Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:jdk:1.8.0:update66:*:*:*:*:*:*

part: a version: 1.8.0 update: update66

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductJdk (1532aff9-da05-5018-bb6b-845c5e55198b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-2801 not_vulnerable 2026-06-08 05:25:00.437783 Details available
CRITICAL (9.8)
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. Note: The patch for this issue will address the vulnerability only if the WLS instance is using JDK 1.7.0_191 or later, or JDK 1.8.0_181 or later. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Published: 2020-04-15T13:29:46.000Z
Updated: 2024-09-30T14:55:20.174Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0494 vulnerable 2026-06-08 05:07:15.339743 Details available
Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
Published: 2016-01-21T02:00:00.000Z
Updated: 2024-08-05T22:22:55.218Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0483 vulnerable 2026-06-08 05:07:15.335202 Details available
Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a heap-based buffer overflow in the readImage function, which allows remote attackers to execute arbitrary code via crafted image data.
Published: 2016-01-21T02:00:00.000Z
Updated: 2024-08-05T22:22:54.250Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0475 vulnerable 2026-06-08 05:07:15.327864 Details available
Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.
Published: 2016-01-21T02:00:00.000Z
Updated: 2024-08-05T22:22:55.215Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0466 vulnerable 2026-06-08 05:07:15.319141 Details available
Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect availability via vectors related to JAXP.
Published: 2016-01-21T02:00:00.000Z
Updated: 2024-08-05T22:22:54.926Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0448 vulnerable 2026-06-08 05:07:15.295035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0402 vulnerable 2026-06-08 05:07:15.249187 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8126 vulnerable 2026-06-08 05:07:03.254079 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.