Oracle / Java SE Embedded
10 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2017-3289 | OpenJDK: insecure class construction (Hotspot, 8167104) | CRITICAL | 9.6 | Jan 27, 2017 |
| CVE-2017-3272 | OpenJDK: insufficient protected field access checks in atomic field updaters (Libraries, 8165344) | CRITICAL | 9.6 | Jan 27, 2017 |
| CVE-2017-3253 | OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988) | HIGH | 7.5 | Jan 27, 2017 |
| CVE-2017-3241 | OpenJDK: untrusted input deserialization in RMI registry and DCG (RMI, 8156802) | CRITICAL | 9.0 | Jan 27, 2017 |
| CVE-2017-3231 | OpenJDK: URLClassLoader insufficient access control checks (Networking, 8151934) | MEDIUM | 4.3 | Jan 27, 2017 |
| CVE-2016-5552 | OpenJDK: incorrect URL parsing in URLStreamHandler (Networking, 8167223) | MEDIUM | 5.3 | Jan 27, 2017 |
| CVE-2016-5549 | OpenJDK: ECDSA implementation timing attack (Libraries, 8168724) | MEDIUM | 6.5 | Jan 27, 2017 |
| CVE-2016-5548 | OpenJDK: DSA implementation timing attack (Libraries, 8168728) | MEDIUM | 6.5 | Jan 27, 2017 |
| CVE-2016-5547 | OpenJDK: missing ObjectIdentifier length check (Libraries, 8168705) | MEDIUM | 5.3 | Jan 27, 2017 |
| CVE-2016-5546 | OpenJDK: incorrect ECDSA signature extraction from the DER input (Libraries, 8168714) | HIGH | 7.5 | Jan 27, 2017 |
Showing 1 to 10 of 10 CVEs