InfraGuard

Vulnérabilités de OpenJDK (liste des CVE)

OpenJDK est une implémentation open source de la plateforme de développement et de l'environnement d'exécution Java Platform, Standard Edition.

98 CVE1 KEV10.0 CVSS max

Ce que montre l’historique

L'historique des vulnérabilités montre un total de 98 CVE avec un score CVSS maximal de 10.0 et 1 vulnérabilité exploitée connue, la CVE la plus récente ayant été enregistrée le 2024-01-17.

Comment rester protégé

Les opérateurs doivent surveiller régulièrement les versions installées et maintenir des lignes de version activement prises en charge pour rester en sécurité.

Vérifiez votre versionjava -version

Branches de versions concernées

Vulnérabilités connues

CVE Titre Versions concernées CVSS Exploitée EPSS Publication
CVE-2013-0431 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 1... = 7 3.7 KEV 90.1% 2013-01-31
CVE-2024-20952 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac... ≥ 11 < 11.0.24 ≥ 17 < 17.0.10 ≥ 21 < 21.0.2 7.4 — 2024-01-17
CVE-2023-21968 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 = 8 3.7 — 2023-04-19
CVE-2023-21967 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 5.9 — 2023-04-19
CVE-2023-21954 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 5.9 — 2023-04-19
CVE-2023-21939 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: S... < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 5.3 — 2023-04-19
CVE-2023-21937 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: N... < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 3.7 — 2023-04-19
CVE-2023-21938 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 3.7 — 2023-04-19
CVE-2023-21930 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 7.4 — 2023-04-19
CVE-2022-34169 Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT sty... ≥ 11 ≤ 11.0.15 ≥ 13 ≤ 13.0.11 ≥ 15 ≤ 15.0.7 7.5 — 2022-07-19
CVE-2022-21540 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... ≥ 11 ≤ 11.0.15 ≥ 13 ≤ 13.0.11 ≥ 15 ≤ 15.0.7 5.3 — 2022-07-19
CVE-2022-21541 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... ≥ 11 ≤ 11.0.15 ≥ 13 ≤ 13.0.11 ≥ 15 ≤ 15.0.7 5.9 — 2022-07-19
CVE-2022-21476 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... ≥ 11 ≤ 11.0.14 ≥ 13 ≤ 13.0.10 ≥ 15 ≤ 15.0.6 7.5 — 2022-04-20
CVE-2022-21366 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: I... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21365 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: I... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21360 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: I... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21349 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2... = 7 = 8 5.3 — 2022-01-19
CVE-2022-21341 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: S... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21340 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21305 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21299 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21296 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21294 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21293 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21291 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21283 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21282 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21277 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: I... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21248 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: S... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 3.7 — 2022-01-19
CVE-2021-35603 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). S... = 7 = 8 = 11.0.12 3.7 — 2021-10-20
CVE-2021-35588 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)... = 7 = 8 3.1 — 2021-10-20
CVE-2021-35586 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO)... = 7 = 8 = 11.0.12 5.3 — 2021-10-20
CVE-2021-35578 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). S... = 8 = 11.0.12 = 17 5.3 — 2021-10-20
CVE-2021-35567 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Librarie... = 8 = 11 = 11.0.1 6.8 — 2021-10-20
CVE-2021-35565 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). S... = 7 = 8 = 11.0.12 5.3 — 2021-10-20
CVE-2021-35564 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool)... = 7 = 8 = 11.0.12 5.3 — 2021-10-20
CVE-2021-35561 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility)... = 7 = 8 = 11.0.12 5.3 — 2021-10-20
CVE-2021-35560 Vulnerability in the Java SE product of Oracle Java SE (component: Deployment). The supported version that is... = 8 7.5 — 2021-10-20
CVE-2021-35559 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).... = 7 = 8 = 11.0.12 5.3 — 2021-10-20
CVE-2021-35556 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).... = 7 = 8 = 11.0.12 5.3 — 2021-10-20
CVE-2021-35550 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). S... = 7 = 8 = 11.0.12 5.9 — 2021-10-20
CVE-2021-20264 An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers.... = 1.8.0 = 11 7.8 — 2021-10-07
CVE-2021-2388 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)... = 8 = 11 = 11.0.1 7.5 — 2021-07-21

Suivez ces versions sur vos propres serveurs

InfraGuard collecte les versions logicielles installées sur chaque serveur et signale celles qui présentent des vulnérabilités connues. Auto-hébergé : rien ne quitte votre réseau.

Récapitulatif hebdomadaire des vulnérabilités exploitées

Les ajouts au KEV qui comptent pour les serveurs auto-hébergés, une fois par semaine. Aucun autre e-mail.

Données : CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (voir EPSS sur https://www.first.org/epss), endoflife.date. Liste des logiciels : awesome-selfhosted (CC BY-SA 3.0).