CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1–4 of 4 records

CVE Vendor Product Added Due Status
CVE-2010-0840 — Oracle JRE Unspecified Vulnerability
Unspecified vulnerability in the Java Runtime Environment (JRE) in Java SE component allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors.
 Oracle Java Runtime Environment (JRE) May 25, 2022 Jun 15, 2022
CVE-2013-0422 — Oracle JRE Remote Code Execution Vulnerability
A vulnerability in the way Java restricts the permissions of Java applets could allow an attacker to execute commands on a vulnerable system.
 Oracle Java Runtime Environment (JRE) May 25, 2022 Jun 15, 2022 Ransomware
CVE-2013-0431 — Oracle JRE Sandbox Bypass Vulnerability
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle allows remote attackers to bypass the Java security sandbox.
 Oracle Java Runtime Environment (JRE) May 25, 2022 Jun 15, 2022 Ransomware
CVE-2013-2423 — Oracle JRE Unspecified Vulnerability
Unspecified vulnerability in hotspot for Java Runtime Environment (JRE) allows remote attackers to affect integrity.
 Oracle Java Runtime Environment (JRE) May 25, 2022 Jun 15, 2022