Oracle Javafx vulnerabilities

64 CVEs affecting Oracle Javafx, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-4916, published 2015-10-22.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-1571, published 2013-06-18. Medium severity, CVSS 4.3. EPSS: 66.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows…
• CVE-2012-0500, published 2012-02-15. High severity, CVSS 10.0. EPSS: 58% chance of exploitation in the next 30 days. Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and JavaFX 2.0.2 and earlier allows remote untrusted Java…
• CVE-2013-0402, published 2013-03-08. High severity, CVSS 10.0. EPSS: 9.6% chance of exploitation in the next 30 days. Heap-based buffer overflow in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via…
• CVE-2012-4301, published 2013-02-02. High severity, CVSS 10.0. EPSS: 8.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a…
• CVE-2013-2432, published 2013-04-17. High severity, CVSS 10.0. EPSS: 7.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier…
• CVE-2012-4305, published 2013-02-02. High severity, CVSS 9.3. EPSS: 6.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a…
• CVE-2012-5083, published 2012-10-16. High severity, CVSS 10.0. EPSS: 6.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, 1.4.2_38 and earlier, and…
• CVE-2012-1531, published 2012-10-16. High severity, CVSS 10.0. EPSS: 6.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier; and…
• CVE-2012-0499, published 2012-02-15. High severity, CVSS 10.0. EPSS: 6.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier; and…
• CVE-2013-5843, published 2013-10-16. High severity, CVSS 10.0. EPSS: 6.1% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JavaFX 2.2.40 and earlier, and Java SE Embedded 7u40 and earlier allows remote…

Latest

• CVE-2015-4916, published 2015-10-22. Medium severity, CVSS 5.0. EPSS: 3.7% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and…
• CVE-2015-4908, published 2015-10-22. Medium severity, CVSS 5.0. EPSS: 3% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and…
• CVE-2015-4906, published 2015-10-22. Medium severity, CVSS 5.0. EPSS: 3% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors related to JavaFX, a different vulnerability than…
• CVE-2015-2638, published 2015-07-16. High severity, CVSS 10.0. EPSS: 5.7% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via…
• CVE-2015-2637, published 2015-07-16. Medium severity, CVSS 5.0. EPSS: 3.5% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
• CVE-2015-2619, published 2015-07-16. Medium severity, CVSS 5.0. EPSS: 3.2% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, JavaFX 2.2.80, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
• CVE-2015-0492, published 2015-04-16. High severity, CVSS 9.3. EPSS: 4.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different…
• CVE-2015-0491, published 2015-04-16. High severity, CVSS 10.0. EPSS: 5.6% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors…
• CVE-2015-0484, published 2015-04-16. Medium severity, CVSS 6.8. EPSS: 3% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different…
• CVE-2015-0459, published 2015-04-16. High severity, CVSS 10.0. EPSS: 5.7% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related…