Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2011-3544 — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
An access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.
|
Oracle | Java SE JDK and JRE | Mar 3, 2022 | Mar 24, 2022 | |
|
CVE-2012-0507 — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.
|
Oracle | Java SE | Mar 3, 2022 | Mar 24, 2022 | Ransomware |
|
CVE-2012-1723 — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Hotspot.
|
Oracle | Java SE | Mar 3, 2022 | Mar 24, 2022 | Ransomware |
|
CVE-2012-4681 — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
The Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution.
|
Oracle | Java SE | Mar 3, 2022 | Mar 24, 2022 | Ransomware |
|
CVE-2015-2590 — Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.
|
Oracle | Java SE | Mar 3, 2022 | Mar 24, 2022 | |
|
CVE-2015-4902 — Oracle Java SE Integrity Check Vulnerability
Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment.
|
Oracle | Java SE | Mar 3, 2022 | Mar 24, 2022 | |
|
CVE-2017-10271 — Oracle Corporation WebLogic Server Remote Code Execution Vulnerability
Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution.
|
Oracle | WebLogic Server | Feb 10, 2022 | Aug 10, 2022 | Ransomware |
|
CVE-2020-14864 — Oracle Business Intelligence Enterprise Edition Path Transversal
Path traversal vulnerability, where an attacker can target the preview FilePath parameter of the getPreviewImage function to get access to arbitrary system file.
|
Oracle | Intelligence Enterprise Edition | Jan 18, 2022 | Jul 18, 2022 | |
|
CVE-2019-2725 — Oracle WebLogic Server, Injection
Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).
|
Oracle | WebLogic Server | Jan 10, 2022 | Jul 10, 2022 | Ransomware |
|
CVE-2012-3152 — Oracle Fusion Middleware Unspecified Vulnerability
Oracle Fusion Middleware Reports Developer contains an unspecified vulnerability that allows remote attackers to affect confidentiality and integrity of affected systems.
|
Oracle | Fusion Middleware | Nov 3, 2021 | May 3, 2022 |
An access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.
Java SE JDK and JRE · Mar 3, 2022
An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.
Java SE · Mar 3, 2022
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Hotspot.
Java SE · Mar 3, 2022
The Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution.
Java SE · Mar 3, 2022
An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.
Java SE · Mar 3, 2022
Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment.
Java SE · Mar 3, 2022
Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution.
WebLogic Server · Feb 10, 2022
Path traversal vulnerability, where an attacker can target the preview FilePath parameter of the getPreviewImage function to get access to arbitrary system file.
Intelligence Enterprise Edition · Jan 18, 2022
Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).
WebLogic Server · Jan 10, 2022
Oracle Fusion Middleware Reports Developer contains an unspecified vulnerability that allows remote attackers to affect confidentiality and integrity of affected systems.
Fusion Middleware · Nov 3, 2021