azul records

20 published records for vendor azul.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

20 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
55Plan	CVE-2022-34169Proof of concept	Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheetsapache · xalan-java · CWE-681 pre-auth RCE	High7.5	—	81.8%	Jul 19, 2022
53Plan	CVE-2022-21449Proof of concept	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).oracle · graalvm Pre-auth	High7.5	—	77.2%	Apr 19, 2022
46Plan	CVE-2018-25032Proof of concept	zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.zlib · zlib · CWE-787 Pre-auth Memory safety Denial of service	High7.5	—	51.7%	Mar 25, 2022
31Monitor	CVE-2022-21476No exploit	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).oracle · graalvm · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	4.0%	Apr 19, 2022
24Monitor	CVE-2022-21541No exploit	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).oracle · graalvm Pre-auth	Medium5.9	—	2.9%	Jul 19, 2022
22Monitor	CVE-2022-21540No exploit	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).oracle · graalvm · CWE-416 Pre-auth Memory safety	Medium5.3	—	4.2%	Jul 19, 2022
22Monitor	CVE-2022-21426No exploit	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).oracle · graalvm Pre-auth Denial of service	Medium5.3	—	3.2%	Apr 19, 2022
22Monitor	CVE-2022-21496No exploit	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI).oracle · graalvm Pre-auth	Medium5.3	—	2.8%	Apr 19, 2022
22Monitor	CVE-2022-21549No exploit	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).oracle · graalvm · CWE-502 Pre-auth Deserialization	Medium5.3	—	2.5%	Jul 19, 2022
22Monitor	CVE-2022-21434No exploit	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).oracle · graalvm Pre-auth	Medium5.3	—	2.5%	Apr 19, 2022
22Monitor	CVE-2022-21628No exploit	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).oracle · graalvm Pre-auth Denial of service	Medium5.3	—	2.3%	Oct 18, 2022
22Monitor	CVE-2022-21618No exploit	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).oracle · graalvm · CWE-287 Pre-auth Auth bypass	Medium5.3	—	2.3%	Oct 18, 2022
22Monitor	CVE-2022-21626No exploit	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).oracle · graalvm · CWE-693 Pre-auth Denial of service	Medium5.3	—	1.9%	Oct 18, 2022
22Monitor	CVE-2023-21835No exploit	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).oracle · graalvm Pre-auth Denial of service	Medium5.3	—	1.9%	Jan 17, 2023
21Monitor	CVE-2023-21830No exploit	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).oracle · communications unified assurance Pre-auth	Medium5.3	—	1.1%	Jan 17, 2023
15Monitor	CVE-2022-21443No exploit	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).oracle · graalvm Pre-auth Denial of service	Low3.7	—	2.7%	Apr 19, 2022
15Monitor	CVE-2022-21619No exploit	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).oracle · graalvm · CWE-284 Pre-auth Broken access control (IDOR)	Low3.7	—	2.7%	Oct 18, 2022
14Monitor	CVE-2022-39399No exploit	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).oracle · graalvm · CWE-284 Pre-auth Broken access control (IDOR)	Low3.7	—	1.6%	Oct 18, 2022
14Monitor	CVE-2022-21624No exploit	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI).oracle · graalvm · CWE-502 Pre-auth Deserialization	Low3.7	—	1.6%	Oct 18, 2022
14Monitor	CVE-2023-21843No exploit	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).oracle · graalvm Pre-auth	Low3.7	—	1.4%	Jan 17, 2023

CVE-2022-34169
55Plan
Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets
HighCVSS 7.5Proof of conceptEPSS 82%
- pre-auth RCE
apache · xalan-javaJul 19, 2022
CVE-2022-21449
53Plan
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).
HighCVSS 7.5Proof of conceptEPSS 77%
- Pre-auth
oracle · graalvmApr 19, 2022
CVE-2018-25032
46Plan
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
HighCVSS 7.5Proof of conceptEPSS 52%
- Pre-auth
- Memory safety
- Denial of service
zlib · zlibMar 25, 2022
CVE-2022-21476
31Monitor
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).
HighCVSS 7.5No exploitEPSS 4%
- Pre-auth
- Broken access control (IDOR)
oracle · graalvmApr 19, 2022
CVE-2022-21541
24Monitor
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).
MediumCVSS 5.9No exploitEPSS 3%
- Pre-auth
oracle · graalvmJul 19, 2022
CVE-2022-21540
22Monitor
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).
MediumCVSS 5.3No exploitEPSS 4%
- Pre-auth
- Memory safety
oracle · graalvmJul 19, 2022
CVE-2022-21426
22Monitor
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).
MediumCVSS 5.3No exploitEPSS 3%
- Pre-auth
- Denial of service
oracle · graalvmApr 19, 2022
CVE-2022-21496
22Monitor
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI).
MediumCVSS 5.3No exploitEPSS 3%
- Pre-auth
oracle · graalvmApr 19, 2022
CVE-2022-21549
22Monitor
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).
MediumCVSS 5.3No exploitEPSS 3%
- Pre-auth
- Deserialization
oracle · graalvmJul 19, 2022
CVE-2022-21434
22Monitor
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).
MediumCVSS 5.3No exploitEPSS 2%
- Pre-auth
oracle · graalvmApr 19, 2022
CVE-2022-21628
22Monitor
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).
MediumCVSS 5.3No exploitEPSS 2%
- Pre-auth
- Denial of service
oracle · graalvmOct 18, 2022
CVE-2022-21618
22Monitor
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).
MediumCVSS 5.3No exploitEPSS 2%
- Pre-auth
- Auth bypass
oracle · graalvmOct 18, 2022
CVE-2022-21626
22Monitor
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).
MediumCVSS 5.3No exploitEPSS 2%
- Pre-auth
- Denial of service
oracle · graalvmOct 18, 2022
CVE-2023-21835
22Monitor
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).
MediumCVSS 5.3No exploitEPSS 2%
- Pre-auth
- Denial of service
oracle · graalvmJan 17, 2023
CVE-2023-21830
21Monitor
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
oracle · communications unified assuranceJan 17, 2023
CVE-2022-21443
15Monitor
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).
LowCVSS 3.7No exploitEPSS 3%
- Pre-auth
- Denial of service
oracle · graalvmApr 19, 2022
CVE-2022-21619
15Monitor
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).
LowCVSS 3.7No exploitEPSS 3%
- Pre-auth
- Broken access control (IDOR)
oracle · graalvmOct 18, 2022
CVE-2022-39399
14Monitor
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).
LowCVSS 3.7No exploitEPSS 2%
- Pre-auth
- Broken access control (IDOR)
oracle · graalvmOct 18, 2022
CVE-2022-21624
14Monitor
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI).
LowCVSS 3.7No exploitEPSS 2%
- Pre-auth
- Deserialization
oracle · graalvmOct 18, 2022
CVE-2023-21843
14Monitor
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).
LowCVSS 3.7No exploitEPSS 1%
- Pre-auth
oracle · graalvmJan 17, 2023