What the history shows
The vulnerability history shows 98 total CVEs with a maximum CVSS score of 10.0 and 1 known exploited vulnerability, with the most recent CVE recorded on 2024-01-17.
How to stay safe
Operators should regularly monitor installed versions and remain on actively supported release lines to stay secure.
Check your version
java -versionAffected version lines
Known vulnerabilities
| CVE | Title | Affected versions | CVSS | Exploited | EPSS | Published |
|---|---|---|---|---|---|---|
| CVE-2013-0431 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 1... | = 7 | 3.7 | KEV | 90.1% | 2013-01-31 |
| CVE-2024-20952 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac... | ≥ 11 < 11.0.24 ≥ 17 < 17.0.10 ≥ 21 < 21.0.2 | 7.4 | — | 2024-01-17 | |
| CVE-2023-21968 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... | ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 = 8 | 3.7 | — | 2023-04-19 | |
| CVE-2023-21967 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... | < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 | 5.9 | — | 2023-04-19 | |
| CVE-2023-21954 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... | < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 | 5.9 | — | 2023-04-19 | |
| CVE-2023-21939 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: S... | < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 | 5.3 | — | 2023-04-19 | |
| CVE-2023-21937 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: N... | < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 | 3.7 | — | 2023-04-19 | |
| CVE-2023-21938 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... | < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 | 3.7 | — | 2023-04-19 | |
| CVE-2023-21930 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... | < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 | 7.4 | — | 2023-04-19 | |
| CVE-2022-34169 | Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT sty... | ≥ 11 ≤ 11.0.15 ≥ 13 ≤ 13.0.11 ≥ 15 ≤ 15.0.7 | 7.5 | — | 2022-07-19 | |
| CVE-2022-21540 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... | ≥ 11 ≤ 11.0.15 ≥ 13 ≤ 13.0.11 ≥ 15 ≤ 15.0.7 | 5.3 | — | 2022-07-19 | |
| CVE-2022-21541 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... | ≥ 11 ≤ 11.0.15 ≥ 13 ≤ 13.0.11 ≥ 15 ≤ 15.0.7 | 5.9 | — | 2022-07-19 | |
| CVE-2022-21476 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... | ≥ 11 ≤ 11.0.14 ≥ 13 ≤ 13.0.10 ≥ 15 ≤ 15.0.6 | 7.5 | — | 2022-04-20 | |
| CVE-2022-21366 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: I... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21365 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: I... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21360 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: I... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21349 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2... | = 7 = 8 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21341 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: S... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21340 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21305 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21299 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21296 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21294 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21293 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21291 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21283 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21282 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21277 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: I... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21248 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: S... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 3.7 | — | 2022-01-19 | |
| CVE-2021-35603 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). S... | = 7 = 8 = 11.0.12 | 3.7 | — | 2021-10-20 | |
| CVE-2021-35588 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)... | = 7 = 8 | 3.1 | — | 2021-10-20 | |
| CVE-2021-35586 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO)... | = 7 = 8 = 11.0.12 | 5.3 | — | 2021-10-20 | |
| CVE-2021-35578 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). S... | = 8 = 11.0.12 = 17 | 5.3 | — | 2021-10-20 | |
| CVE-2021-35567 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Librarie... | = 8 = 11 = 11.0.1 | 6.8 | — | 2021-10-20 | |
| CVE-2021-35565 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). S... | = 7 = 8 = 11.0.12 | 5.3 | — | 2021-10-20 | |
| CVE-2021-35564 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool)... | = 7 = 8 = 11.0.12 | 5.3 | — | 2021-10-20 | |
| CVE-2021-35561 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility)... | = 7 = 8 = 11.0.12 | 5.3 | — | 2021-10-20 | |
| CVE-2021-35560 | Vulnerability in the Java SE product of Oracle Java SE (component: Deployment). The supported version that is... | = 8 | 7.5 | — | 2021-10-20 | |
| CVE-2021-35559 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).... | = 7 = 8 = 11.0.12 | 5.3 | — | 2021-10-20 | |
| CVE-2021-35556 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).... | = 7 = 8 = 11.0.12 | 5.3 | — | 2021-10-20 | |
| CVE-2021-35550 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). S... | = 7 = 8 = 11.0.12 | 5.9 | — | 2021-10-20 | |
| CVE-2021-20264 | An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers.... | = 1.8.0 = 11 | 7.8 | — | 2021-10-07 | |
| CVE-2021-2388 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)... | = 8 = 11 = 11.0.1 | 7.5 | — | 2021-07-21 |
Track these versions on your own servers
InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.
Data: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (see EPSS at https://www.first.org/epss), endoflife.date. Software list: awesome-selfhosted (CC BY-SA 3.0).