Java
Vendor:
First CVE: Sep 2, 2011 · Active for 14 years
27
Total CVEs
More Total CVEs than 96% of tracked products
4.5
Avg CVEs / Year
Higher CVE frequency than 86% of tracked products
8.1
Avg CVSS
Higher Avg CVSS than 71% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Java over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 2, 2011
14 years ago
Most Recent CVE
Apr 29, 2023
1,182 days ago
CVE Severity & Scoring
Java27 CVEs
22%
70%
All CVEs352,231 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local1 (3.7%)
Network3 (11.1%)
Unknown23 (85.2%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (14.8%)
High0 (0.0%)
Unknown23 (85.2%)
User Interaction
None4 (14.8%)
Unknown23 (85.2%)
Required0 (0.0%)
Privileges Required
Low1 (3.7%)
High0 (0.0%)
None3 (11.1%)
Unknown23 (85.2%)
Top CVEs
Signals from CVEs in this product scope (27 CVEs).
27 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2013-4002HIGH XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 | Jul 23, 2013 | 7.1 | 34 | NO | NO |
CVE-2013-0485HIGH Unspecified vulnerability in IBM Java SDK 7 before SR4-FP1, 6 before SR13-FP1, 5.0 before SR16-FP1, and 1.4.2 before SR13-FP16 has unknown impact and attack vectors related to Clas | Jan 21, 2014 | 10.0 | 32 | NO | NO |
CVE-2013-5458HIGH Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6 allows remote attackers to execute arbitrary code via unspecified vectors. | Nov 24, 2013 | 9.3 | 32 | NO | NO |
CVE-2013-3008HIGH Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknow | Jul 23, 2013 | 9.3 | 31 | NO | NO |
CVE-2012-4823HIGH Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 a | Jan 11, 2013 | 9.3 | 30 | NO | NO |
CVE-2012-4822HIGH Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 | Jan 11, 2013 | 9.3 | 30 | NO | NO |
CVE-2012-4821HIGH Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 | Jan 11, 2013 | 9.3 | 30 | NO | NO |
CVE-2012-4820HIGH Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 a | Jan 11, 2013 | 9.3 | 30 | NO | NO |
CVE-2023-30441HIGH IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configu | Apr 29, 2023 | 7.5 | 25 | NO | NO |
CVE-2019-4473HIGH Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by | Aug 5, 2019 | 7.8 | 25 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (27 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (27 CVEs).
Media Mentions
Signals from CVEs in this product scope (27 CVEs).
Top CNAs Publishing CVEs For Java
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 8.0 | 2 | 7.7 | 1.6% | 0 | 0 |
| 7.1.4.50 | 1 | 7.8 | 0.4% | 0 | 0 |
| 7.0.5.0 | 2 | 6.7 | 0.9% | 0 | 0 |
| 7.0.4.2 | 10 | 8.6 | 5.6% | 0 | 0 |
| 7.0.4.1 | 10 | 8.6 | 5.6% | 0 | 0 |
| 7.0.4.0 | 10 | 8.6 | 5.6% | 0 | 0 |
| 7.0.3.0 | 10 | 8.6 | 5.6% | 0 | 0 |
| 7.0.2.0 | 10 | 8.6 | 5.6% | 0 | 0 |
| 7.0.1.0 | 10 | 8.6 | 5.6% | 0 | 0 |
| 7.0.0.0 | 17 | 8.5 | 4.8% | 0 | 0 |
| 6.0.9.2 | 6 | 8.1 | 6.6% | 0 | 0 |
| 6.0.9.1 | 6 | 8.1 | 6.6% | 0 | 0 |
| 6.0.9.0 | 6 | 8.1 | 6.6% | 0 | 0 |
| 6.0.8.1 | 6 | 8.1 | 6.6% | 0 | 0 |
| 6.0.8.0 | 6 | 8.1 | 6.6% | 0 | 0 |
| 6.0.7.0 | 6 | 8.1 | 6.6% | 0 | 0 |
| 6.0.6.0 | 6 | 8.1 | 6.6% | 0 | 0 |
| 6.0.5.0 | 6 | 8.1 | 6.6% | 0 | 0 |
| 6.0.4.0 | 6 | 8.1 | 6.6% | 0 | 0 |
| 6.0.3.0 | 6 | 8.1 | 6.6% | 0 | 0 |