IBM Java

Name: IBM Java
Brand: IBM

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical3high1medium0low

updated 2026-10-28

vulnerabilities (30)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-30749US	—	1.27% (70th)	Exploit	8.0.8.50	2025-07-15	< 8.0.8.50
CVE-2025-30761US	—	5.23% (92nd)	—	8.0.8.50	2025-07-15	< 8.0.8.50
CVE-2024-20926US	—	1.03% (64th)	—	7.1.5.21	2024-01-16	2 versions
CVE-2024-20921US	—OT elevated	0.86% (58th)	—	8.0.8.20	2024-02-17	2 versions
CVE-2024-21003US	—	0.86% (58th)	—	7.1.5.22	2024-04-16	2 versions
CVE-2024-21005US	—	0.85% (58th)	—	8.0.8.25	2024-04-16	2 versions
CVE-2024-20919US	—	0.80% (56th)	—	7.1.5.21	2024-02-17	2 versions
CVE-2024-20932US	—	0.78% (56th)	—	7.1.5.21	2024-01-16	2 versions
CVE-2025-50106US	—	0.75% (55th)	—	8.0.8.50	2025-07-15	< 8.0.8.50
CVE-2025-30752US	—	0.67% (52nd)	—	8.0.8.50	2025-07-15	< 8.0.8.50
CVE-2025-50059US	—	0.61% (49th)	—	8.0.8.50	2025-07-15	< 8.0.8.50
CVE-2023-30441US	high7.5OT elevated	0.60% (49th)	—	no fix	2023-04-29	≤ 8.0.7.0 ≤8.0.7.11
CVE-2024-20923US	—	0.60% (49th)	—	7.1.5.21	2024-02-17	2 versions
CVE-2024-21098US	—	0.57% (47th)	—	7.1.5.22	2024-04-16	2 versions
CVE-2019-4732US	medium6.5	0.54% (45th)	—	no fix	2020-02-03	6 versions
CVE-2024-20954US	—	0.53% (45th)	—	7.1.5.22	2024-04-16	2 versions
CVE-2024-20955US	—	0.52% (44th)	—	8.0.8.20	2024-01-16	2 versions
CVE-2025-30754US	—	0.47% (41st)	—	8.0.8.50	2025-07-15	< 8.0.8.50
CVE-2023-22051US	—	0.47% (41st)	—	8.0.8.10	2023-07-18	2 versions
CVE-2019-4473US	high7.8	0.45% (39th)	—	no fix	2019-08-05	3 versions
CVE-2023-22091US	—	0.43% (37th)	—	7.1.5.20	2023-10-17	2 versions
CVE-2024-20945US	—	0.41% (36th)	—	7.1.5.21	2024-02-17	2 versions
CVE-2025-61748US	—	0.39% (33rd)	—	7.1.5.28	2025-10-21	2 versions
CVE-2024-21004US	—OT elevated	0.35% (29th)	—	8.0.8.25	2024-04-16	2 versions
CVE-2024-21002US	—OT elevated	0.35% (29th)	—	8.0.8.25	2024-04-16	2 versions
CVE-2025-50065US	—	0.35% (29th)	—	8.0.8.50	2025-07-15	< 8.0.8.50
CVE-2024-20922US	—	0.30% (23rd)	—	7.1.5.21	2024-01-16	2 versions
CVE-2025-50063US	—	0.29% (22nd)	—	8.0.8.50	2025-07-15	< 8.0.8.50
CVE-2025-61755US	—OT elevated	0.26% (18th)	—	8.0.8.55	2025-10-21	2 versions
CVE-2024-3933US	high7.3	0.21% (11th)	—	8.0.8.25	2024-05-27	< 8.0.8.25

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation16 CVEs
CWE-284Improper Access Control5 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-285Improper Authorization4 CVEs
CWE-276Incorrect Default Permissions3 CVEs
CWE-502Deserialization of Untrusted Data2 CVEs
CWE-693Protection Mechanism Failure2 CVEs
CWE-125Out-of-bounds Read1 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)27 CVEs
EUEU Vulnerability Database (ENISA)3 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan