InfraGuard
ログイン 今すぐ試す 今すぐ購入

OpenJDK の脆弱性（CVE一覧）

OpenJDKは、Java Platform, Standard Edition開発プラットフォームおよび実行環境のオープンソース実装です。

98 CVE1 KEV10.0 最大CVSS

過去の脆弱性から分かること

脆弱性の履歴によると、合計98件のCVEが存在し、最大CVSSスコアは10.0、1件の悪用済み脆弱性が知られており、最新のCVEは2024-01-17に記録されています。

安全に運用するには

運用者はセキュリティを維持するために、インストールされているバージョンを定期的に監視し、アクティブにサポートされているリリースラインを維持する必要があります。

バージョンを確認するjava -version

影響を受けるバージョン系列

既知の脆弱性

CVE タイトル 影響を受けるバージョン CVSS 悪用 EPSS 公開日
CVE-2013-0431 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 1... = 7 3.7 KEV 90.1% 2013-01-31
CVE-2024-20952 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac... ≥ 11 < 11.0.24 ≥ 17 < 17.0.10 ≥ 21 < 21.0.2 7.4 — 2024-01-17
CVE-2023-21968 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 = 8 3.7 — 2023-04-19
CVE-2023-21967 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 5.9 — 2023-04-19
CVE-2023-21954 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 5.9 — 2023-04-19
CVE-2023-21939 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: S... < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 5.3 — 2023-04-19
CVE-2023-21937 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: N... < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 3.7 — 2023-04-19
CVE-2023-21938 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 3.7 — 2023-04-19
CVE-2023-21930 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 7.4 — 2023-04-19
CVE-2022-34169 Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT sty... ≥ 11 ≤ 11.0.15 ≥ 13 ≤ 13.0.11 ≥ 15 ≤ 15.0.7 7.5 — 2022-07-19
CVE-2022-21540 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... ≥ 11 ≤ 11.0.15 ≥ 13 ≤ 13.0.11 ≥ 15 ≤ 15.0.7 5.3 — 2022-07-19
CVE-2022-21541 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... ≥ 11 ≤ 11.0.15 ≥ 13 ≤ 13.0.11 ≥ 15 ≤ 15.0.7 5.9 — 2022-07-19
CVE-2022-21476 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... ≥ 11 ≤ 11.0.14 ≥ 13 ≤ 13.0.10 ≥ 15 ≤ 15.0.6 7.5 — 2022-04-20
CVE-2022-21366 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: I... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21365 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: I... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21360 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: I... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21349 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2... = 7 = 8 5.3 — 2022-01-19
CVE-2022-21341 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: S... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21340 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21305 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21299 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21296 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21294 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21293 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21291 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21283 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21282 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21277 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: I... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 5.3 — 2022-01-19
CVE-2022-21248 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: S... ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 3.7 — 2022-01-19
CVE-2021-35603 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). S... = 7 = 8 = 11.0.12 3.7 — 2021-10-20
CVE-2021-35588 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)... = 7 = 8 3.1 — 2021-10-20
CVE-2021-35586 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO)... = 7 = 8 = 11.0.12 5.3 — 2021-10-20
CVE-2021-35578 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). S... = 8 = 11.0.12 = 17 5.3 — 2021-10-20
CVE-2021-35567 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Librarie... = 8 = 11 = 11.0.1 6.8 — 2021-10-20
CVE-2021-35565 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). S... = 7 = 8 = 11.0.12 5.3 — 2021-10-20
CVE-2021-35564 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool)... = 7 = 8 = 11.0.12 5.3 — 2021-10-20
CVE-2021-35561 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility)... = 7 = 8 = 11.0.12 5.3 — 2021-10-20
CVE-2021-35560 Vulnerability in the Java SE product of Oracle Java SE (component: Deployment). The supported version that is... = 8 7.5 — 2021-10-20
CVE-2021-35559 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).... = 7 = 8 = 11.0.12 5.3 — 2021-10-20
CVE-2021-35556 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).... = 7 = 8 = 11.0.12 5.3 — 2021-10-20
CVE-2021-35550 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). S... = 7 = 8 = 11.0.12 5.9 — 2021-10-20
CVE-2021-20264 An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers.... = 1.8.0 = 11 7.8 — 2021-10-07
CVE-2021-2388 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)... = 8 = 11 = 11.0.1 7.5 — 2021-07-21
公式サイト

自社サーバーでこれらのバージョンを追跡

InfraGuard はすべてのサーバーからインストール済みソフトウェアのバージョンを収集し、既知の脆弱性があるものを通知します。セルフホスト型なので、データがネットワーク外に出ることはありません。

ライブデモを試す 今すぐ購入

悪用された脆弱性の週刊ダイジェスト

セルフホスト型サーバーに関係する KEV の追加情報を週1回お届けします。それ以外のメールは送りません。

データ：CVE List（CVE® Program）、NVD、CISA KEV、FIRST EPSS（EPSS については https://www.first.org/epss を参照）、endoflife.date。ソフトウェア一覧：awesome-selfhosted（CC BY-SA 3.0）。