Vulnerabilities

TI-2023-08221 CVE-2023-21843 · GHSA-w383-47g8-vfg7

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01406 Published 2023-01-17 Partial fix

TI-2023-08213 CVE-2023-21835 · GHSA-wqgc-h828-9g98

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 34

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01886 Published 2023-01-17 Partial fix

TI-2023-08208 CVE-2023-21830 · GHSA-xw85-qpwr-ch8h

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 26

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01087 Published 2023-01-17 Partial fix

TI-2022-18771 CVE-2022-39399 · GHSA-pvgf-45fp-3xpp

Improper access control in Oracle Java SE JDK and JRE

LOW 22

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.02037 Published 2022-10-18 Partial fix CWE-284

TI-2022-06007 CVE-2022-21628 · GHSA-34g7-gffm-5gm5

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02879 Published 2022-10-18 Partial fix

TI-2022-06005 CVE-2022-21626 · GHSA-33pw-h52r-5vpg

Protection mechanism failure in Oracle Java SE JDK and JRE

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02433 Published 2022-10-18 Partial fix CWE-693

TI-2022-06003 CVE-2022-21624 · GHSA-h547-5jph-p9qq

Deserialization of untrusted data in Oracle Java SE JDK and JRE

LOW 22

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01965 Published 2022-10-18 Partial fix CWE-502

TI-2022-05998 CVE-2022-21619 · GHSA-3ggq-p922-54qp

Improper access control in Oracle Java SE JDK and JRE

LOW 24

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.03328 Published 2022-10-18 Partial fix CWE-284

TI-2022-05997 CVE-2022-21618 · GHSA-wq9f-w2rj-j5wc

Improper authentication in Oracle Java SE JDK and JRE

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02811 Published 2022-10-18 Partial fix CWE-287

TI-2022-15084 CVE-2022-34169 · GHSA-9339-86wc-4qgf

Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

HIGH 79

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.81759 Published 2022-07-19 Partial fix · 2.7.3 CWE-681

TI-2022-05929 CVE-2022-21549 · GHSA-c786-7jf2-46w9

Deserialization of untrusted data in Oracle Java SE JDK and JRE

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02523 Published 2022-07-19 Fixed CWE-502

TI-2022-05921 CVE-2022-21541 · GHSA-vrhf-cc97-jx2x

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 34

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.02882 Published 2022-07-19 Partial fix

TI-2022-05920 CVE-2022-21540 · GHSA-975q-8v3h-8j23

Use after free in Oracle Java SE JDK and JRE

LOW 37

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.04167 Published 2022-07-19 Partial fix CWE-416

TI-2022-05880 CVE-2022-21496 · GHSA-ph68-gfg8-7cjx

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02805 Published 2022-04-19 Partial fix

TI-2022-05861 CVE-2022-21476 · GHSA-8w54-76vf-9qxj

Improper access control in Oracle Java SE JDK and JRE

MEDIUM 46

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04046 Published 2022-04-19 Partial fix CWE-284

TI-2022-05834 CVE-2022-21449 · GHSA-cj8x-r9fp-q656

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

HIGH 78

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.77151 Published 2022-04-19 Fixed

TI-2022-05828 CVE-2022-21443 · GHSA-gwg7-339c-3h88

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 23

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.02729 Published 2022-04-19 Partial fix

TI-2022-05819 CVE-2022-21434 · GHSA-3qf2-7xvh-j2fx

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 29

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02562 Published 2022-04-19 Partial fix

TI-2022-05812 CVE-2022-21426 · GHSA-3g8v-2w9j-wwcx

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 36

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03177 Published 2022-04-19 Partial fix

TI-2018-15259 CVE-2018-25032 · GHSA-jc36-42cf-vqwj

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if…

HIGH 72

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.51733 Published 2022-03-25 Fixed in 1.13.4 CWE-787

Vulnerabilities

Filters