Vulnerabilities

TI-2024-13745 CVE-2024-20952 · GHSA-343v-9ccv-7535

Improper access control in Oracle Java SE JDK and JRE

MEDIUM 42

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00918 Published 2024-01-16 Partial fix CWE-284

TI-2023-08340 CVE-2023-21968 · GHSA-r6j2-4r52-mpg7

Improper access control in Oracle Java SE JDK and JRE

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01036 Published 2023-04-18 Partial fix CWE-284

TI-2023-08339 CVE-2023-21967 · GHSA-wg7x-fvjp-r3fx

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01523 Published 2023-04-18 Partial fix

TI-2023-08328 CVE-2023-21954 · GHSA-8x3h-4f64-v6v6

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 29

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01421 Published 2023-04-18 Partial fix

TI-2023-08314 CVE-2023-21939 · GHSA-xfrf-5cgw-f964

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 29

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02474 Published 2023-04-18 Partial fix

TI-2023-08313 CVE-2023-21938 · GHSA-9pqg-44mx-r5gr

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01208 Published 2023-04-18 Partial fix

TI-2023-08312 CVE-2023-21937 · GHSA-vr26-5f5w-r829

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01208 Published 2023-04-18 Partial fix

TI-2023-08305 CVE-2023-21930 · GHSA-4j35-7cr4-3mc8

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 37

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01295 Published 2023-04-18 Partial fix

TI-2022-15084 CVE-2022-34169 · GHSA-9339-86wc-4qgf

Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

HIGH 79

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.81759 Published 2022-07-19 Partial fix · 2.7.3 CWE-681

TI-2022-05921 CVE-2022-21541 · GHSA-vrhf-cc97-jx2x

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 34

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.02882 Published 2022-07-19 Partial fix

TI-2022-05920 CVE-2022-21540 · GHSA-975q-8v3h-8j23

Use after free in Oracle Java SE JDK and JRE

LOW 37

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.04167 Published 2022-07-19 Partial fix CWE-416

TI-2022-05861 CVE-2022-21476 · GHSA-8w54-76vf-9qxj

Improper access control in Oracle Java SE JDK and JRE

MEDIUM 46

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04046 Published 2022-04-19 Partial fix CWE-284

TI-2022-05756 CVE-2022-21366 · GHSA-hgv5-w5qv-cpfg

Uncontrolled resource consumption in Oracle Java SE JDK and JRE

LOW 36

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03007 Published 2022-01-19 Fixed CWE-400

TI-2022-05755 CVE-2022-21365 · GHSA-g272-mw8v-rcqj

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 36

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03486 Published 2022-01-19 Partial fix

TI-2022-05750 CVE-2022-21360 · GHSA-crw7-qg66-gv9w

Uncontrolled resource consumption in Oracle Java SE JDK and JRE

LOW 36

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03486 Published 2022-01-19 Partial fix CWE-400

TI-2022-05739 CVE-2022-21349 · GHSA-mv36-g4g7-p396

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 36

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03306 Published 2022-01-19 No fix listed

TI-2022-05732 CVE-2022-21341 · GHSA-m2jc-h86g-63rm

Deserialization of untrusted data in Oracle Java SE JDK and JRE

MEDIUM 57

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03765 Published 2022-01-19 Partial fix CWE-502

TI-2022-05731 CVE-2022-21340 · GHSA-78gw-5p6w-hw23

Uncontrolled resource consumption in Oracle Java SE JDK and JRE

MEDIUM 41

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.07748 Published 2022-01-19 Partial fix CWE-400

TI-2022-05696 CVE-2022-21305 · GHSA-w84w-x3w7-4xp3

Improper access control in Oracle Java SE JDK and JRE

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02755 Published 2022-01-19 Partial fix CWE-284

TI-2022-05690 CVE-2022-21299 · GHSA-9j45-cjg7-r8w4

Uncontrolled resource consumption in Oracle Java SE JDK and JRE

LOW 36

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03458 Published 2022-01-19 Partial fix CWE-400

TI-2022-05687 CVE-2022-21296 · GHSA-cjp9-fpg3-7wj6

Information disclosure in Oracle Java SE JDK and JRE

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02825 Published 2022-01-19 Partial fix CWE-200

TI-2022-05685 CVE-2022-21294 · GHSA-rjph-cvj3-vf23

Resource allocation without limits in Oracle Java SE JDK and JRE

LOW 36

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0335 Published 2022-01-19 Partial fix CWE-770

TI-2022-05684 CVE-2022-21293 · GHSA-xwxc-rh9r-2448

Uncontrolled resource consumption in Oracle Java SE JDK and JRE

MEDIUM 41

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.08346 Published 2022-01-19 Partial fix CWE-400

TI-2022-05682 CVE-2022-21291 · GHSA-7fgq-gfjm-hcr8

Improper access control in Oracle Java SE JDK and JRE

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02896 Published 2022-01-19 Fixed CWE-284

TI-2022-05674 CVE-2022-21283 · GHSA-g325-5mrh-jpx2

Protection mechanism failure in Oracle Java SE JDK and JRE

LOW 37

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03782 Published 2022-01-19 Partial fix CWE-693

Vulnerabilities

Filters