Lo que muestra el historial
El historial de vulnerabilidades muestra un total de 98 CVE con una puntuación CVSS máxima de 10.0 y 1 vulnerabilidad explotada conocida, habiéndose registrado el CVE más reciente el 2024-01-17.
Cómo protegerse
Los operadores deben supervisar periódicamente las versiones instaladas y mantenerse en líneas de versiones con soporte activo para mantener la seguridad.
Comprueba tu versión
java -versionRamas de versiones afectadas
Vulnerabilidades conocidas
| CVE | Título | Versiones afectadas | CVSS | Explotada | EPSS | Publicación |
|---|---|---|---|---|---|---|
| CVE-2013-0431 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 1... | = 7 | 3.7 | KEV | 90.1% | 2013-01-31 |
| CVE-2024-20952 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac... | ≥ 11 < 11.0.24 ≥ 17 < 17.0.10 ≥ 21 < 21.0.2 | 7.4 | — | 2024-01-17 | |
| CVE-2023-21968 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... | ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 = 8 | 3.7 | — | 2023-04-19 | |
| CVE-2023-21967 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... | < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 | 5.9 | — | 2023-04-19 | |
| CVE-2023-21954 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... | < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 | 5.9 | — | 2023-04-19 | |
| CVE-2023-21939 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: S... | < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 | 5.3 | — | 2023-04-19 | |
| CVE-2023-21937 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: N... | < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 | 3.7 | — | 2023-04-19 | |
| CVE-2023-21938 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... | < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 | 3.7 | — | 2023-04-19 | |
| CVE-2023-21930 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... | < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 | 7.4 | — | 2023-04-19 | |
| CVE-2022-34169 | Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT sty... | ≥ 11 ≤ 11.0.15 ≥ 13 ≤ 13.0.11 ≥ 15 ≤ 15.0.7 | 7.5 | — | 2022-07-19 | |
| CVE-2022-21540 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... | ≥ 11 ≤ 11.0.15 ≥ 13 ≤ 13.0.11 ≥ 15 ≤ 15.0.7 | 5.3 | — | 2022-07-19 | |
| CVE-2022-21541 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... | ≥ 11 ≤ 11.0.15 ≥ 13 ≤ 13.0.11 ≥ 15 ≤ 15.0.7 | 5.9 | — | 2022-07-19 | |
| CVE-2022-21476 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... | ≥ 11 ≤ 11.0.14 ≥ 13 ≤ 13.0.10 ≥ 15 ≤ 15.0.6 | 7.5 | — | 2022-04-20 | |
| CVE-2022-21366 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: I... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21365 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: I... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21360 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: I... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21349 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2... | = 7 = 8 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21341 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: S... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21340 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21305 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21299 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21296 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21294 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21293 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21291 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21283 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21282 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21277 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: I... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21248 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: S... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 3.7 | — | 2022-01-19 | |
| CVE-2021-35603 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). S... | = 7 = 8 = 11.0.12 | 3.7 | — | 2021-10-20 | |
| CVE-2021-35588 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)... | = 7 = 8 | 3.1 | — | 2021-10-20 | |
| CVE-2021-35586 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO)... | = 7 = 8 = 11.0.12 | 5.3 | — | 2021-10-20 | |
| CVE-2021-35578 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). S... | = 8 = 11.0.12 = 17 | 5.3 | — | 2021-10-20 | |
| CVE-2021-35567 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Librarie... | = 8 = 11 = 11.0.1 | 6.8 | — | 2021-10-20 | |
| CVE-2021-35565 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). S... | = 7 = 8 = 11.0.12 | 5.3 | — | 2021-10-20 | |
| CVE-2021-35564 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool)... | = 7 = 8 = 11.0.12 | 5.3 | — | 2021-10-20 | |
| CVE-2021-35561 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility)... | = 7 = 8 = 11.0.12 | 5.3 | — | 2021-10-20 | |
| CVE-2021-35560 | Vulnerability in the Java SE product of Oracle Java SE (component: Deployment). The supported version that is... | = 8 | 7.5 | — | 2021-10-20 | |
| CVE-2021-35559 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).... | = 7 = 8 = 11.0.12 | 5.3 | — | 2021-10-20 | |
| CVE-2021-35556 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).... | = 7 = 8 = 11.0.12 | 5.3 | — | 2021-10-20 | |
| CVE-2021-35550 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). S... | = 7 = 8 = 11.0.12 | 5.9 | — | 2021-10-20 | |
| CVE-2021-20264 | An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers.... | = 1.8.0 = 11 | 7.8 | — | 2021-10-07 | |
| CVE-2021-2388 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)... | = 8 = 11 = 11.0.1 | 7.5 | — | 2021-07-21 |
Controla estas versiones en tus propios servidores
InfraGuard recopila las versiones de software instaladas en cada servidor y señala las que tienen vulnerabilidades conocidas. Autoalojado: nada sale de tu red.
Datos: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (consulta EPSS en https://www.first.org/epss), endoflife.date. Lista de software: awesome-selfhosted (CC BY-SA 3.0).