Search CVE reports
1 – 10 of 48 results
Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to...
12 affected packages
bcel, openjdk-8, openjdk-9, openjdk-lts, openjdk-13...
| Package | 24.04 LTS |
|---|---|
| bcel | Needs evaluation |
| openjdk-8 | Needs evaluation |
| openjdk-9 | Not in release |
| openjdk-lts | Needs evaluation |
| openjdk-13 | Not in release |
| openjdk-16 | Not in release |
| openjdk-17 | Needs evaluation |
| openjdk-17-crac | Not in release |
| openjdk-18 | Not in release |
| openjdk-21 | Needs evaluation |
| openjdk-21-crac | Not in release |
| openjdk-25 | Needs evaluation |
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Commons BCEL. This only happens when you're using Class2HTML to generate webpages for possibly-attacker-controlled class...
12 affected packages
bcel, openjdk-8, openjdk-9, openjdk-lts, openjdk-13...
| Package | 24.04 LTS |
|---|---|
| bcel | Needs evaluation |
| openjdk-8 | Needs evaluation |
| openjdk-9 | Not in release |
| openjdk-lts | Needs evaluation |
| openjdk-13 | Not in release |
| openjdk-16 | Not in release |
| openjdk-17 | Needs evaluation |
| openjdk-17-crac | Not in release |
| openjdk-18 | Not in release |
| openjdk-21 | Needs evaluation |
| openjdk-21-crac | Not in release |
| openjdk-25 | Needs evaluation |
Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle GraalVM for JDK 21: 23.1.12.1; ...
11 affected packages
openjdk-8, openjdk-9, openjdk-lts, openjdk-13, openjdk-16...
| Package | 24.04 LTS |
|---|---|
| openjdk-8 | Needs evaluation |
| openjdk-9 | Not in release |
| openjdk-lts | Needs evaluation |
| openjdk-13 | Not in release |
| openjdk-16 | Not in release |
| openjdk-17 | Needs evaluation |
| openjdk-17-crac | Not in release |
| openjdk-18 | Not in release |
| openjdk-21 | Needs evaluation |
| openjdk-21-crac | Not in release |
| openjdk-25 | Needs evaluation |
Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle...
11 affected packages
openjdk-8, openjdk-9, openjdk-lts, openjdk-13, openjdk-16...
| Package | 24.04 LTS |
|---|---|
| openjdk-8 | Needs evaluation |
| openjdk-9 | Not in release |
| openjdk-lts | Needs evaluation |
| openjdk-13 | Not in release |
| openjdk-16 | Not in release |
| openjdk-17 | Needs evaluation |
| openjdk-17-crac | Not in release |
| openjdk-18 | Not in release |
| openjdk-21 | Needs evaluation |
| openjdk-21-crac | Not in release |
| openjdk-25 | Needs evaluation |
Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle GraalVM for JDK 21: 23.1.12.1; ...
11 affected packages
openjdk-8, openjdk-9, openjdk-lts, openjdk-13, openjdk-16...
| Package | 24.04 LTS |
|---|---|
| openjdk-8 | Needs evaluation |
| openjdk-9 | Not in release |
| openjdk-lts | Needs evaluation |
| openjdk-13 | Not in release |
| openjdk-16 | Not in release |
| openjdk-17 | Needs evaluation |
| openjdk-17-crac | Not in release |
| openjdk-18 | Not in release |
| openjdk-21 | Needs evaluation |
| openjdk-21-crac | Not in release |
| openjdk-25 | Needs evaluation |
Some fixes available 3 of 5
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32,...
11 affected packages
openjdk-8, openjdk-9, openjdk-lts, openjdk-13, openjdk-16...
| Package | 24.04 LTS |
|---|---|
| openjdk-8 | Fixed |
| openjdk-9 | Not in release |
| openjdk-lts | Fixed |
| openjdk-13 | Not in release |
| openjdk-16 | Not in release |
| openjdk-17 | Needs evaluation |
| openjdk-17-crac | Not in release |
| openjdk-18 | Not in release |
| openjdk-21 | Needs evaluation |
| openjdk-21-crac | Not in release |
| openjdk-25 | Fixed |
Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 25.0.4 and 26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...
11 affected packages
openjdk-8, openjdk-9, openjdk-lts, openjdk-13, openjdk-16...
| Package | 24.04 LTS |
|---|---|
| openjdk-8 | Not affected |
| openjdk-9 | Not in release |
| openjdk-lts | Not affected |
| openjdk-13 | Not in release |
| openjdk-16 | Not in release |
| openjdk-17 | Not affected |
| openjdk-17-crac | Not in release |
| openjdk-18 | Not in release |
| openjdk-21 | Not affected |
| openjdk-21-crac | Not in release |
| openjdk-25 | Fixed |
Some fixes available 3 of 5
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20,...
11 affected packages
openjdk-8, openjdk-9, openjdk-lts, openjdk-13, openjdk-16...
| Package | 24.04 LTS |
|---|---|
| openjdk-8 | Fixed |
| openjdk-9 | Not in release |
| openjdk-lts | Fixed |
| openjdk-13 | Not in release |
| openjdk-16 | Not in release |
| openjdk-17 | Needs evaluation |
| openjdk-17-crac | Not in release |
| openjdk-18 | Not in release |
| openjdk-21 | Needs evaluation |
| openjdk-21-crac | Not in release |
| openjdk-25 | Fixed |
Some fixes available 3 of 5
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20,...
11 affected packages
openjdk-8, openjdk-9, openjdk-lts, openjdk-13, openjdk-16...
| Package | 24.04 LTS |
|---|---|
| openjdk-8 | Fixed |
| openjdk-9 | Not in release |
| openjdk-lts | Fixed |
| openjdk-13 | Not in release |
| openjdk-16 | Not in release |
| openjdk-17 | Needs evaluation |
| openjdk-17-crac | Not in release |
| openjdk-18 | Not in release |
| openjdk-21 | Needs evaluation |
| openjdk-21-crac | Not in release |
| openjdk-25 | Fixed |
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31,...
12 affected packages
openjdk-8, openjdk-9, openjdk-lts, openjdk-13, openjdk-16...
| Package | 24.04 LTS |
|---|---|
| openjdk-8 | Fixed |
| openjdk-9 | Not in release |
| openjdk-lts | Fixed |
| openjdk-13 | Not in release |
| openjdk-16 | Not in release |
| openjdk-17 | Fixed |
| openjdk-17-crac | Not in release |
| openjdk-18 | Not in release |
| openjdk-21 | Fixed |
| openjdk-21-crac | Not in release |
| openjdk-25 | Fixed |
| openjdk-26 | Not in release |