
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.22988 · Published 2013-06-18 · Fixed
Priority MEDIUM 63
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.22988 · Published 2013-06-18 · Fixed
Priority MEDIUM 59
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.15022 · Published 2013-06-18 · Fixed
Priority MEDIUM 59
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code v…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.16422 · Published 2013-03-08 · Fixed CWE-94
Priority MEDIUM 56
Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to af…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.66921 · Published 2013-06-18 · Fixed
Priority MEDIUM 56
Unspecified vulnerability in the 2D component in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to e…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.10753 · Published 2013-03-04 · Fixed
Priority MEDIUM 56
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via u…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.10924 · Published 2013-02-02 · Partial fix
Priority MEDIUM 55
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.10179 · Published 2013-06-18 · Fixed
Priority MEDIUM 55
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09875 · Published 2013-04-17 · Fixed
Priority MEDIUM 55
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to execute arbitrary code via v…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.10342 · Published 2013-03-08 · Fixed CWE-94
Priority MEDIUM 55
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via u…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09822 · Published 2013-02-02 · Partial fix
Priority MEDIUM 54
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availabili…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07983 · Published 2013-06-18 · Fixed
Priority MEDIUM 54
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08778 · Published 2013-04-17 · Partial fix
Priority MEDIUM 54
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08778 · Published 2013-04-17 · Partial fix
Priority MEDIUM 54
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08869 · Published 2013-04-17 · Partial fix
Priority MEDIUM 54
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via u…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08103 · Published 2013-02-02 · Partial fix
Priority MEDIUM 54
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect conf…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08087 · Published 2013-02-02 · Partial fix
Priority MEDIUM 54
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08087 · Published 2013-02-02 · Partial fix
Priority MEDIUM 54
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08087 · Published 2013-02-02 · Partial fix
Priority MEDIUM 54
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08087 · Published 2013-02-02 · Partial fix
Priority MEDIUM 54
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08087 · Published 2013-02-02 · Partial fix
Priority MEDIUM 54
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via u…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08325 · Published 2013-02-02 · Partial fix
Priority MEDIUM 53
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07498 · Published 2013-06-18 · Fixed
Priority MEDIUM 53
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07133 · Published 2013-06-18 · Fixed
Priority MEDIUM 53
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availabili…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07657 · Published 2013-06-18 · Fixed
Priority MEDIUM 53
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07437 · Published 2013-06-18 · Fixed
Priority MEDIUM 53
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availabili…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07133 · Published 2013-04-17 · Fixed
Priority MEDIUM 53
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and availabili…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07133 · Published 2013-04-17 · Fixed
Priority MEDIUM 53
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attacker…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07133 · Published 2013-04-17 · Fixed
Priority MEDIUM 53
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect confidentiality, int…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06917 · Published 2013-04-17 · Fixed
Priority MEDIUM 53
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06917 · Published 2013-04-17 · Fixed
Priority MEDIUM 53
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06917 · Published 2013-04-17 · Fixed
Priority MEDIUM 53
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13 and earlier, 6 Update 39 and earlier, and 5.0 Update 39 and earlier allows remote attackers to affect confidentialit…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06917 · Published 2013-02-20 · Fixed
Priority MEDIUM 53
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier allows remote attackers to affect confidentiality, integrit…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.0755 · Published 2013-02-02 · Partial fix
Priority MEDIUM 53
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07714 · Published 2013-02-02 · Partial fix
Priority MEDIUM 53
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07634 · Published 2013-02-02 · Partial fix
Priority MEDIUM 53
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07634 · Published 2013-02-02 · Partial fix
Priority MEDIUM 53
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect conf…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07634 · Published 2013-02-02 · Partial fix
Priority MEDIUM 53
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07634 · Published 2013-02-02 · Partial fix
Priority MEDIUM 52
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier allows remote attackers to affect confidentialit…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06733 · Published 2013-06-18 · Fixed
Priority MEDIUM 52
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE 7 Update 13 and earlier and 6 Update 39 and earlier allows remote attackers to affect confidentiality, integrity, and availability via…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06036 · Published 2013-02-20 · Fixed
Priority MEDIUM 52
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, 1.4.2_38 and earlier, and JavaFX 2.2 and earlier all…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06491 · Published 2012-10-16 · Partial fix
Priority MEDIUM 52
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.45113 · Published 2012-10-16 · Partial fix
Priority MEDIUM 52
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, 1.4.2_37 and earlier, and JavaFX 2.1 and earlier allow…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05916 · Published 2012-06-16 · Partial fix
Priority MEDIUM 52
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier; and JavaFX 2.2 and earlier…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.0624 · Published 2012-10-16 · Partial fix
Priority MEDIUM 51
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05572 · Published 2012-10-16 · Partial fix
Priority MEDIUM 51
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality,…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05555 · Published 2012-06-16 · Fixed
Priority MEDIUM 51
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availabil…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05297 · Published 2012-06-16 · Fixed
Priority MEDIUM 51
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect confidentiality, integrity, and availabil…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05297 · Published 2012-06-16 · Fixed
Priority MEDIUM 51
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality,…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05509 · Published 2012-06-16 · Fixed
Priority MEDIUM 51
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relate…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05402 · Published 2012-08-30 · Partial fix
Priority MEDIUM 51
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier and 6 Update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availabilit…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05572 · Published 2012-10-16 · Partial fix
Priority MEDIUM 50
Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06864 · Published 2013-01-11 · Fixed
Priority MEDIUM 50
Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Ra…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06903 · Published 2013-01-11 · Partial fix
Priority MEDIUM 49
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 45 and earlier and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availabi…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06083 · Published 2013-06-18 · Fixed
Priority MEDIUM 48
Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05086 · Published 2013-01-11 · Partial fix
Priority MEDIUM 43
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.2258 · Published 2013-04-17 · Partial fix
Priority MEDIUM 43
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via u…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.0671 · Published 2013-02-02 · Partial fix
Priority MEDIUM 43
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via u…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.06895 · Published 2013-02-02 · Partial fix
Priority MEDIUM 42
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.05571 · Published 2013-06-18 · Fixed
Priority MEDIUM 42
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; JavaFX 2.2.7 and earlier; and OpenJDK 6 and 7 a…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.05724 · Published 2013-04-17 · Fixed
Priority MEDIUM 42
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.05724 · Published 2013-04-17 · Fixed
Priority MEDIUM 42
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows remote attacker…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.05904 · Published 2013-04-17 · Fixed
Priority MEDIUM 42
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via u…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.06013 · Published 2013-02-02 · Partial fix
Priority MEDIUM 41
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availabili…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05679 · Published 2013-06-18 · Fixed
Priority MEDIUM 41
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.05125 · Published 2013-04-17 · Fixed
Priority MEDIUM 41
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.04826 · Published 2012-10-16 · Partial fix
Priority MEDIUM 41
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.04826 · Published 2012-10-16 · Partial fix
Priority MEDIUM 40
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availabil…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04231 · Published 2012-10-16 · Partial fix
Priority LOW 39
The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the proces…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.35584 · Published 2013-02-08 · Partial fix CWE-310
Priority LOW 39
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availabil…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03819 · Published 2012-10-16 · Partial fix
Priority LOW 39
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish E…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.11388 · Published 2012-05-03 · Fixed
Priority LOW 37
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and availa…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.05209 · Published 2013-06-18 · Fixed
Priority LOW 36
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.04875 · Published 2013-02-02 · Partial fix
Priority LOW 34
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.03388 · Published 2012-10-16 · Partial fix
Priority LOW 33
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.04128 · Published 2013-06-18 · Fixed
Priority LOW 31
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05084 · Published 2013-06-18 · Fixed
Priority LOW 31
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04874 · Published 2013-06-18 · Fixed
Priority LOW 31
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect confidentiality via unknown vectors relate…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0508 · Published 2013-06-18 · Fixed
Priority LOW 31
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05009 · Published 2013-04-17 · Fixed
Priority LOW 31
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknow…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04823 · Published 2013-06-18 · Fixed
Priority LOW 31
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect integrity via unknown vectors related to Deploymen…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05487 · Published 2013-02-02 · Partial fix
Priority LOW 31
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attacker…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05532 · Published 2013-02-02 · Partial fix
Priority LOW 31
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality via vectors…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05205 · Published 2013-02-02 · Partial fix
Priority LOW 31
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04911 · Published 2013-02-02 · Partial fix
Priority LOW 31
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect inte…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04875 · Published 2013-02-02 · Partial fix
Priority LOW 31
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect inte…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04875 · Published 2013-02-02 · Partial fix
Priority LOW 31
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attacker…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04795 · Published 2013-02-02 · Partial fix
Priority LOW 31
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38 allows remote attackers to affect confidentiality via vector…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04856 · Published 2013-02-02 · Partial fix
Priority LOW 31
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.02833 · Published 2012-10-16 · Partial fix
Priority LOW 30
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04507 · Published 2013-06-18 · Fixed
Priority LOW 30
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04512 · Published 2013-06-18 · Fixed
Priority LOW 30
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04326 · Published 2013-06-18 · Fixed
Priority LOW 30
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect integrity via vectors related to JMX.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04552 · Published 2013-06-18 · Fixed
Priority LOW 30
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04326 · Published 2013-06-18 · Fixed
Priority LOW 30
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04326 · Published 2013-06-18 · Fixed
Priority LOW 30
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04446 · Published 2013-06-18 · Fixed
Priority LOW 30
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04586 · Published 2013-06-18 · Partial fix
Priority LOW 30
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04446 · Published 2013-04-17 · Fixed
Priority LOW 30
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to af…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04214 · Published 2012-06-16 · Partial fix
Priority LOW 29
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03388 · Published 2012-10-16 · Partial fix
Priority LOW 29
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0 Update 36 and earlier allows remote attackers to affect confidentiality…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03413 · Published 2012-10-16 · Partial fix
Priority LOW 29
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03388 · Published 2012-10-16 · Partial fix
Priority LOW 29
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality via unknown vectors relat…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03413 · Published 2012-10-16 · Partial fix
Priority LOW 29
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to af…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0335 · Published 2012-06-16 · Partial fix
Priority LOW 27
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to D…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03757 · Published 2013-04-17 · Fixed
Priority LOW 27
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to D…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03757 · Published 2013-04-17 · Fixed
Priority LOW 27
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality via unknown vectors related to Dep…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04284 · Published 2013-02-02 · Partial fix
Priority LOW 26
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote at…
CVSS 2.0MEDIUM 4.0· Network · No auth · Interaction — · EPSS 0.04259 · Published 2013-02-02 · Partial fix
Priority LOW 22
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows local users to affect confidentiality, integrity, and availability vi…
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00463 · Published 2013-04-17 · Fixed
Priority LOW 19
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.02878 · Published 2012-10-16 · Partial fix
Priority LOW 18
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows local users to affect confidentiality, integrity, and…
CVSS 2.0LOW 3.7· Local · No auth · Interaction — · EPSS 0.00445 · Published 2013-06-18 · Fixed
Priority LOW 18
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows local users to affect con…
CVSS 2.0LOW 3.6· Local · No auth · Interaction — · EPSS 0.00506 · Published 2013-06-18 · Fixed
Priority LOW 17
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and "a security-in-de…
CVSS 2.0LOW 0.0· Network · No auth · Interaction — · EPSS 0.12471 · Published 2012-08-30 · Partial fix
Priority LOW 12
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows local users to affect…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00476 · Published 2012-06-16 · Partial fix