Vulnerabilities

TI-2023-08419 CVE-2023-22049 · GHSA-vp7m-m4v3-gxc5

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM…

LOW 21

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01457 Published 2023-07-18 Partial fix

TI-2023-08415 CVE-2023-22045 · GHSA-p276-58r4-6c33

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM…

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01308 Published 2023-07-18 Partial fix

TI-2023-08411 CVE-2023-22041 · GHSA-rgxf-494f-377c

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM…

LOW 24

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.0048 Published 2023-07-18 Partial fix

TI-2023-08406 CVE-2023-22036 · GHSA-mw33-48wm-m4r2

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM…

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Utility).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01256 Published 2023-07-18 Partial fix

TI-2023-08377 CVE-2023-22006 · GHSA-c36p-x44h-8wcq

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM…

LOW 17

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking).

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.0094 Published 2023-07-18 Partial fix

TI-2023-13226 CVE-2023-28709 · GHSA-cx6h-86xw-9x34

Apache Tomcat: Fix for CVE-2023-24998 is incomplete

HIGH 69

The fix for CVE-2023-24998 was incomplete for Apache Tomcat 11.0.0-M2 to 11.0.0-M4, 10.1.5 to 10.1.7, 9.0.71 to 9.0.73 and 8.5.85 to 8.5.87.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.48031 Published 2023-05-22 Partial fix · 11.0.0-M5, 10.1.8 +2 CWE-193

TI-2023-08340 CVE-2023-21968 · GHSA-r6j2-4r52-mpg7

Improper access control in Oracle Java SE JDK and JRE

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01036 Published 2023-04-18 Partial fix CWE-284

TI-2023-08339 CVE-2023-21967 · GHSA-wg7x-fvjp-r3fx

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01523 Published 2023-04-18 Partial fix

TI-2023-08328 CVE-2023-21954 · GHSA-8x3h-4f64-v6v6

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 29

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01421 Published 2023-04-18 Partial fix

TI-2023-08314 CVE-2023-21939 · GHSA-xfrf-5cgw-f964

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 29

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02474 Published 2023-04-18 Partial fix

TI-2023-08313 CVE-2023-21938 · GHSA-9pqg-44mx-r5gr

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01208 Published 2023-04-18 Partial fix

TI-2023-08312 CVE-2023-21937 · GHSA-vr26-5f5w-r829

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01208 Published 2023-04-18 Partial fix

TI-2023-08305 CVE-2023-21930 · GHSA-4j35-7cr4-3mc8

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 37

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01295 Published 2023-04-18 Partial fix

TI-2022-18771 CVE-2022-39399 · GHSA-pvgf-45fp-3xpp

Improper access control in Oracle Java SE JDK and JRE

LOW 22

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.02037 Published 2022-10-18 Partial fix CWE-284

TI-2022-06007 CVE-2022-21628 · GHSA-34g7-gffm-5gm5

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02879 Published 2022-10-18 Partial fix

TI-2022-06005 CVE-2022-21626 · GHSA-33pw-h52r-5vpg

Protection mechanism failure in Oracle Java SE JDK and JRE

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02433 Published 2022-10-18 Partial fix CWE-693

TI-2022-06003 CVE-2022-21624 · GHSA-h547-5jph-p9qq

Deserialization of untrusted data in Oracle Java SE JDK and JRE

LOW 22

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01965 Published 2022-10-18 Partial fix CWE-502

TI-2022-05998 CVE-2022-21619 · GHSA-3ggq-p922-54qp

Improper access control in Oracle Java SE JDK and JRE

LOW 24

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.03328 Published 2022-10-18 Partial fix CWE-284

TI-2022-05997 CVE-2022-21618 · GHSA-wq9f-w2rj-j5wc

Improper authentication in Oracle Java SE JDK and JRE

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02811 Published 2022-10-18 Partial fix CWE-287

TI-2022-15084 CVE-2022-34169 · GHSA-9339-86wc-4qgf

Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

HIGH 79

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.81759 Published 2022-07-19 Partial fix · 2.7.3 CWE-681

TI-2022-05929 CVE-2022-21549 · GHSA-c786-7jf2-46w9

Deserialization of untrusted data in Oracle Java SE JDK and JRE

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02523 Published 2022-07-19 Fixed CWE-502

TI-2022-05921 CVE-2022-21541 · GHSA-vrhf-cc97-jx2x

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 34

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.02882 Published 2022-07-19 Partial fix

TI-2022-05920 CVE-2022-21540 · GHSA-975q-8v3h-8j23

Use after free in Oracle Java SE JDK and JRE

LOW 37

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.04167 Published 2022-07-19 Partial fix CWE-416

TI-2022-05834 CVE-2022-21449 · GHSA-cj8x-r9fp-q656

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

HIGH 78

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.77151 Published 2022-04-19 Fixed

TI-2022-05819 CVE-2022-21434 · GHSA-3qf2-7xvh-j2fx

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 29

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02562 Published 2022-04-19 Partial fix

Vulnerabilities

Filters