Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2012-1710 — Oracle Fusion Middleware Unspecified Vulnerability
Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Designer.
|
Oracle | Fusion Middleware | May 25, 2022 | Jun 15, 2022 | Ransomware |
|
CVE-2013-0422 — Oracle JRE Remote Code Execution Vulnerability
A vulnerability in the way Java restricts the permissions of Java applets could allow an attacker to execute commands on a vulnerable system.
|
Oracle | Java Runtime Environment (JRE) | May 25, 2022 | Jun 15, 2022 | Ransomware |
|
CVE-2013-0431 — Oracle JRE Sandbox Bypass Vulnerability
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle allows remote attackers to bypass the Java security sandbox.
|
Oracle | Java Runtime Environment (JRE) | May 25, 2022 | Jun 15, 2022 | Ransomware |
|
CVE-2013-2423 — Oracle JRE Unspecified Vulnerability
Unspecified vulnerability in hotspot for Java Runtime Environment (JRE) allows remote attackers to affect integrity.
|
Oracle | Java Runtime Environment (JRE) | May 25, 2022 | Jun 15, 2022 | |
|
CVE-2019-3010 — Oracle Solaris Privilege Escalation Vulnerability
Oracle Solaris component: XScreenSaver contains an unspecified vulnerability that allows for privilege escalation.
|
Oracle | Solaris | May 25, 2022 | Jun 15, 2022 | |
|
CVE-2012-0518 — Oracle Fusion Middleware Unspecified Vulnerability
Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to affect integrity via Unknown vectors
|
Oracle | Fusion Middleware | Mar 28, 2022 | Apr 18, 2022 | |
|
CVE-2012-5076 — Oracle Java SE Sandbox Bypass Vulnerability
The default Java security properties configuration did not restrict access to the com.sun.org.glassfish.external and com.sun.org.glassfish.gmbal packages. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions.
|
Oracle | Java SE | Mar 28, 2022 | Apr 18, 2022 | |
|
CVE-2013-2465 — Oracle Java SE Unspecified Vulnerability
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to 2D
|
Oracle | Java SE | Mar 28, 2022 | Apr 18, 2022 | Ransomware |
|
CVE-2019-2616 — Oracle BI Publisher Unauthorized Access Vulnerability
Oracle BI Publisher, formerly XML Publisher, contains an unspecified vulnerability that allows for various unauthorized actions. Open-source reporting attributes this vulnerability to allowing for authentication bypass.
|
Oracle | BI Publisher (Formerly XML Publisher) | Mar 25, 2022 | Apr 15, 2022 | |
|
CVE-2008-3431 — Oracle VirtualBox Insufficient Input Validation Vulnerability
An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary code.
|
Oracle | VirtualBox | Mar 3, 2022 | Mar 24, 2022 |
Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Designer.
Fusion Middleware · May 25, 2022
A vulnerability in the way Java restricts the permissions of Java applets could allow an attacker to execute commands on a vulnerable system.
Java Runtime Environment (JRE) · May 25, 2022
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle allows remote attackers to bypass the Java security sandbox.
Java Runtime Environment (JRE) · May 25, 2022
Unspecified vulnerability in hotspot for Java Runtime Environment (JRE) allows remote attackers to affect integrity.
Java Runtime Environment (JRE) · May 25, 2022
Oracle Solaris component: XScreenSaver contains an unspecified vulnerability that allows for privilege escalation.
Solaris · May 25, 2022
Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to affect integrity via Unknown vectors
Fusion Middleware · Mar 28, 2022
The default Java security properties configuration did not restrict access to the com.sun.org.glassfish.external and com.sun.org.glassfish.gmbal packages. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions.
Java SE · Mar 28, 2022
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to 2D
Java SE · Mar 28, 2022
Oracle BI Publisher, formerly XML Publisher, contains an unspecified vulnerability that allows for various unauthorized actions. Open-source reporting attributes this vulnerability to allowing for authentication bypass.
BI Publisher (Formerly XML Publisher) · Mar 25, 2022
An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary code.
VirtualBox · Mar 3, 2022