Логотип exploitDog
bind:"BDU:2025-13795" OR bind:"CVE-2025-53066"
Консоль
Логотип exploitDog

exploitDog

bind:"BDU:2025-13795" OR bind:"CVE-2025-53066"

Количество 27

Количество 27

fstec логотип

BDU:2025-13795

3 месяца назад

Уязвимость компонента JAXP программных платформ Java SE, GraalVM for JDK, GraalVM Enterprise Edition, позволяющая нарушителю получить несанкционированный доступ к данным платформы

CVSS3: 7.5
EPSS: Низкий
redos логотип

ROS-20251124-14

около 2 месяцев назад

Множественные уязвимости java-1.8.0-openjdk

CVSS3: 7.5
EPSS: Низкий
redos логотип

ROS-20251124-13

около 2 месяцев назад

Множественные уязвимости java-11-openjdk

CVSS3: 7.5
EPSS: Низкий
redos логотип

ROS-20251124-12

около 2 месяцев назад

Множественные уязвимости java-17-openjdk

CVSS3: 7.5
EPSS: Низкий
redos логотип

ROS-20251124-11

около 2 месяцев назад

Множественные уязвимости java-21-openjdk

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2025-53066

3 месяца назад

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start ap...

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2025-53066

3 месяца назад

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start appl

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2025-53066

3 месяца назад

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-9v5j-pxpg-qprp

3 месяца назад

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start a...

CVSS3: 7.5
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2025:20125-1

около 2 месяцев назад

Security update for java-17-openjdk

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:4039-1

2 месяца назад

Security update for java-1_8_0-openjdk

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:4038-1

2 месяца назад

Security update for java-1_8_0-openjdk

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:4005-1

2 месяца назад

Security update for java-1_8_0-openj9

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:3997-1

2 месяца назад

Security update for java-17-openjdk

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:3996-1

2 месяца назад

Security update for java-11-openjdk

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:3835-1

3 месяца назад

Security update for java-11-openjdk

EPSS: Низкий
oracle-oval логотип

ELSA-2025-18821

3 месяца назад

ELSA-2025-18821: java-17-openjdk security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-18815

3 месяца назад

ELSA-2025-18815: java-1.8.0-openjdk security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-18814

2 месяца назад

ELSA-2025-18814: java-1.8.0-openjdk security update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2025:20123-1

около 2 месяцев назад

Security update for java-21-openjdk

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2025-13795

Уязвимость компонента JAXP программных платформ Java SE, GraalVM for JDK, GraalVM Enterprise Edition, позволяющая нарушителю получить несанкционированный доступ к данным платформы

CVSS3: 7.5
0%
Низкий
3 месяца назад
redos логотип
ROS-20251124-14

Множественные уязвимости java-1.8.0-openjdk

CVSS3: 7.5
около 2 месяцев назад
redos логотип
ROS-20251124-13

Множественные уязвимости java-11-openjdk

CVSS3: 7.5
около 2 месяцев назад
redos логотип
ROS-20251124-12

Множественные уязвимости java-17-openjdk

CVSS3: 7.5
около 2 месяцев назад
redos логотип
ROS-20251124-11

Множественные уязвимости java-21-openjdk

CVSS3: 7.5
около 2 месяцев назад
ubuntu логотип
CVE-2025-53066

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start ap...

CVSS3: 7.5
0%
Низкий
3 месяца назад
nvd логотип
CVE-2025-53066

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start appl

CVSS3: 7.5
0%
Низкий
3 месяца назад
debian логотип
CVE-2025-53066

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...

CVSS3: 7.5
0%
Низкий
3 месяца назад
github логотип
GHSA-9v5j-pxpg-qprp

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start a...

CVSS3: 7.5
0%
Низкий
3 месяца назад
suse-cvrf логотип
openSUSE-SU-2025:20125-1

Security update for java-17-openjdk

около 2 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:4039-1

Security update for java-1_8_0-openjdk

2 месяца назад
suse-cvrf логотип
SUSE-SU-2025:4038-1

Security update for java-1_8_0-openjdk

2 месяца назад
suse-cvrf логотип
SUSE-SU-2025:4005-1

Security update for java-1_8_0-openj9

2 месяца назад
suse-cvrf логотип
SUSE-SU-2025:3997-1

Security update for java-17-openjdk

2 месяца назад
suse-cvrf логотип
SUSE-SU-2025:3996-1

Security update for java-11-openjdk

2 месяца назад
suse-cvrf логотип
SUSE-SU-2025:3835-1

Security update for java-11-openjdk

3 месяца назад
oracle-oval логотип
ELSA-2025-18821

ELSA-2025-18821: java-17-openjdk security update (MODERATE)

3 месяца назад
oracle-oval логотип
ELSA-2025-18815

ELSA-2025-18815: java-1.8.0-openjdk security update (MODERATE)

3 месяца назад
oracle-oval логотип
ELSA-2025-18814

ELSA-2025-18814: java-1.8.0-openjdk security update (MODERATE)

2 месяца назад
suse-cvrf логотип
openSUSE-SU-2025:20123-1

Security update for java-21-openjdk

около 2 месяцев назад

Уязвимостей на страницу