Openjdk
Vendor:
First CVE: Mar 23, 2009 · Active for 17 years
98
Total CVEs
More Total CVEs than 99% of tracked products
8.9
Avg CVEs / Year
Higher CVE frequency than 95% of tracked products
5.4
Avg CVSS
Higher Avg CVSS than 11% of tracked products
1.0%
KEV Rate
Higher KEV Rate than 96% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Openjdk over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 23, 2009
17 years ago
Most Recent CVE
Jan 16, 2024
920 days ago
CVE Severity & Scoring
Openjdk98 CVEs
29%
52%
19%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local3 (3.1%)
Network85 (86.7%)
Unknown10 (10.2%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low40 (40.8%)
High48 (49.0%)
Unknown10 (10.2%)
User Interaction
None73 (74.5%)
Unknown10 (10.2%)
Required15 (15.3%)
Privileges Required
Low3 (3.1%)
High0 (0.0%)
None85 (86.7%)
Unknown10 (10.2%)
Top CVEs
Signals from CVEs in this product scope (98 CVEs).
98 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2013-0431MEDIUM Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the | Jan 31, 2013 | 5.3 | 97 | YES | YES |
CVE-2022-34169HIGH The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated b | Jul 19, 2022 | 7.5 | 42 | NO | NO |
The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a | Feb 8, 2013 | 2.6 | 36 | NO | NO |
CVE-2021-3517HIGH There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application li | May 19, 2021 | 8.6 | 31 | NO | NO |
CVE-2020-2604HIGH Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0 | Jan 15, 2020 | 8.1 | 28 | NO | NO |
CVE-2013-2461HIGH Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier; the Oracle JRockit component in Ora | Jun 18, 2013 | 7.5 | 28 | NO | NO |
CVE-2022-21476HIGH Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u | Apr 19, 2022 | 7.5 | 27 | NO | NO |
CVE-2021-35550MEDIUM Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12 | Oct 20, 2021 | 5.9 | 27 | NO | NO |
CVE-2021-35560HIGH Vulnerability in the Java SE product of Oracle Java SE (component: Deployment). The supported version that is affected is Java SE: 8u301. Difficult to exploit vulnerability allows | Oct 20, 2021 | 7.5 | 26 | NO | NO |
CVE-2021-35559MEDIUM Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.1 | Oct 20, 2021 | 5.3 | 26 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (98 CVEs).
CISA KEV
1 CVE
1.0% of CVEs· 96th percentile
Metasploit
1 CVE
1.0% of CVEs· 96th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
1.0% of CVEs· 87th percentile
Social Chatter
Signals from CVEs in this product scope (98 CVEs).
Media Mentions
Signals from CVEs in this product scope (98 CVEs).
Top CNAs Publishing CVEs For Openjdk
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 8 | 82 | 5.2 | 3.9% | 0 | 0 |
| 7 | 66 | 5.1 | 4.5% | 1 | 1 |
| 20 | 7 | 5.1 | 1.5% | 0 | 0 |
| 1.8.0 | 3 | 5.7 | 1.3% | 0 | 0 |
| 18 | 4 | 6.5 | 11.0% | 0 | 0 |
| 17.0.1 | 15 | 5.2 | 3.9% | 0 | 0 |
| 1.7.0 | 5 | 3.9 | 27.8% | 0 | 0 |
| 17 | 23 | 5.2 | 4.8% | 0 | 0 |
| 16.0.2 | 1 | 6.8 | 2.7% | 0 | 0 |
| 16.0.1 | 4 | 5.4 | 3.6% | 0 | 0 |
| 1.6.0 | 5 | 3.1 | 32.1% | 0 | 0 |
| 16 | 6 | 5.5 | 3.5% | 0 | 0 |
| 15.0.4 | 1 | 6.8 | 2.7% | 0 | 0 |
| 15.0.3 | 4 | 5.4 | 3.6% | 0 | 0 |
| 15.0.2 | 4 | 5.4 | 3.6% | 0 | 0 |
| 15.0.1 | 4 | 5.4 | 3.6% | 0 | 0 |
| 15 | 12 | 4.3 | 3.0% | 0 | 0 |
| 14 | 19 | 5.3 | 3.8% | 0 | 0 |
| 13.0.8 | 1 | 6.8 | 2.7% | 0 | 0 |
| 13.0.7 | 4 | 5.4 | 3.6% | 0 | 0 |