jrockit vulnerabilities and fixes

Recent CVEs affecting jrockit, with upgrade or downgrade steps. 107 tracked.

jrockit has 107 tracked vulnerabilities, 3 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 35. Most recent: 2018-10-17. Highest priority: CVE-2016-3427 (score 97/100).

• CVE-2016-0483 HIGH 10.0 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8
• CVE-2016-0475 MEDIUM 5.8 DOWNGRADE DOWNGRADE Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 8u66; Jav
• CVE-2015-4911 MEDIUM 5.0 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7
• CVE-2015-4893 MEDIUM 5.0 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7
• CVE-2015-4872 MEDIUM 5.0 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7
• CVE-2015-4803 MEDIUM 5.0 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7
• CVE-2015-4748 HIGH 7.6 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 a
• CVE-2015-2625 LOW 2.6 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 a
• CVE-2015-2601 MEDIUM 5.0 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 a
• CVE-2018-3214 MEDIUM 5.3 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound)
• CVE-2018-3183 CRITICAL 9.0 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting)
• CVE-2018-3180 MEDIUM 5.6 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE)
• CVE-2018-3149 HIGH 8.3 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI)
• CVE-2018-2952 LOW 3.7 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency
• CVE-2018-2815 MEDIUM 5.3 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serializati
• CVE-2018-2800 MEDIUM 4.2 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI)
• CVE-2018-2799 MEDIUM 5.3 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP)
• CVE-2018-2798 MEDIUM 5.3 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT)
• CVE-2018-2797 MEDIUM 5.3 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX)
• CVE-2018-2796 MEDIUM 5.3 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency
• CVE-2018-2795 MEDIUM 5.3 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security)
• CVE-2018-2794 HIGH 7.7 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security)
• CVE-2018-2783 HIGH 7.4 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security)
• CVE-2018-2678 MEDIUM 4.3 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI)
• CVE-2018-2663 MEDIUM 4.3 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries)
• CVE-2018-2657 MEDIUM 5.3 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization)
• CVE-2018-2637 HIGH 7.4 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX)
• CVE-2018-2633 HIGH 8.3 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI)
• CVE-2018-2629 MEDIUM 5.3 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JGSS)
• CVE-2018-2618 MEDIUM 5.9 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE)
• CVE-2018-2603 MEDIUM 5.3 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries)
• CVE-2018-2599 MEDIUM 4.8 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI)
• CVE-2018-2588 MEDIUM 4.3 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: LDAP)
• CVE-2018-2579 LOW 3.7 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries)
• CVE-2017-3544 LOW 3.7 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking)
• CVE-2017-3533 LOW 3.7 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking)
• CVE-2017-3526 MEDIUM 5.9 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP)
• CVE-2017-3514 HIGH 8.3 DOWNGRADE DOWNGRADE Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT)
• CVE-2017-3511 HIGH 7.7 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE)
• CVE-2017-3253 HIGH 7.5 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D)
• CVE-2017-3252 MEDIUM 5.8 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAAS)
• CVE-2017-3241 CRITICAL 9.0 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI)
• CVE-2017-10355 MEDIUM 5.3 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking)
• CVE-2017-10345 LOW 3.1 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serializati
• CVE-2017-10295 MEDIUM 4.0 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking)
• CVE-2017-10281 MEDIUM 5.3 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serializati
• CVE-2017-10243 MEDIUM 6.5 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS)
• CVE-2017-10198 MEDIUM 6.8 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security)
• CVE-2017-10176 HIGH 7.5 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security)
• CVE-2017-10135 MEDIUM 5.9 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE)
• CVE-2017-10118 HIGH 7.5 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE)
• CVE-2017-10116 HIGH 8.3 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security)
• CVE-2017-10115 HIGH 7.5 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE)
• CVE-2017-10109 MEDIUM 5.3 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serializati
• CVE-2017-10108 MEDIUM 5.3 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serializati
• CVE-2017-10053 MEDIUM 5.3 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D)
• CVE-2016-5552 MEDIUM 5.3 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking)
• CVE-2016-5547 MEDIUM 5.3 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries)
• CVE-2016-5546 HIGH 7.5 DOWNGRADE DOWNGRADE Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries)
• CVE-2016-3508 MEDIUM 5.3 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.1
• CVE-2016-3500 MEDIUM 5.3 MITIGATE DOWNGRADE Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.1
• CVE-2016-3485 LOW 2.9 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.1
• CVE-2016-3427 CRITICAL 9.8 EXPLOITED DOWNGRADE DOWNGRADE Oracle Java SE and JRockit Unspecified Vulnerability
• CVE-2016-3425 MEDIUM 4.3 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9
• CVE-2016-0695 MEDIUM 5.9 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9
• CVE-2015-4749 MEDIUM 4.3 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 a
• CVE-2015-4000 LOW 3.7 UPGRADE MITIGATE The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, do
• CVE-2015-0488 MEDIUM 5.0 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote a
• CVE-2015-0478 MEDIUM 4.3 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote a
• CVE-2015-0410 MEDIUM 5.0 DOWNGRADE DOWNGRADE Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85,
• CVE-2014-6593 MEDIUM 4.0 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and J
• CVE-2014-6558 LOW 2.6 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R
• CVE-2014-6517 MEDIUM 5.0 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and Jrockit R27.8.3 a
• CVE-2014-6512 MEDIUM 4.3 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R
• CVE-2014-6457 MEDIUM 4.0 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R
• CVE-2014-4263 MEDIUM 4.0 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and R28.3.2, allo
• CVE-2014-4244 MEDIUM 4.0 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and JRockit R28.3
• CVE-2014-2421 HIGH 10.0 MITIGATE DOWNGRADE Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u5
• CVE-2014-2398 LOW 3.5 MITIGATE DOWNGRADE Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and
• CVE-2014-0460 MEDIUM 5.8 DOWNGRADE MITIGATE Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java S
• CVE-2014-0457 HIGH 10.0 DOWNGRADE MITIGATE Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Jav
• CVE-2014-0456 HIGH 10.0 MITIGATE DOWNGRADE Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attack
• CVE-2014-0453 MEDIUM 4.0 DOWNGRADE MITIGATE Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java S
• CVE-2014-0429 HIGH 10.0 MITIGATE DOWNGRADE Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java S
• CVE-2014-0423 MEDIUM 5.5 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embed
• CVE-2014-0411 MEDIUM 4.0 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embed
• CVE-2013-5907 HIGH 10.0 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embed
• CVE-2013-5830 HIGH 10.0 DOWNGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and ear
• CVE-2013-5825 MEDIUM 5.0 UPGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and ear
• CVE-2013-5823 MEDIUM 5.0 UPGRADE UPGRADE Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, JRockit R28.2.8 and ea
• CVE-2013-5804 MEDIUM 6.4 UPGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and ear
• CVE-2013-5803 LOW 2.6 UPGRADE UPGRADE Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and ear
• CVE-2013-5802 HIGH 7.5 UPGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and ear
• CVE-2013-5797 LOW 3.5 UPGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and ear
• CVE-2013-5782 HIGH 10.0 UPGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and ear
• CVE-2013-5780 MEDIUM 4.3 UPGRADE DOWNGRADE Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and ear
• CVE-2013-4002 HIGH 7.1 DOWNGRADE DOWNGRADE XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in
• CVE-2013-2461 HIGH 7.5 DOWNGRADE DOWNGRADE Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and ea
• CVE-2013-2380 HIGH 10.0 MITIGATE UPGRADE Unspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware R27.7.4 and earlier and
• CVE-2012-3202 HIGH 10.0 UPGRADE Multiple unspecified vulnerabilities in the Oracle JRockit component in Oracle Fusion Middleware 28.2.4 and ea
• CVE-2011-3557 MEDIUM 6.8 UPGRADE UPGRADE Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update
• CVE-2011-3556 HIGH 7.5 UPGRADE UPGRADE Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update
• CVE-2011-3553 LOW 3.5 UPGRADE UPGRADE Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update
• CVE-2011-3551 HIGH 9.3 UPGRADE UPGRADE Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update
• CVE-2011-3545 HIGH 10.0 UPGRADE UPGRADE Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27
• CVE-2009-1006 HIGH 10.0 UPGRADE Unspecified vulnerability in the JRockit component in BEA Product Suite R27.6.2 and earlier, with SDK/JRE 1.4.
• CVE-2007-0425 HIGH 7.5 UPGRADE UPGRADE Unspecified vulnerability in BEA WebLogic Platform and Server 8.1 through 8.1 SP5, and JRockit 1.4.2 R4.5 and

FAQ

How do I fix jrockit vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is jrockit being exploited right now?

Yes: 1 jrockit CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which jrockit CVE should I patch first?

CVE-2016-3427 currently ranks highest (97/100): Oracle Java SE and JRockit Unspecified Vulnerability.

RSS feed for jrockit · ← Back to latest CVEs