Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:jdk:1.7.0:update99:*:*:*:*:*:*

part: a version: 1.7.0 update: update99

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductJdk (1532aff9-da05-5018-bb6b-845c5e55198b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-2801 not_vulnerable 2026-06-08 05:25:00.408707 Details available
CRITICAL (9.8)
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. Note: The patch for this issue will address the vulnerability only if the WLS instance is using JDK 1.7.0_191 or later, or JDK 1.8.0_181 or later. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Published: 2020-04-15T13:29:46.000Z
Updated: 2024-09-30T14:55:20.174Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3449 vulnerable 2026-06-08 05:07:45.428982 Details available
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Deployment.
Published: 2016-04-21T10:00:00.000Z
Updated: 2024-10-15T19:04:19.278Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3443 vulnerable 2026-06-08 05:07:45.416052 Details available
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information via crafted font data, which triggers an out-of-bounds read.
Published: 2016-04-21T10:00:00.000Z
Updated: 2024-10-15T19:04:33.955Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3427 vulnerable 2026-06-08 05:07:45.365417 Details available
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
Published: 2016-04-21T10:00:00.000Z
Updated: 2025-10-21T23:55:53.262Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3425 vulnerable 2026-06-08 05:07:45.359354 Details available
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect availability via vectors related to JAXP.
Published: 2016-04-21T10:00:00.000Z
Updated: 2024-10-15T19:06:56.417Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3422 vulnerable 2026-06-08 05:07:45.353238 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0695 vulnerable 2026-06-08 05:07:15.698765 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0687 vulnerable 2026-06-08 05:07:15.691630 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0686 vulnerable 2026-06-08 05:07:15.688119 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.