Oracle Java SE

productDE

cpe:/a:oracle:java_se:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical8high30medium14low

updated 2026-10-28

vulnerabilities (53)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-2655US	medium4.8	3.61% (89th)	Exploit	no fix	2020-01-15	—
CVE-2019-13117US	medium5.3	6.46% (94th)	—	no fix	2019-07-01	—
CVE-2020-2803US	high8.3	6.23% (94th)	—	no fix	2020-04-15	—
CVE-2020-14562US	medium5.0	5.17% (92nd)	—	no fix	2020-07-15	—
CVE-2019-13118US	medium5.3	5.15% (92nd)	—	no fix	2019-07-01	—
CVE-2020-2830US	medium5.3	4.95% (92nd)	—	no fix	2020-04-15	—
CVE-2020-2781US	medium5.3	4.95% (92nd)	—	no fix	2020-04-15	—
CVE-2020-2604US	high8.1	4.88% (92nd)	—	no fix	2020-01-15	—
CVE-2018-2973US	medium5.9	4.67% (92nd)	—	no fix	2018-07-18	—
CVE-2020-14621US	medium5.0	4.47% (91st)	—	no fix	2020-07-15	—
CVE-2019-18197US	high7.5	4.45% (91st)	—	no fix	2019-10-18	—
CVE-2018-2952US	low3.7	4.43% (91st)	—	no fix	2018-07-18	—
CVE-2020-14579US	medium4.3	4.31% (91st)	—	no fix	2020-07-15	—
CVE-2020-14578US	medium4.3	4.31% (91st)	—	no fix	2020-07-15	—
CVE-2020-2601US	medium6.8	4.30% (91st)	—	no fix	2020-01-15	—
CVE-2020-14664US	medium5.1	4.28% (91st)	—	no fix	2020-07-15	—
CVE-2020-2757US	low3.7	4.25% (91st)	—	no fix	2020-04-15	—
CVE-2020-2756US	low3.7	4.25% (91st)	—	no fix	2020-04-15	—
CVE-2020-2659US	low3.7	4.20% (91st)	—	no fix	2020-01-15	—
CVE-2020-2754US	low3.7	4.16% (91st)	—	no fix	2020-04-15	—
CVE-2020-2805US	high8.3	4.05% (91st)	—	no fix	2020-04-15	—
CVE-2020-2583US	low3.7	4.02% (91st)	—	no fix	2020-01-15	—
CVE-2020-2654US	low3.7	3.96% (90th)	—	no fix	2020-01-15	—
CVE-2020-2755US	low3.7	3.93% (90th)	—	no fix	2020-04-15	—
CVE-2020-14583US	medium5.1	3.92% (90th)	—	no fix	2020-07-15	—
CVE-2020-2773US	low3.7	3.88% (90th)	—	no fix	2020-04-15	—
CVE-2020-14593US	medium4.3	3.85% (90th)	—	no fix	2020-07-15	—
CVE-2020-14779US	medium4.3	3.76% (90th)	—	no fix	2020-10-21	—
CVE-2018-2972US	medium5.9	3.58% (89th)	—	no fix	2018-07-18	—
CVE-2020-14573US	medium4.3	3.40% (89th)	—	no fix	2020-07-15	—
CVE-2020-14577US	medium4.3	3.38% (89th)	—	no fix	2020-07-15	—
CVE-2020-2585US	medium5.9	3.32% (89th)	—	no fix	2020-01-15	—
CVE-2020-14581US	medium4.3	3.31% (88th)	—	no fix	2020-07-15	—
CVE-2018-2964US	high8.3	3.21% (88th)	—	no fix	2018-07-18	—
CVE-2020-14803US	medium5.0	3.19% (88th)	—	no fix	2020-10-21	—
CVE-2020-2590US	low3.7	3.16% (88th)	—	no fix	2020-01-15	—
CVE-2018-2940US	medium4.3	3.13% (88th)	—	no fix	2018-07-18	—
CVE-2020-14556US	medium5.8	3.02% (87th)	—	no fix	2020-07-15	—
CVE-2020-2593US	medium4.8	2.97% (87th)	—	no fix	2020-01-15	—
CVE-2020-2800US	medium4.8	2.88% (87th)	—	no fix	2020-04-15	—
CVE-2020-2816US	high7.5	2.77% (86th)	—	no fix	2020-04-15	—
CVE-2020-14798US	low2.6	2.72% (86th)	—	no fix	2020-10-21	—
CVE-2018-2941US	high8.3	2.58% (85th)	—	no fix	2018-07-18	—
CVE-2020-2764US	low3.7	2.53% (85th)	—	no fix	2020-04-15	—
CVE-2020-14796US	low2.6	2.49% (85th)	—	no fix	2020-10-21	—
CVE-2020-2778US	low3.7	2.36% (84th)	—	no fix	2020-04-15	—
CVE-2020-14781US	medium4.3	2.32% (83rd)	—	no fix	2020-10-21	—
CVE-2020-14782US	medium4.3	2.27% (83rd)	—	no fix	2020-10-21	—
CVE-2020-14792US	medium5.8	2.23% (83rd)	—	no fix	2020-10-21	—
CVE-2020-14797US	medium4.3	2.20% (82nd)	—	no fix	2020-10-21	—

showing 50 of 53

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation22 CVEs
CWE-264CWE-26415 CVEs
CWE-284Improper Access Control7 CVEs
CWE-269Improper Privilege Management4 CVEs
CWE-770Allocation of Resources Without Limits or Throttling4 CVEs
CWE-502Deserialization of Untrusted Data3 CVEs
CWE-755Improper Handling of Exceptional Conditions3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)53 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan