Product by Oracle

    Java Se

    22 known vulnerabilities in Java Se (Oracle), 0 of them actively exploited (CISA KEV).

    Key figures

    22

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    5

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Java Se (Oracle)
    CriticalCVE-2017-3241

    Oracle Java SE: security vulnerability

    also in 4 other products

    		9.0
    CriticalCVE-2017-3272

    Oracle Java SE: security vulnerability

    also in 3 other products

    		9.6
    HighCVE-2021-21349

    Xstream: Deserialization of Untrusted Data

    also in 17 other products

    		6.1
    CriticalCVE-2017-3289

    Oracle Java SE: security vulnerability

    also in 3 other products

    		9.6
    HighCVE-2017-3253

    Oracle Java SE: security vulnerability

    also in 4 other products

    		7.5
    HighCVE-2016-5546

    Oracle Java SE: security vulnerability

    also in 4 other products

    		7.5
    MediumCVE-2019-7317

    libpng: Use-After-Free

    also in 32 other products

    		5.3
    MediumCVE-2016-5549

    Oracle Java SE: security vulnerability

    also in 3 other products

    		6.5
    HighCVE-2017-3260

    Oracle Java SE: security vulnerability

    also in 2 other products

    		8.3
    MediumCVE-2016-5548

    Oracle Java SE: security vulnerability

    also in 3 other products

    		6.5
    MediumCVE-2016-5547

    Oracle Java SE: Denial of Service

    also in 4 other products

    		5.3
    MediumCVE-2022-21496

    Oracle Java SE JDK and JRE: security vulnerability

    also in 18 other products

    		5.3
    MediumCVE-2019-10219

    Hibernate Hibernate-validator: Cross-site Scripting

    also in 166 other products

    		6.5
    MediumCVE-2016-5552

    Oracle Java SE: security vulnerability

    also in 4 other products

    		5.3
    CriticalCVE-2026-91403

    Oracle Java SE: security vulnerability

    also in 6 other products

    		9.1
    MediumCVE-2017-3262

    Oracle Java SE: security vulnerability

    also in 2 other products

    		5.3
    LowCVE-2022-21443

    Oracle Java SE JDK and JRE: Denial of Service

    also in 18 other products

    		3.7
    CriticalCVE-2026-114820

    Oracle Java SE: Use of a Broken or Risky Cryptographic Algorithm

    also in 3 other products

    		9.1
    MediumCVE-2017-3231

    Oracle Java SE: security vulnerability

    also in 3 other products

    		4.3
    LowCVE-2017-3259

    Oracle Java SE: security vulnerability

    also in 2 other products

    		3.7
    LowCVE-2016-8328

    Oracle Java SE: security vulnerability

    also in 2 other products

    		3.7
    MediumCVE-2021-41041

    The Eclipse Foundation Eclipse OpenJ9: Unchecked Return Value

    also in 2 other products

    		5.3

    All products by Oracle