Oracle Corp. Java Platform

Name: Oracle Corp. Java Platform
Brand: Oracle Corp.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

10critical49high70medium8low

updated 2026-10-28

vulnerabilities (137)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-3427US	critical9.8OT critical	92.3% (100th)	KEV	no fix	2016-04-21	3 versions
CVE-2015-2590US	critical9.8OT critical	25.5% (98th)	KEV	no fix	2015-07-16	5 versions
CVE-2015-4902US	medium5.0OT critical	13.6% (96th)	KEV	no fix	2015-10-22	3 versions
CVE-2015-0204US	medium4.3	98.7% (100th)	Exploit	no fix	2015-01-09	2 versions
CVE-2017-3241US	critical9.0	32.8% (98th)	Exploit	no fix	2017-01-27	4 versions
CVE-2015-4843US	high10.0	8.93% (95th)	Exploit	no fix	2015-10-21	4 versions
CVE-2016-0483US	high10.0	14.7% (97th)	—	no fix	2016-01-21	4 versions
CVE-2015-8126US	high7.5	10.3% (96th)	—	no fix	2015-11-13	4 versions
CVE-2015-4844US	high10.0	7.51% (94th)	—	no fix	2015-10-21	4 versions
CVE-2016-0494US	high10.0	7.21% (94th)	—	no fix	2016-01-21	4 versions
CVE-2015-0408US	high10.0	6.88% (94th)	—	no fix	2015-01-21	4 versions
CVE-2016-3598US	critical9.6	6.69% (94th)	—	no fix	2016-07-21	2 versions
CVE-2015-4732US	high10.0	6.46% (94th)	—	no fix	2015-07-16	5 versions
CVE-2015-4835US	high10.0	6.42% (94th)	—	no fix	2015-10-21	4 versions
CVE-2015-0469US	high10.0	6.41% (94th)	—	no fix	2015-04-16	4 versions
CVE-2015-2628US	high10.0	6.20% (93rd)	—	no fix	2015-07-16	5 versions
CVE-2014-2490US	high9.3	6.12% (93rd)	—	no fix	2014-07-17	2 versions
CVE-2016-3610US	critical9.6	5.93% (93rd)	—	no fix	2016-07-21	2 versions
CVE-2016-3587US	critical9.6	5.93% (93rd)	—	no fix	2016-07-21	2 versions
CVE-2015-4733US	high10.0	5.77% (93rd)	—	no fix	2015-07-16	5 versions
CVE-2015-4731US	high10.0	5.77% (93rd)	—	no fix	2015-07-16	5 versions
CVE-2016-0636US	high8.1	5.76% (93rd)	—	no fix	2016-03-24	3 versions
CVE-2015-0459US	high10.0	5.72% (93rd)	—	no fix	2015-04-16	4 versions
CVE-2015-2638US	high10.0	5.64% (93rd)	—	no fix	2015-07-16	5 versions
CVE-2014-6513US	high10.0	5.64% (93rd)	—	no fix	2014-10-15	3 versions
CVE-2015-4883US	high10.0	5.61% (93rd)	—	no fix	2015-10-21	4 versions
CVE-2015-4881US	high10.0	5.61% (93rd)	—	no fix	2015-10-21	4 versions
CVE-2015-4860US	high10.0	5.61% (93rd)	—	no fix	2015-10-21	4 versions
CVE-2015-4805US	high10.0	5.61% (93rd)	—	no fix	2015-10-21	4 versions
CVE-2014-4262US	high9.3	5.58% (93rd)	—	no fix	2014-07-17	4 versions
CVE-2014-4219US	high9.3	5.58% (93rd)	—	no fix	2014-07-17	3 versions
CVE-2015-0491US	high10.0	5.57% (93rd)	—	no fix	2015-04-16	4 versions
CVE-2016-3443US	critical9.6	5.48% (93rd)	—	no fix	2016-04-21	3 versions
CVE-2016-0466US	medium5.0	5.45% (93rd)	—	no fix	2016-01-21	4 versions
CVE-2014-4216US	high9.3	5.36% (93rd)	—	no fix	2014-07-17	4 versions
CVE-2014-4227US	high10.0	5.32% (93rd)	—	no fix	2014-07-17	3 versions
CVE-2014-2483US	high9.3	5.23% (92nd)	—	no fix	2014-07-17	7 SE → 7U60 SE
CVE-2015-0458US	high7.6	4.95% (92nd)	—	no fix	2015-04-16	3 versions
CVE-2014-6493US	high7.6	4.88% (92nd)	—	no fix	2014-10-15	3 versions
CVE-2014-4288US	high7.6	4.88% (92nd)	—	no fix	2014-10-15	3 versions
CVE-2015-0460US	high9.3	4.81% (92nd)	—	no fix	2015-04-16	4 versions
CVE-2014-6532US	high9.3	4.81% (92nd)	—	no fix	2014-10-15	3 versions
CVE-2014-6503US	high9.3	4.81% (92nd)	—	no fix	2014-10-15	3 versions
CVE-2015-4868US	high7.6	4.80% (92nd)	—	no fix	2015-10-21	2 versions
CVE-2016-3498US	medium5.3	4.80% (92nd)	—	no fix	2016-07-21	2 versions
CVE-2014-6562US	high9.3	4.78% (92nd)	—	no fix	2014-10-15	8 SE → 8U25 SE
CVE-2014-4223US	high9.3	4.75% (92nd)	—	no fix	2014-07-17	7 SE → 7U60 SE
CVE-2016-0687US	critical9.6	4.72% (92nd)	—	no fix	2016-04-21	4 versions
CVE-2016-0686US	critical9.6	4.72% (92nd)	—	no fix	2016-04-21	4 versions
CVE-2013-6954US	medium5.0	4.69% (92nd)	—	no fix	2014-01-12	3 versions

showing 50 of 137

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-17CWE-17122 CVEs
CWE-284Improper Access Control7 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-254CWE-2545 CVEs
CWE-385Covert Timing Channel3 CVEs
CWE-190Integer Overflow or Wraparound2 CVEs
CWE-358Improperly Implemented Security Check for Standard2 CVEs
CWE-770Allocation of Resources Without Limits or Throttling2 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)137 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan