Oracle

Records14201All Threatist records

Exploited (KEV)82In CISA KEV

CVSS critical1606CVSS 9.0–10.0

CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV

TI-2015-04610 ISC BIND Data Processing Errors Vulnerability CRITICAL 92KEV 2026-10-08 TI-2016-02580 Apache Struts Command Injection Vulnerability CRITICAL 94KEV 2026-10-08 TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CRITICAL 93KEV 2026-08-26 TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 100KEV 2026-08-24 TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability CRITICAL 100KEV 2026-07-15 TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records

Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

98 records in Openjdk · all components

TI-2022-15084 CVE-2022-34169 · GHSA-9339-86wc-4qgf

Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

HIGH 79

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.81759 Published 2022-07-19 Partial fix · 2.7.3 CWE-681

TI-2013-00358 CVE-2013-0431 · GHSA-h3cw-j9j9-5pc4

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

HIGH 75KEV

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified ve…

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.9015 Published 2013-01-31 Partial fix CWE-693

TI-2021-14286 CVE-2021-35559 · GHSA-q7w5-cq9g-vhw8

Uncontrolled resource consumption in Oracle Java SE JDK and JRE

MEDIUM 63

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.159 Published 2021-10-20 Partial fix CWE-400

TI-2021-14283 CVE-2021-35556 · GHSA-rx4c-whwx-3x45

Protection mechanism failure in Oracle Java SE JDK and JRE

MEDIUM 63

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.08395 Published 2021-10-20 Partial fix CWE-693

TI-2021-02476 CVE-2021-3517 · GHSA-jw9f-hh49-cvp9

Out-of-bounds write in libxml2

MEDIUM 60

There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.16986 Published 2021-05-19 Partial fix · 1.11.4 CWE-787

TI-2022-05732 CVE-2022-21341 · GHSA-m2jc-h86g-63rm

Deserialization of untrusted data in Oracle Java SE JDK and JRE

MEDIUM 57

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03765 Published 2022-01-19 Partial fix CWE-502

TI-2014-07249 CVE-2014-8873 · GHSA-8crp-v9pf-hp45

A .desktop file in the Debian openjdk-7 package 7u79-2.5.5-1~deb8u1 includes a MIME type…

MEDIUM 50

A .desktop file in the Debian openjdk-7 package 7u79-2.5.5-1~deb8u1 includes a MIME type registration that is added to /etc/mailcap by mime-support, which allows remote attackers to execute arbitrary code via a JAR file.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04545 Published 2015-11-09 No fix listed CWE-20

TI-2014-01992 CVE-2014-2483 · GHSA-9pmr-9fpq-fq64

Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u60 and…

MEDIUM 48

Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u60 and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a d…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05233 Published 2014-07-17 Fixed

TI-2020-02502 CVE-2020-2803 · GHSA-7q6q-6j5w-jcg9

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

MEDIUM 47

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.0623 Published 2020-04-15 Partial fix

TI-2014-01915 CVE-2014-2405 · GHSA-vjx6-8q4g-9hpf

Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04…

MEDIUM 47

Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different vulnerability than CVE-2014-0462.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02279 Published 2014-05-14 No fix listed

TI-2014-00441 CVE-2014-0462 · GHSA-8888-mf86-7q3h

Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04…

MEDIUM 47

Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different vulnerability than CVE-2014-2405.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02279 Published 2014-05-14 No fix listed

TI-2022-05861 CVE-2022-21476 · GHSA-8w54-76vf-9qxj

Improper access control in Oracle Java SE JDK and JRE

MEDIUM 46

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04046 Published 2022-04-19 Partial fix CWE-284

TI-2020-11432 CVE-2020-14583 · GHSA-7cv6-52m7-636w

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

MEDIUM 45

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.0392 Published 2020-07-15 Partial fix

TI-2020-02504 CVE-2020-2805 · GHSA-rjrq-hcmw-c76j

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component…

MEDIUM 45

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.04051 Published 2020-04-15 Partial fix

TI-2020-02307 CVE-2020-2604 · GHSA-c9rv-f9qq-jjvf

Deserialization of untrusted data in Oracle Java

MEDIUM 45

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04881 Published 2020-01-15 Fixed CWE-502

TI-2020-02515 CVE-2020-2816 · GHSA-wq43-mwf7-pm7c

Vulnerability in the Java SE product of Oracle Java SE (component: JSSE).

MEDIUM 44

Vulnerability in the Java SE product of Oracle Java SE (component: JSSE).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02766 Published 2020-04-15 Fixed

TI-2021-14287 CVE-2021-35560 · GHSA-q6fp-hjwx-q999

Vulnerability in the Java SE product of Oracle Java SE (component: Deployment).

MEDIUM 43

Vulnerability in the Java SE product of Oracle Java SE (component: Deployment).

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.0483 Published 2021-10-20 Fixed

TI-2024-13745 CVE-2024-20952 · GHSA-343v-9ccv-7535

Improper access control in Oracle Java SE JDK and JRE

MEDIUM 42

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00918 Published 2024-01-16 Partial fix CWE-284

TI-2021-02057 CVE-2021-2388 · GHSA-4h93-46mq-wpq9

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE…

MEDIUM 42

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.04008 Published 2021-07-20 Partial fix

TI-2013-02208 CVE-2013-2461 · GHSA-xp47-mpxp-9h7v

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 42

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier; the Oracle JRockit component in Oracle Fusion Middleware R27.7.5 and earlie…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06746 Published 2013-06-18 Fixed

TI-2022-05731 CVE-2022-21340 · GHSA-78gw-5p6w-hw23

Uncontrolled resource consumption in Oracle Java SE JDK and JRE

MEDIUM 41

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.07748 Published 2022-01-19 Partial fix CWE-400

TI-2022-05684 CVE-2022-21293 · GHSA-xwxc-rh9r-2448

Uncontrolled resource consumption in Oracle Java SE JDK and JRE

MEDIUM 41

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.08346 Published 2022-01-19 Partial fix CWE-400

TI-2021-14312 CVE-2021-35586 · GHSA-wr3h-rppv-6cm3

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE…

MEDIUM 40

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0679 Published 2021-10-20 Partial fix

TI-2021-14305 CVE-2021-35578 · GHSA-2rqw-4rc9-x55v

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE…

MEDIUM 40

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.06679 Published 2021-10-20 Partial fix

TI-2021-14292 CVE-2021-35565 · GHSA-fgv2-95mg-h2m9

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE…

MEDIUM 40

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.07395 Published 2021-10-20 Partial fix

Open these records in search →

Critical	1606
High	4615
Medium	6805
Low	1173
No CVSS	2