[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3UWUQoWERoqJHYkuJxUXh9KXtcB0KqVIC_d6Wfx7oTo":3,"g5a-family:oracle\u002Fopenjdk":295,"g5a-ex:oracle\u002Fopenjdk@*":296},{"success":4,"data":5},true,{"product":6,"versions":150,"topVulnerabilitiesByEpss":210,"kevVulnerabilities":267,"seoMetadata":273,"meta":292},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":149},"oracle","openjdk",59,99,1,"2024-01-16",[14,18,20,22,25,28,31,33,36,38,40,42,44,46,48,50,53,55,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,89,91,93,95,97,99,101,104,107,109,111,114,116,119,121,123,125,127,130,133,135,137,140,143,145,147],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"10",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.1",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.2",{"version":23,"cve_count":24,"kev_count":16,"has_kev":17},"11",25,{"version":26,"cve_count":27,"kev_count":16,"has_kev":17},"11.0.1",23,{"version":29,"cve_count":30,"kev_count":16,"has_kev":17},"11.0.10",4,{"version":32,"cve_count":30,"kev_count":16,"has_kev":17},"11.0.11",{"version":34,"cve_count":35,"kev_count":16,"has_kev":17},"11.0.12",10,{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},"11.0.13",{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},"11.0.14",{"version":41,"cve_count":27,"kev_count":16,"has_kev":17},"11.0.2",{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},"11.0.24",{"version":45,"cve_count":27,"kev_count":16,"has_kev":17},"11.0.3",{"version":47,"cve_count":27,"kev_count":16,"has_kev":17},"11.0.4",{"version":49,"cve_count":27,"kev_count":16,"has_kev":17},"11.0.5",{"version":51,"cve_count":52,"kev_count":16,"has_kev":17},"11.0.6",18,{"version":54,"cve_count":52,"kev_count":16,"has_kev":17},"11.0.7",{"version":56,"cve_count":57,"kev_count":16,"has_kev":17},"11.0.8",12,{"version":59,"cve_count":30,"kev_count":16,"has_kev":17},"11.0.9",{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},"12",{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},"12.0.1",{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},"12.0.2",{"version":67,"cve_count":27,"kev_count":16,"has_kev":17},"13",{"version":69,"cve_count":27,"kev_count":16,"has_kev":17},"13.0.1",{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},"13.0.10",{"version":73,"cve_count":52,"kev_count":16,"has_kev":17},"13.0.2",{"version":75,"cve_count":52,"kev_count":16,"has_kev":17},"13.0.3",{"version":77,"cve_count":57,"kev_count":16,"has_kev":17},"13.0.4",{"version":79,"cve_count":30,"kev_count":16,"has_kev":17},"13.0.5",{"version":81,"cve_count":30,"kev_count":16,"has_kev":17},"13.0.6",{"version":83,"cve_count":30,"kev_count":16,"has_kev":17},"13.0.7",{"version":85,"cve_count":11,"kev_count":16,"has_kev":17},"13.0.8",{"version":87,"cve_count":88,"kev_count":16,"has_kev":17},"14",19,{"version":90,"cve_count":57,"kev_count":16,"has_kev":17},"15",{"version":92,"cve_count":30,"kev_count":16,"has_kev":17},"15.0.1",{"version":94,"cve_count":30,"kev_count":16,"has_kev":17},"15.0.2",{"version":96,"cve_count":30,"kev_count":16,"has_kev":17},"15.0.3",{"version":98,"cve_count":11,"kev_count":16,"has_kev":17},"15.0.4",{"version":100,"cve_count":16,"kev_count":16,"has_kev":17},"15.0.6",{"version":102,"cve_count":103,"kev_count":16,"has_kev":17},"16",6,{"version":105,"cve_count":106,"kev_count":16,"has_kev":17},"1.6.0",5,{"version":108,"cve_count":30,"kev_count":16,"has_kev":17},"16.0.1",{"version":110,"cve_count":11,"kev_count":16,"has_kev":17},"16.0.2",{"version":112,"cve_count":113,"kev_count":16,"has_kev":17},"17",24,{"version":115,"cve_count":106,"kev_count":16,"has_kev":17},"1.7.0",{"version":117,"cve_count":118,"kev_count":16,"has_kev":17},"17.0.1",15,{"version":120,"cve_count":16,"kev_count":16,"has_kev":17},"17.0.10",{"version":122,"cve_count":11,"kev_count":16,"has_kev":17},"17.0.2",{"version":124,"cve_count":16,"kev_count":16,"has_kev":17},"17.0.9",{"version":126,"cve_count":106,"kev_count":16,"has_kev":17},"18",{"version":128,"cve_count":129,"kev_count":16,"has_kev":17},"1.8.0",3,{"version":131,"cve_count":132,"kev_count":16,"has_kev":17},"20",7,{"version":134,"cve_count":16,"kev_count":16,"has_kev":17},"21",{"version":136,"cve_count":16,"kev_count":16,"has_kev":17},"21.0.2",{"version":138,"cve_count":139,"kev_count":11,"has_kev":4},"7",67,{"version":141,"cve_count":142,"kev_count":16,"has_kev":17},"8",83,{"version":144,"cve_count":16,"kev_count":16,"has_kev":17},"9",{"version":146,"cve_count":16,"kev_count":16,"has_kev":17},"9.0.1",{"version":148,"cve_count":16,"kev_count":16,"has_kev":17},"9.0.4","Openjdk by Oracle is a technology product with 59 tracked versions and 99 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":24,"kev_count":16,"has_kev":17},{"version":26,"cve_count":27,"kev_count":16,"has_kev":17},{"version":29,"cve_count":30,"kev_count":16,"has_kev":17},{"version":32,"cve_count":30,"kev_count":16,"has_kev":17},{"version":34,"cve_count":35,"kev_count":16,"has_kev":17},{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},{"version":41,"cve_count":27,"kev_count":16,"has_kev":17},{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},{"version":45,"cve_count":27,"kev_count":16,"has_kev":17},{"version":47,"cve_count":27,"kev_count":16,"has_kev":17},{"version":49,"cve_count":27,"kev_count":16,"has_kev":17},{"version":51,"cve_count":52,"kev_count":16,"has_kev":17},{"version":54,"cve_count":52,"kev_count":16,"has_kev":17},{"version":56,"cve_count":57,"kev_count":16,"has_kev":17},{"version":59,"cve_count":30,"kev_count":16,"has_kev":17},{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},{"version":67,"cve_count":27,"kev_count":16,"has_kev":17},{"version":69,"cve_count":27,"kev_count":16,"has_kev":17},{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},{"version":73,"cve_count":52,"kev_count":16,"has_kev":17},{"version":75,"cve_count":52,"kev_count":16,"has_kev":17},{"version":77,"cve_count":57,"kev_count":16,"has_kev":17},{"version":79,"cve_count":30,"kev_count":16,"has_kev":17},{"version":81,"cve_count":30,"kev_count":16,"has_kev":17},{"version":83,"cve_count":30,"kev_count":16,"has_kev":17},{"version":85,"cve_count":11,"kev_count":16,"has_kev":17},{"version":87,"cve_count":88,"kev_count":16,"has_kev":17},{"version":90,"cve_count":57,"kev_count":16,"has_kev":17},{"version":92,"cve_count":30,"kev_count":16,"has_kev":17},{"version":94,"cve_count":30,"kev_count":16,"has_kev":17},{"version":96,"cve_count":30,"kev_count":16,"has_kev":17},{"version":98,"cve_count":11,"kev_count":16,"has_kev":17},{"version":100,"cve_count":16,"kev_count":16,"has_kev":17},{"version":102,"cve_count":103,"kev_count":16,"has_kev":17},{"version":105,"cve_count":106,"kev_count":16,"has_kev":17},{"version":108,"cve_count":30,"kev_count":16,"has_kev":17},{"version":110,"cve_count":11,"kev_count":16,"has_kev":17},{"version":112,"cve_count":113,"kev_count":16,"has_kev":17},{"version":115,"cve_count":106,"kev_count":16,"has_kev":17},{"version":117,"cve_count":118,"kev_count":16,"has_kev":17},{"version":120,"cve_count":16,"kev_count":16,"has_kev":17},{"version":122,"cve_count":11,"kev_count":16,"has_kev":17},{"version":124,"cve_count":16,"kev_count":16,"has_kev":17},{"version":126,"cve_count":106,"kev_count":16,"has_kev":17},{"version":128,"cve_count":129,"kev_count":16,"has_kev":17},{"version":131,"cve_count":132,"kev_count":16,"has_kev":17},{"version":134,"cve_count":16,"kev_count":16,"has_kev":17},{"version":136,"cve_count":16,"kev_count":16,"has_kev":17},{"version":138,"cve_count":139,"kev_count":11,"has_kev":4},{"version":141,"cve_count":142,"kev_count":16,"has_kev":17},{"version":144,"cve_count":16,"kev_count":16,"has_kev":17},{"version":146,"cve_count":16,"kev_count":16,"has_kev":17},{"version":148,"cve_count":16,"kev_count":16,"has_kev":17},[211,219,226,233,239,246,250,255,258,262],{"cveId":212,"description":213,"publishedDate":214,"cvssScore":215,"cvssVersion":216,"severity":217,"isKev":4,"epssScore":218},"CVE-2013-0431","Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka \"Issue 52,\" a different vulnerability than CVE-2013-1490.","2013-01-31",3.7,"v3.1","Low",0.9015,{"cveId":220,"description":221,"publishedDate":222,"cvssScore":223,"cvssVersion":216,"severity":224,"isKev":17,"epssScore":225},"CVE-2022-34169","The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update to version 2.7.3 or later. Note: Java runtimes (such as OpenJDK) include repackaged copies of Xalan.","2022-07-19",7.5,"High",0.81759,{"cveId":227,"description":228,"publishedDate":229,"cvssScore":230,"cvssVersion":231,"severity":217,"isKev":17,"epssScore":232},"CVE-2013-0169","The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the \"Lucky Thirteen\" issue.","2013-02-08",2.6,"v2",0.35584,{"cveId":234,"description":235,"publishedDate":236,"cvssScore":237,"cvssVersion":216,"severity":224,"isKev":17,"epssScore":238},"CVE-2021-3517","There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.","2021-05-19",8.6,0.16986,{"cveId":240,"description":241,"publishedDate":242,"cvssScore":243,"cvssVersion":216,"severity":244,"isKev":17,"epssScore":245},"CVE-2021-35559","Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L).","2021-10-20",5.3,"Medium",0.159,{"cveId":247,"description":248,"publishedDate":242,"cvssScore":243,"cvssVersion":216,"severity":244,"isKev":17,"epssScore":249},"CVE-2021-35556","Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L).",0.08464,{"cveId":251,"description":252,"publishedDate":253,"cvssScore":243,"cvssVersion":216,"severity":244,"isKev":17,"epssScore":254},"CVE-2022-21293","Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L).","2022-01-19",0.08346,{"cveId":256,"description":252,"publishedDate":253,"cvssScore":243,"cvssVersion":216,"severity":244,"isKev":17,"epssScore":257},"CVE-2022-21340",0.07748,{"cveId":259,"description":260,"publishedDate":242,"cvssScore":243,"cvssVersion":216,"severity":244,"isKev":17,"epssScore":261},"CVE-2021-35565","Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L).",0.07395,{"cveId":263,"description":264,"publishedDate":242,"cvssScore":265,"cvssVersion":216,"severity":244,"isKev":17,"epssScore":266},"CVE-2021-35550","Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N).",5.9,0.07376,[268],{"cveId":212,"description":213,"publishedDate":214,"cvssScore":215,"severity":217,"isKev":4,"epssScore":218,"cisaVulnName":269,"cisaDateAdded":270,"cisaShortDescription":271,"cisaRequiredAction":272},"Oracle JRE Sandbox Bypass Vulnerability","2022-05-25","Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle allows remote attackers to bypass the Java security sandbox.","Apply updates per vendor instructions.",{"title":274,"metaDescription":275,"keywords":276,"structuredData":277},"Openjdk by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Openjdk by Oracle covering 59 versions with 99 tracked vulnerabilities and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Openjdk vulnerabilities, Openjdk security, Openjdk CVE, Oracle Openjdk, Openjdk threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Openjdk KEV, Openjdk exploited vulnerabilities",{"@context":278,"@type":279,"name":280,"description":275,"url":281,"manufacturer":282,"applicationCategory":286,"softwareVersion":287,"mainEntity":288},"https:\u002F\u002Fschema.org","SoftwareApplication","Openjdk","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fopenjdk",{"@type":283,"name":284,"url":285},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","59 versions tracked",{"@type":289,"name":290,"description":291,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Openjdk Security Vulnerabilities","Security vulnerabilities affecting Openjdk by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":293,"apiVersion":294},"2026-10-17T00:12:35.780Z","3.0",[],{"rows":297,"total":11,"capped":17,"failed":16},[298],{"cveId":212,"name":269,"severity":217,"cvss":215,"added":270,"epss":218,"published":299,"ranges":300,"checked":4,"hits":301,"covers":17},"2013-01-31T14:55:01.327",[138],[]]