취약점 이력이 말해 주는 것
취약점 이력에 따르면 최신 CVE가 2024-01-17에 기록되었으며, 최대 CVSS 점수 10.0 및 1개의 알려진 악용된 취약점을 포함하여 총 98개의 CVE가 있습니다.
안전하게 운영하려면
운영자는 보안을 유지하기 위해 설치된 버전을 정기적으로 모니터링하고 활성화된 지원 릴리스 라인을 유지해야 합니다.
설치된 버전 확인
java -version영향받는 버전 라인
알려진 취약점
| CVE | 제목 | 영향 버전 | CVSS | 악용 | EPSS | 공개일 |
|---|---|---|---|---|---|---|
| CVE-2013-0431 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 1... | = 7 | 3.7 | KEV | 90.1% | 2013-01-31 |
| CVE-2024-20952 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac... | ≥ 11 < 11.0.24 ≥ 17 < 17.0.10 ≥ 21 < 21.0.2 | 7.4 | — | 2024-01-17 | |
| CVE-2023-21968 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... | ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 = 8 | 3.7 | — | 2023-04-19 | |
| CVE-2023-21967 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... | < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 | 5.9 | — | 2023-04-19 | |
| CVE-2023-21954 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... | < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 | 5.9 | — | 2023-04-19 | |
| CVE-2023-21939 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: S... | < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 | 5.3 | — | 2023-04-19 | |
| CVE-2023-21937 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: N... | < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 | 3.7 | — | 2023-04-19 | |
| CVE-2023-21938 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... | < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 | 3.7 | — | 2023-04-19 | |
| CVE-2023-21930 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... | < 8 ≥ 11 ≤ 11.0.18 ≥ 17 ≤ 17.0.6 | 7.4 | — | 2023-04-19 | |
| CVE-2022-34169 | Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT sty... | ≥ 11 ≤ 11.0.15 ≥ 13 ≤ 13.0.11 ≥ 15 ≤ 15.0.7 | 7.5 | — | 2022-07-19 | |
| CVE-2022-21540 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... | ≥ 11 ≤ 11.0.15 ≥ 13 ≤ 13.0.11 ≥ 15 ≤ 15.0.7 | 5.3 | — | 2022-07-19 | |
| CVE-2022-21541 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... | ≥ 11 ≤ 11.0.15 ≥ 13 ≤ 13.0.11 ≥ 15 ≤ 15.0.7 | 5.9 | — | 2022-07-19 | |
| CVE-2022-21476 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... | ≥ 11 ≤ 11.0.14 ≥ 13 ≤ 13.0.10 ≥ 15 ≤ 15.0.6 | 7.5 | — | 2022-04-20 | |
| CVE-2022-21366 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: I... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21365 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: I... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21360 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: I... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21349 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2... | = 7 = 8 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21341 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: S... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21340 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21305 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21299 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21296 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21294 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21293 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21291 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: H... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21283 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: L... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21282 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: J... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21277 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: I... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 5.3 | — | 2022-01-19 | |
| CVE-2022-21248 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: S... | ≥ 11 ≤ 11.0.13 ≥ 13 ≤ 13.0.9 ≥ 15 ≤ 15.0.5 | 3.7 | — | 2022-01-19 | |
| CVE-2021-35603 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). S... | = 7 = 8 = 11.0.12 | 3.7 | — | 2021-10-20 | |
| CVE-2021-35588 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)... | = 7 = 8 | 3.1 | — | 2021-10-20 | |
| CVE-2021-35586 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO)... | = 7 = 8 = 11.0.12 | 5.3 | — | 2021-10-20 | |
| CVE-2021-35578 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). S... | = 8 = 11.0.12 = 17 | 5.3 | — | 2021-10-20 | |
| CVE-2021-35567 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Librarie... | = 8 = 11 = 11.0.1 | 6.8 | — | 2021-10-20 | |
| CVE-2021-35565 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). S... | = 7 = 8 = 11.0.12 | 5.3 | — | 2021-10-20 | |
| CVE-2021-35564 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool)... | = 7 = 8 = 11.0.12 | 5.3 | — | 2021-10-20 | |
| CVE-2021-35561 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility)... | = 7 = 8 = 11.0.12 | 5.3 | — | 2021-10-20 | |
| CVE-2021-35560 | Vulnerability in the Java SE product of Oracle Java SE (component: Deployment). The supported version that is... | = 8 | 7.5 | — | 2021-10-20 | |
| CVE-2021-35559 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).... | = 7 = 8 = 11.0.12 | 5.3 | — | 2021-10-20 | |
| CVE-2021-35556 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).... | = 7 = 8 = 11.0.12 | 5.3 | — | 2021-10-20 | |
| CVE-2021-35550 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). S... | = 7 = 8 = 11.0.12 | 5.9 | — | 2021-10-20 | |
| CVE-2021-20264 | An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers.... | = 1.8.0 = 11 | 7.8 | — | 2021-10-07 | |
| CVE-2021-2388 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)... | = 8 = 11 = 11.0.1 | 7.5 | — | 2021-07-21 |
내 서버의 버전을 직접 추적하세요
InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.
데이터: CVE List(CVE® Program), NVD, CISA KEV, FIRST EPSS(EPSS 는 https://www.first.org/epss 참고), endoflife.date. 소프트웨어 목록: awesome-selfhosted(CC BY-SA 3.0).