Поиск уязвимостей
Количество 15
Количество 15
GHSA-m2mw-3v6r-66h4
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandb...
CVE-2026-87367
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandb...
CVE-2026-87367
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandb...
CVE-2026-87367
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxe
CVE-2026-87367
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...
RLSA-2026:88352
Important: java-17-openjdk security update for Rocky Linux 8
ELSA-2026-90500
ELSA-2026-90500: java-17-openjdk security update for RHEL 9 (IMPORTANT)
ALT-PU-2026-20249
ALT-PU-2026-20249: package `java-17-openjdk` update to version 17.0.21.0.9-alt1
ALT-PU-2026-19973
ALT-PU-2026-19973: package `java-17-openjdk` update to version 17.0.21.0.9-alt1
ELSA-2026-90504
ELSA-2026-90504: java-21-openjdk security update for RHEL 10 (IMPORTANT)
RLSA-2026:88347
Important: java-25-openjdk security update
ALT-PU-2026-20234
ALT-PU-2026-20234: package `java-21-openjdk` update to version 21.0.13.0.9-alt0.c10.1
ALT-PU-2026-19960
ALT-PU-2026-19960: package `java-21-openjdk` update to version 21.0.13.0.9-alt1
ALT-PU-2026-20885
ALT-PU-2026-20885: package `java-11-openjdk` update to version 11.0.33.0.9-alt1
ALT-PU-2026-19954
ALT-PU-2026-19954: package `java-25-openjdk` update to version 25.0.5.0.8-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
GHSA-m2mw-3v6r-66h4 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandb... | CVSS3: 3.7 | 0% Низкий | 19 дней назад | |
CVE-2026-87367 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandb... | CVSS3: 3.7 | 0% Низкий | 19 дней назад | |
CVE-2026-87367 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandb... | CVSS3: 3.7 | 0% Низкий | 19 дней назад | |
CVE-2026-87367 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxe | CVSS3: 3.7 | 0% Низкий | 19 дней назад | |
CVE-2026-87367 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ... | CVSS3: 3.7 | 0% Низкий | 19 дней назад | |
RLSA-2026:88352 Important: java-17-openjdk security update for Rocky Linux 8 | 11 дней назад | |||
ELSA-2026-90500 ELSA-2026-90500: java-17-openjdk security update for RHEL 9 (IMPORTANT) | 7 дней назад | |||
ALT-PU-2026-20249 ALT-PU-2026-20249: package `java-17-openjdk` update to version 17.0.21.0.9-alt1 | CVSS3: 7 | 11 дней назад | ||
ALT-PU-2026-19973 ALT-PU-2026-19973: package `java-17-openjdk` update to version 17.0.21.0.9-alt1 | CVSS3: 7 | 13 дней назад | ||
ELSA-2026-90504 ELSA-2026-90504: java-21-openjdk security update for RHEL 10 (IMPORTANT) | 10 дней назад | |||
RLSA-2026:88347 Important: java-25-openjdk security update | 11 дней назад | |||
ALT-PU-2026-20234 ALT-PU-2026-20234: package `java-21-openjdk` update to version 21.0.13.0.9-alt0.c10.1 | CVSS3: 7 | 12 дней назад | ||
ALT-PU-2026-19960 ALT-PU-2026-19960: package `java-21-openjdk` update to version 21.0.13.0.9-alt1 | CVSS3: 7 | 13 дней назад | ||
ALT-PU-2026-20885 ALT-PU-2026-20885: package `java-11-openjdk` update to version 11.0.33.0.9-alt1 | CVSS3: 9.1 | 4 дня назад | ||
ALT-PU-2026-19954 ALT-PU-2026-19954: package `java-25-openjdk` update to version 25.0.5.0.8-alt1 | CVSS3: 7 | 13 дней назад |
Уязвимостей на страницу