Sploitus

30 exploited vulnerabilities in Javafx

Vulnerabilities with publicly known exploits

Vendors
Centos, Hewlett Packard, Ibm, Oracle, Red Hat, Suse
With known exploits
30
Affected Canonical Ubuntu Linux versions
= 10.04, 12.04, 12.10, 13.10, 14.04
Affected Oracle Javafx versions
≤ 2.2.40, 2.2.7, 2.2, 1.2, 1.2.2, 1.2.3, 1.3.0, 1.3.1, 2.0, 2.0.2, 2.0.3, 2.1, 2.2.51
Affected Oracle Jdk versions
= 1.5.0, 1.6.0, 1.7.0, 1.8.0
Affected Oracle Jre versions
= 1.5.0, 1.6.0, 1.7.0, 1.8.0
Affected Sun Jre versions
= 1.6.0, 1.4.2_35, 1.4.2, 1.4.2_1, 1.4.2_2, 1.4.2_3, 1.4.2_4, 1.4.2_5, 1.4.2_6, 1.4.2_7, 1.4.2_8, 1.4.2_9, 1.4.2_10, 1.4.2_11, 1.4.2_12, 1.4.2_13, 1.4.2_14, 1.4.2_15, 1.4.2_16, 1.4.2_17, 1.4.2_18, 1.4.2_19, 1.4.2_20, 1.4.2_21, 1.4.2_22, 1.4.2_23, 1.4.2_24, 1.4.2_25, 1.4.2_26, 1.4.2_27, 1.4.2_28, 1.4.2_29, 1.4.2_30, 1.4.2_31, 1.4.2_32, 1.4.2_33, 1.4.2_34
Affected Xstream versions
< 1.4.18
Affected Sun Jdk versions
= 1.6.0, 1.5.0

Vulnerabilities with exploits

Highest CVSS first — 6 of these already have exploit code on Sploitus

CVE-2014-2421
CVSS 10.0 HIGH 2014-04-15FIX AVAILABLE
CVE-2013-5843
CVSS 10.0 HIGH 2013-10-16FIX AVAILABLE
CVE-2013-2434
CVSS 10.0 HIGH 2013-04-17FIX AVAILABLE
CVE-2013-1491 1 exploit
CVSS 10.0 HIGH 2013-03-08FIX AVAILABLE
Exploit for Code Injection in Oracle Jdk
CVE-2013-1479
CVSS 10.0 HIGH 2013-02-01FIX AVAILABLE
CVE-2013-0437
CVSS 10.0 HIGH 2013-02-01FIX AVAILABLE
CVE-2013-0402
CVSS 10.0 HIGH 2013-03-08FIX AVAILABLE
CVE-2012-5083
CVSS 10.0 HIGH 2012-10-16FIX AVAILABLE
CVE-2012-1713
CVSS 10.0 HIGH 2012-06-13FIX AVAILABLE
CVE-2012-1531
CVSS 10.0 HIGH 2012-10-16FIX AVAILABLE
CVE-2012-0508
CVSS 10.0 HIGH 2012-02-15FIX AVAILABLE
CVE-2012-0500 17 exploits
CVSS 10.0 HIGH 2012-02-15
Java Web Start Double Quote Injection Remote Code ExecutionSun Java Web Start Double Quote Injection
CVE-2012-0499 1 exploit
CVSS 10.0 HIGH 2012-02-15FIX AVAILABLE
IBM Rational AppScan 8.x/7.x 多个安全漏洞
CVE-2014-0417 1 exploit
CVSS 9.3 HIGH 2014-01-15FIX AVAILABLE
Oracle Java SE远程安全漏洞(CVE-2014-0417)
CVE-2021-39153
CVSS 8.5 HIGH 2021-08-23FIX AVAILABLE
CVE-2013-2430
CVSS 7.6 HIGH 2013-04-17FIX AVAILABLE
CVE-2013-2394
CVSS 7.6 HIGH 2013-04-17
CVE-2013-1563
CVSS 7.6 HIGH 2013-04-17FIX AVAILABLE
CVE-2013-2439
CVSS 6.9 MEDIUM 2013-04-17FIX AVAILABLE
CVE-2011-3546 1 exploit
CVSS 5.8 MEDIUM 2011-10-19FIX AVAILABLE
IBM Rational AppScan 8.x/7.x 多个安全漏洞
CVE-2014-2401
CVSS 5.0 MEDIUM 2014-04-15FIX AVAILABLE
CVE-2013-5848
CVSS 5.0 MEDIUM 2013-10-16FIX AVAILABLE
CVE-2013-2444
CVSS 5.0 MEDIUM 2013-06-18FIX AVAILABLE
CVE-2013-2438
CVSS 5.0 MEDIUM 2013-04-17FIX AVAILABLE
CVE-2013-1564
CVSS 5.0 MEDIUM 2013-04-17FIX AVAILABLE
CVE-2013-1561
CVSS 5.0 MEDIUM 2013-04-17FIX AVAILABLE
CVE-2013-1571
CVSS 4.3 MEDIUM 2013-06-18
CVE-2014-2398
CVSS 3.5 LOW 2014-04-15
CVE-2013-5797
CVSS 3.5 LOW 2013-10-16FIX AVAILABLE
CVE-2011-3561 1 exploit
CVSS 1.8 LOW 2011-10-19FIX AVAILABLE
IBM Rational AppScan 8.x/7.x 多个安全漏洞