# Oracle Corporation Java SE JDK and JRE.

Every CVE that names Oracle Corporation Java SE JDK and JRE among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Information disclosure in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2024-21147.md)
  `CVE-2024-21147` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 7.4 High · Not analysed yet · Published 16 Jul 2024 · Tags: Information disclosure
- [Improper access control in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2024-21145.md)
  `CVE-2024-21145` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 4.8 Medium · Not analysed yet · Published 16 Jul 2024 · Tags: Broken access control
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).](https://agentprime.io/advisories/CVE-2024-21144.md)
  `CVE-2024-21144` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.7 Low · Not analysed yet · Published 16 Jul 2024
- [Information disclosure in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2024-21140.md)
  `CVE-2024-21140` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 4.8 Medium · Not analysed yet · Published 16 Jul 2024 · Tags: Information disclosure
- [Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).](https://agentprime.io/advisories/CVE-2024-21138.md)
  `CVE-2024-21138` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.7 Low · Not analysed yet · Published 16 Jul 2024
- [Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).](https://agentprime.io/advisories/CVE-2024-21131.md)
  `CVE-2024-21131` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.7 Low · Not analysed yet · Published 16 Jul 2024
- [Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).](https://agentprime.io/advisories/CVE-2024-21094.md)
  `CVE-2024-21094` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.7 Low · Not analysed yet · Published 16 Apr 2024 · Tags: CWE-349
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).](https://agentprime.io/advisories/CVE-2024-21085.md)
  `CVE-2024-21085` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.7 Low · Not analysed yet · Published 16 Apr 2024
- [Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).](https://agentprime.io/advisories/CVE-2024-21068.md)
  `CVE-2024-21068` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.7 Low · Not analysed yet · Published 16 Apr 2024
- [Incorrect default permissions in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2024-21012.md)
  `CVE-2024-21012` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.7 Low · Not analysed yet · Published 16 Apr 2024 · Tags: Broken access control
- [Resource allocation without limits in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2024-21011.md)
  `CVE-2024-21011` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.7 Low · Not analysed yet · Published 16 Apr 2024 · Tags: Denial of service
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).](https://agentprime.io/advisories/CVE-2024-21005.md)
  `CVE-2024-21005` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.1 Low · Not analysed yet · Published 16 Apr 2024
- [Incorrect default permissions in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2024-21004.md)
  `CVE-2024-21004` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 2.5 Low · Not analysed yet · Published 16 Apr 2024 · Tags: Broken access control
- [Execution with unnecessary privileges in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2024-21003.md)
  `CVE-2024-21003` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.1 Low · Not analysed yet · Published 16 Apr 2024 · Tags: Privilege escalation
- [Incorrect default permissions in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2024-21002.md)
  `CVE-2024-21002` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 2.5 Low · Not analysed yet · Published 16 Apr 2024 · Tags: Broken access control
- [Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).](https://agentprime.io/advisories/CVE-2024-20945.md)
  `CVE-2024-20945` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 4.7 Medium · Not analysed yet · Published 17 Feb 2024
- [Protection mechanism failure in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2024-20923.md)
  `CVE-2024-20923` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.1 Low · Not analysed yet · Published 17 Feb 2024 · Tags: CWE-693
- [Incorrect default permissions in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2024-20921.md)
  `CVE-2024-20921` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 5.9 Medium · Not analysed yet · Published 17 Feb 2024 · Tags: Broken access control
- [Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).](https://agentprime.io/advisories/CVE-2024-20919.md)
  `CVE-2024-20919` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 5.9 Medium · Not analysed yet · Published 17 Feb 2024
- [Use after free in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2024-20952.md)
  `CVE-2024-20952` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 7.4 High · Not analysed yet · Published 16 Jan 2024 · Tags: Broken access control, Memory corruption
- [Improper access control in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2024-20932.md)
  `CVE-2024-20932` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 · Tags: Broken access control
- [Deserialization of untrusted data in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2024-20926.md)
  `CVE-2024-20926` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 5.9 Medium · Not analysed yet · Published 16 Jan 2024 · Tags: Broken access control, Insecure deserialization, CWE-693
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).](https://agentprime.io/advisories/CVE-2024-20922.md)
  `CVE-2024-20922` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 2.5 Low · Not analysed yet · Published 16 Jan 2024
- [Improper access control in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2024-20918.md)
  `CVE-2024-20918` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 7.4 High · Not analysed yet · Published 16 Jan 2024 · Tags: Broken access control
- [Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).](https://agentprime.io/advisories/CVE-2023-22081.md)
  `CVE-2023-22081` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 5.3 Medium · Not analysed yet · Published 17 Oct 2023
- [Incorrect authorization in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2023-22067.md)
  `CVE-2023-22067` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 5.3 Medium · Not analysed yet · Published 17 Oct 2023 · Tags: Broken access control
- [Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java SE (component: Hotspot).](https://agentprime.io/advisories/CVE-2023-22025.md)
  `CVE-2023-22025` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.7 Low · Not analysed yet · Published 17 Oct 2023
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Libraries).](https://agentprime.io/advisories/CVE-2023-22049.md)
  `CVE-2023-22049` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.7 Low · Not analysed yet · Published 18 Jul 2023
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot).](https://agentprime.io/advisories/CVE-2023-22045.md)
  `CVE-2023-22045` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.7 Low · Not analysed yet · Published 18 Jul 2023
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot).](https://agentprime.io/advisories/CVE-2023-22044.md)
  `CVE-2023-22044` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.7 Low · Not analysed yet · Published 18 Jul 2023
- [Vulnerability in Oracle Java SE (component: JavaFX).](https://agentprime.io/advisories/CVE-2023-22043.md)
  `CVE-2023-22043` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 5.9 Medium · Not analysed yet · Published 18 Jul 2023
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot).](https://agentprime.io/advisories/CVE-2023-22041.md)
  `CVE-2023-22041` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 5.1 Medium · Not analysed yet · Published 18 Jul 2023
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Utility).](https://agentprime.io/advisories/CVE-2023-22036.md)
  `CVE-2023-22036` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.7 Low · Not analysed yet · Published 18 Jul 2023
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking).](https://agentprime.io/advisories/CVE-2023-22006.md)
  `CVE-2023-22006` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.1 Low · Not analysed yet · Published 18 Jul 2023
- [Improper access control in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2023-21968.md)
  `CVE-2023-21968` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.7 Low · Not analysed yet · Published 18 Apr 2023 · Tags: Broken access control
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).](https://agentprime.io/advisories/CVE-2023-21967.md)
  `CVE-2023-21967` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 5.9 Medium · Not analysed yet · Published 18 Apr 2023
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).](https://agentprime.io/advisories/CVE-2023-21954.md)
  `CVE-2023-21954` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 5.9 Medium · Not analysed yet · Published 18 Apr 2023
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).](https://agentprime.io/advisories/CVE-2023-21939.md)
  `CVE-2023-21939` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 5.3 Medium · Not analysed yet · Published 18 Apr 2023
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).](https://agentprime.io/advisories/CVE-2023-21938.md)
  `CVE-2023-21938` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.7 Low · Not analysed yet · Published 18 Apr 2023
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).](https://agentprime.io/advisories/CVE-2023-21937.md)
  `CVE-2023-21937` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.7 Low · Not analysed yet · Published 18 Apr 2023
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).](https://agentprime.io/advisories/CVE-2023-21930.md)
  `CVE-2023-21930` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 7.4 High · Not analysed yet · Published 18 Apr 2023
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).](https://agentprime.io/advisories/CVE-2023-21843.md)
  `CVE-2023-21843` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.7 Low · Not analysed yet · Published 17 Jan 2023
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).](https://agentprime.io/advisories/CVE-2023-21835.md)
  `CVE-2023-21835` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 5.3 Medium · Not analysed yet · Published 17 Jan 2023
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).](https://agentprime.io/advisories/CVE-2023-21830.md)
  `CVE-2023-21830` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 5.3 Medium · Not analysed yet · Published 17 Jan 2023
- [Improper access control in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2022-39399.md)
  `CVE-2022-39399` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.7 Low · Not analysed yet · Published 18 Oct 2022 · Tags: Broken access control
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).](https://agentprime.io/advisories/CVE-2022-21628.md)
  `CVE-2022-21628` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 5.3 Medium · Not analysed yet · Published 18 Oct 2022
- [Protection mechanism failure in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2022-21626.md)
  `CVE-2022-21626` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 5.3 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-693
- [Deserialization of untrusted data in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2022-21624.md)
  `CVE-2022-21624` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.7 Low · Not analysed yet · Published 18 Oct 2022 · Tags: Insecure deserialization
- [Improper access control in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2022-21619.md)
  `CVE-2022-21619` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.7 Low · Not analysed yet · Published 18 Oct 2022 · Tags: Broken access control
- [Improper authentication in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2022-21618.md)
  `CVE-2022-21618` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 5.3 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: Authentication bypass
- [Deserialization of untrusted data in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2022-21549.md)
  `CVE-2022-21549` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 5.3 Medium · Not analysed yet · Published 19 Jul 2022 · Tags: Insecure deserialization
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).](https://agentprime.io/advisories/CVE-2022-21541.md)
  `CVE-2022-21541` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 5.9 Medium · Not analysed yet · Published 19 Jul 2022
- [Use after free in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2022-21540.md)
  `CVE-2022-21540` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 5.3 Medium · Not analysed yet · Published 19 Jul 2022 · Tags: Memory corruption
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI).](https://agentprime.io/advisories/CVE-2022-21496.md)
  `CVE-2022-21496` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 5.3 Medium · Not analysed yet · Published 19 Apr 2022
- [Improper access control in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2022-21476.md)
  `CVE-2022-21476` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 7.5 High · Not analysed yet · Published 19 Apr 2022 · Tags: Broken access control
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).](https://agentprime.io/advisories/CVE-2022-21449.md)
  `CVE-2022-21449` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.77 · Not analysed yet · Published 19 Apr 2022
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).](https://agentprime.io/advisories/CVE-2022-21443.md)
  `CVE-2022-21443` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 3.7 Low · Not analysed yet · Published 19 Apr 2022
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).](https://agentprime.io/advisories/CVE-2022-21434.md)
  `CVE-2022-21434` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 5.3 Medium · Not analysed yet · Published 19 Apr 2022
- [Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).](https://agentprime.io/advisories/CVE-2022-21426.md)
  `CVE-2022-21426` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 5.3 Medium · Not analysed yet · Published 19 Apr 2022
- [Uncontrolled resource consumption in Oracle Corporation Java SE JDK and JRE](https://agentprime.io/advisories/CVE-2022-21366.md)
  `CVE-2022-21366` · CVE record: Oracle Corporation Java SE JDK and JRE · CVSS 5.3 Medium · Not analysed yet · Published 19 Jan 2022 · Tags: Denial of service

Older: <https://agentprime.io/advisories/technology/oracle-corporation-java-se-jdk-and-jre.md?cursor=WyIyMDIyLTAxLTE5VDExOjI1OjQ5LjAwMDAwMFoiLCJDVkUtMjAyMi0yMTM2NiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=oracle-corporation-java-se-jdk-and-jre>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/oracle-corporation-java-se-jdk-and-jre/>. Everything for agents: <https://agentprime.io/llms.txt>.