oracle jdk

Name: oracle jdk
Brand: oracle

productUS

cpe:2.3:a:oracle:jdk:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

35critical261high331medium76low

updated 2026-10-27

vulnerabilities (805)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2012-4681US	critical9.8OT critical	98.5% (100th)	KEV	no fix	2012-08-28	2 versions
CVE-2013-0422US	high10.0OT critical	97.0% (100th)	KEV	no fix	2013-01-10	= 1.7.0
CVE-2011-3544US	critical9.8OT critical	96.7% (100th)	KEV	1.6.0	2011-10-19	3 versions
CVE-2012-1723US	high10.0OT critical	93.6% (100th)	KEV	no fix	2012-06-16	4 versions
CVE-2023-41993US	high8.8OT critical	24.3% (98th)	KEV	no fix	2023-09-21	= 1.8.0
CVE-2016-3427US	critical9.8OT critical	92.3% (100th)	KEV	no fix	2016-04-21	3 versions
CVE-2015-2590US	critical9.8OT critical	25.5% (98th)	KEV	no fix	2015-07-16	3 versions
CVE-2015-4902US	medium5.0OT critical	13.6% (96th)	KEV	no fix	2015-10-22	3 versions
CVE-2015-4000US	low3.7OT high	99.9% (100th)	Exploit	no fix	2015-05-21	3 versions
CVE-2013-1488US	high10.0	87.2% (100th)	Exploit	no fix	2013-03-08	= 1.7.0
CVE-2013-1493US	high10.0	86.2% (100th)	Exploit	no fix	2013-03-05	6 versions
CVE-2022-34169US	high7.5	81.8% (100th)	Exploit	no fix	2022-07-19	5 versions
CVE-2012-5088US	high10.0	78.7% (100th)	Exploit	no fix	2012-10-16	2 versions
CVE-2022-21449US	medium5.0	77.2% (100th)	Exploit	no fix	2022-04-19	2 versions
CVE-2013-2460US	high9.3	70.0% (99th)	Exploit	no fix	2013-06-18	2 versions
CVE-2012-1533US	high10.0	69.0% (99th)	Exploit	no fix	2012-10-16	4 versions
CVE-2014-6593US	medium4.0	66.4% (99th)	Exploit	no fix	2015-01-21	4 versions
CVE-2012-5067US	medium5.0	64.0% (99th)	Exploit	no fix	2012-10-16	2 versions
CVE-2010-1423US	high9.3	55.6% (99th)	Exploit	no fix	2010-04-15	2 versions
CVE-2012-5081US	medium5.0	45.1% (99th)	Exploit	no fix	2012-10-16	6 versions
CVE-2017-3241US	critical9.0	32.8% (98th)	Exploit	no fix	2017-01-27	3 versions
CVE-2013-4002US	high7.1	24.7% (98th)	Exploit	no fix	2013-07-23	3 versions
CVE-2013-2472US	high10.0	23.0% (98th)	Exploit	no fix	2013-06-18	6 versions
CVE-2013-2470US	high10.0	23.0% (98th)	Exploit	no fix	2013-06-18	6 versions
CVE-2013-2419US	medium5.0	22.6% (98th)	Exploit	no fix	2013-04-17	6 versions
CVE-2013-5842US	high10.0	17.6% (97th)	Exploit	no fix	2013-10-16	3 versions
CVE-2013-1491US	high10.0	16.4% (97th)	Exploit	no fix	2013-03-08	= 1.7.0
CVE-2017-10355US	medium5.3	16.2% (97th)	Exploit	no fix	2017-10-19	4 versions
CVE-2012-0547US	low0.0	12.5% (96th)	Exploit	no fix	2012-08-30	3 versions
CVE-2019-2698US	high8.1	12.0% (96th)	Exploit	no fix	2019-04-23	2 versions
CVE-2019-2697US	high8.1	11.5% (96th)	Exploit	no fix	2019-04-23	2 versions
CVE-2012-0551US	medium5.8	11.4% (96th)	Exploit	no fix	2012-05-03	4 versions
CVE-2015-4843US	high10.0	8.93% (95th)	Exploit	no fix	2015-10-21	3 versions
CVE-2017-10309US	high7.1	8.79% (95th)	Exploit	no fix	2017-10-19	2 versions
CVE-2013-2416US	medium4.3	8.77% (95th)	Exploit	no fix	2013-04-17	2 versions
CVE-2022-21340US	medium5.0	7.75% (95th)	Exploit	no fix	2022-01-19	4 versions
CVE-2020-2655US	medium4.8	3.61% (89th)	Exploit	no fix	2020-01-15	2 versions
CVE-2023-21939US	—	2.50% (85th)	Exploit	no fix	2023-04-18	4 versions
CVE-2019-10219US	medium6.1	2.16% (82nd)	Exploit	no fix	2019-11-08	= 11.0.13
CVE-2025-30749US	—	1.27% (70th)	Exploit	no fix	2025-07-15	5 versions
CVE-2026-22016US	—	0.70% (53rd)	Exploit	no fix	2026-04-21	6 versions
CVE-2026-22018US	—	0.27% (19th)	Exploit	no fix	2026-04-21	6 versions
CVE-2026-22013US	—OT elevated	0.26% (17th)	Exploit	no fix	2026-04-21	6 versions
CVE-2026-22008US	—	0.21% (11th)	Exploit	no fix	2026-04-21	= 25.0.1
CVE-2026-22007US	—OT elevated	0.12% (2nd)	Exploit	no fix	2026-04-21	6 versions
CVE-2026-22003US	—	0.10% (1st)	Exploit	no fix	2026-04-21	= 1.8.0
CVE-2013-1571US	medium4.3	66.9% (99th)	—	no fix	2013-06-18	6 versions
CVE-2015-4748US	high7.6	44.9% (99th)	—	no fix	2015-07-16	3 versions
CVE-2019-2684US	medium5.9	37.6% (99th)	—	no fix	2019-04-23	4 versions
CVE-2009-2625US	medium5.0	30.4% (98th)	—	no fix	2009-08-06	2 versions

showing 50 of 805

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation136 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor128 CVEs
CWE-17CWE-17119 CVEs
CWE-284Improper Access Control86 CVEs
CWE-269Improper Privilege Management50 CVEs
CWE-461CWE-46150 CVEs
CWE-266Incorrect Privilege Assignment49 CVEs
CWE-400Uncontrolled Resource Consumption33 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE805 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan