Sun

Records1603All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical290CVSS 9.0–10.0

CVSS high436CVSS 7.0–8.9

Exploited now

Sun records in CISA KEV

TI-2013-02212 Oracle Java SE Unspecified Vulnerability CRITICAL 100KEV 2022-03-28 TI-2012-00455 Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability CRITICAL 100KEV 2022-03-03

Components

Products in the NVD configurations · select one to filter the records

Sunos 561 records CRITICAL Solaris 450 records CRITICAL Jre 423 records CRITICAL Jdk 392 records CRITICAL Sdk 126 records CRITICAL Opensolaris 113 records HIGH Java System Web Server 32 records HIGH Java System Application Server 22 records HIGH

Records

423 records in Jre · all components

TI-2013-02212 CVE-2013-2465 · GHSA-498p-qg8p-wgxg

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

CRITICAL 100KEV

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98773 Published 2013-06-18 Fixed CWE-693

TI-2012-00455 CVE-2012-0507 · GHSA-43xj-964v-hcjf

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

CRITICAL 100KEV

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98189 Published 2012-06-07 Partial fix CWE-843

TI-2013-01300 CVE-2013-1493 · GHSA-v3wr-hv3w-x2rj

The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update…

CRITICAL 85

The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.86151 Published 2013-03-04 Fixed CWE-119

TI-2008-05098 CVE-2008-5353 · GHSA-3fx3-qcjv-qr6h

The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and…

CRITICAL 85

The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during des…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.86081 Published 2008-12-05 Fixed

TI-2010-04185 CVE-2010-4452 · GHSA-mq39-jwgr-3jxw

Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE)…

HIGH 84

Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote untrusted Java Web Start applications and untrusted Ja…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.83037 Published 2011-02-17 Fixed

TI-2010-03392 CVE-2010-3563 · GHSA-fj9r-jhxx-vm9v

Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for…

HIGH 84

Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.8425 Published 2010-10-19 Fixed

TI-2010-03381 CVE-2010-3552 · GHSA-3rv7-vfgw-fvwj

Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java…

HIGH 83

Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.8074 Published 2010-10-19 Fixed

TI-2012-01342 CVE-2012-1533 · GHSA-39xq-q2rq-4395

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

HIGH 80

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availabil…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.69037 Published 2012-10-16 Partial fix

TI-2010-00847 CVE-2010-0886 · GHSA-8wr7-r8m6-cw65

Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and…

HIGH 80

Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 19 allows remote attackers to affect confidentiality, integrity, and availability…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.69949 Published 2010-04-20 Fixed

TI-2009-03675 CVE-2009-3867 · GHSA-h62j-9mvm-r9mf

Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK…

HIGH 78

Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.73193 Published 2009-11-05 Fixed CWE-119

TI-2012-00448 CVE-2012-0500 · GHSA-5845-68q3-8r26

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

HIGH 77

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and JavaFX 2.0.2 and earlier allows remote untrusted Java Web Start application…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.5804 Published 2012-02-15 Partial fix

TI-2009-03677 CVE-2009-3869 · GHSA-xf34-q2g4-cjm6

Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit…

HIGH 76

Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JR…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.65353 Published 2009-11-05 Fixed CWE-119

TI-2010-00093 CVE-2010-0094 · GHSA-6pp2-r37j-3rhq

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and…

HIGH 73

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.80813 Published 2010-04-01 Fixed

TI-2011-03134 CVE-2011-3556 · GHSA-x97f-rpv2-wwmc

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK…

HIGH 72

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.76405 Published 2011-10-19 Partial fix

TI-2010-00803 CVE-2010-0842 · GHSA-5mqp-g99f-6r5f

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business…

HIGH 72

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability v…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.77721 Published 2010-04-01 Fixed

TI-2008-02976 CVE-2008-3112 · GHSA-f5xr-w782-5rg9

Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7…

MEDIUM 64

Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.25727 Published 2008-07-09 Fixed CWE-264

TI-2013-02219 CVE-2013-2472 · GHSA-gjv2-jp2h-jxjh

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 63

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.22988 Published 2013-06-18 Fixed

TI-2013-02217 CVE-2013-2470 · GHSA-x8gh-hfwx-cvcw

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 63

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.22988 Published 2013-06-18 Fixed

TI-2013-02218 CVE-2013-2471 · GHSA-527c-rv7j-wxgp

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 59

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.15022 Published 2013-06-18 Fixed

TI-2008-01142 CVE-2008-1190 · GHSA-m6g6-6pj7-xcc2

Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier…

MEDIUM 57

Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to gain privileges via an untrusted application,…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.16899 Published 2008-03-06 Fixed CWE-264

TI-2004-00934 CVE-2004-1029 · GHSA-fx66-7j9p-32m3

The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04…

MEDIUM 57

The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allo…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.17018 Published 2004-11-24 No fix listed CWE-264

TI-2013-01378 CVE-2013-1571 · GHSA-hq68-fx39-9xch

Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and…

MEDIUM 56

Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to af…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.66921 Published 2013-06-18 Fixed

TI-2013-00690 CVE-2013-0809 · GHSA-qv6m-9ccr-3jxp

Unspecified vulnerability in the 2D component in the Java Runtime Environment (JRE)…

MEDIUM 56

Unspecified vulnerability in the 2D component in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to e…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.10753 Published 2013-03-04 Fixed

TI-2012-01347 CVE-2012-1541 · GHSA-vcjx-5v7q-4697

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java…

MEDIUM 56

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via u…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.10924 Published 2013-02-02 Partial fix

TI-2007-04838 CVE-2007-5019 · GHSA-c5xr-m2wm-p2c8

Buffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment…

MEDIUM 56

Buffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment (JRE) 1.6.0_X allows remote attackers to have an unknown impact via a long argument to the dnsResolve (isInstalled.dnsResolve) method.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.10465 Published 2007-09-20 No fix listed CWE-119

Open these records in search →

Critical	290
High	436
Medium	704
Low	170
No CVSS	3