Oracle JRockit vulnerabilities

107 CVEs affecting Oracle JRockit, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-3214, published 2018-10-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-3427: Oracle Java SE and JRockit Unspecified Vulnerability, published 2016-04-21. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2023-05-12. EPSS: 92.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via…
CVE-2015-4000, published 2015-05-21. Low severity, CVSS 3.7. EPSS: 99.9% chance of exploitation in the next 30 days. The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to…
CVE-2011-3556, published 2011-10-19. High severity, CVSS 7.5. EPSS: 76.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and…
CVE-2014-6593, published 2015-01-21. Medium severity, CVSS 4.0. EPSS: 66.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity…
CVE-2015-4748, published 2015-07-16. High severity, CVSS 7.6. EPSS: 44.9% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and…
CVE-2017-3241, published 2017-01-27. Critical severity, CVSS 9.0. EPSS: 32.8% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded:…
CVE-2013-4002, published 2013-07-23. High severity, CVSS 7.1. EPSS: 24.7% chance of exploitation in the next 30 days. XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7…
CVE-2017-10355, published 2017-10-19. Medium severity, CVSS 5.3. EPSS: 16.2% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE…
CVE-2018-2799, published 2018-04-19. Medium severity, CVSS 5.3. EPSS: 14.8% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded:…
CVE-2016-0483, published 2016-01-21. High severity, CVSS 10.0. EPSS: 14.7% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via…

Latest

CVE-2018-3214, published 2018-10-17. Medium severity, CVSS 5.3. EPSS: 6.9% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound). Supported versions that are affected are Java SE: 6u201, 7u191 and 8u182; Java SE Embedded:…
CVE-2018-3183, published 2018-10-17. Critical severity, CVSS 9.0. EPSS: 2.8% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting). Supported versions that are affected are Java SE: 8u182 and 11; Java SE Embedded: 8u181;…
CVE-2018-3180, published 2018-10-17. Medium severity, CVSS 5.6. EPSS: 3.4% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE…
CVE-2018-3149, published 2018-10-17. High severity, CVSS 8.3. EPSS: 7.2% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE…
CVE-2018-2952, published 2018-07-18. Low severity, CVSS 3.7. EPSS: 4.4% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java…
CVE-2018-2815, published 2018-04-19. Medium severity, CVSS 5.3. EPSS: 5.1% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java…
CVE-2018-2800, published 2018-04-19. Medium severity, CVSS 4.2. EPSS: 5.2% chance of exploitation in the next 30 days. Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u181, 7u171 and 8u162; JRockit: R28.3.17. Difficult to…
CVE-2018-2798, published 2018-04-19. Medium severity, CVSS 5.3. EPSS: 7.4% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE…
CVE-2018-2797, published 2018-04-19. Medium severity, CVSS 5.3. EPSS: 7.4% chance of exploitation in the next 30 days. Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE…