How should we interpret CVSS severity scores?

CVSS estimates technical severity, but it does not automatically equal business risk. Prioritize using context like internet exposure, asset criticality, known exploitation, and whether compensating controls exist. A Medium CVSS on an exposed production system can be more urgent than a Critical on an isolated non-production host.

Vulnerability Database

Q: What is a Vulnerability (CVE) and why does it matter?

A security vulnerability is a weakness in software, hardware, or configuration that can be exploited to compromise confidentiality, integrity, or availability. Many vulnerabilities are tracked as CVEs (Common Vulnerabilities and Exposures), which provide a standardized identifier so teams can coordinate patching, mitigation, and risk assessment across tools and vendors.

Q: What's the difference between a vulnerability, an exploit, and a zero-day?

A vulnerability is the underlying weakness. An exploit is the method or code used to take advantage of it. A zero-day is a vulnerability that is unknown to the vendor or has no publicly available fix when attackers begin using it. Risk increases sharply when exploitation becomes reliable or widespread.

Q: Why do vulnerabilities keep reappearing in our environment?

Recurring findings usually come from incomplete asset discovery, inconsistent patch management, inherited images, and configuration drift. In modern environments, you also need to watch the software supply chain: dependencies, containers, build pipelines, and third-party services can reintroduce the same weakness even after you patch a single host.

Q: How do we prioritize remediation without burning out the team?

Use a repeatable triage model: focus first on externally exposed assets, high-value systems (identity, VPN, email, production), vulnerabilities with known exploits, and issues that enable remote code execution or privilege escalation. Then enforce patch SLAs and track progress so remediation is steady, not reactive.

Q: How can SynScan help reduce vulnerability risk over time?

SynScan combines attack surface monitoring and continuous security auditing to keep your inventory current, flag high-impact vulnerabilities early, and help you turn raw findings into a practical remediation plan.

391,289

Total vulnerabilities in the database

Vulnerabilities for products matching "jre"

Found 3 matching products. Filters apply to all results.

You can search for specific versions with /product/jre/1.2.3

sun / jre

423 vulnerabilities found

Title	Severity	Date	Affected versions
CVE-2008-3108	High	July 9, 2008 7/9/08	`= 1.3.1` `= 1.3.1_2` `= 1.3.1_03` `= 1.3.1_04` `= 1.3.1_05` `= 1.3.1_06` `= 1.3.1_07` `= 1.3.1_08` `= 1.3.1_09` `= 1.3.1_10` `= 1.3.1_11` `= 1.3.1_12` `= 1.3.1_13` `= 1.3.1_14` `= 1.3.1_15` `= 1.3.1_16` `= 1.3.1_17` `= 1.3.1_18` `= 1.3.1_19` `= 1.3.1_20` `= 1.3.1_21` `= 1.3.1_22` `= 1.3.1_23` `= 1.4.2` `= 1.4.2_1` `= 1.4.2_2` `= 1.4.2_3` `= 1.4.2_4` `= 1.4.2_5` `= 1.4.2_6` `= 1.4.2_7` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 1.4.2_14` `= 1.4.2_15` `= 1.4.2_16` `= 1.4.2_17` `= 1.4.2_18` `= 1.5.0` `= 1.5.0-update1` `= 1.5.0-update10` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7` `= 1.5.0-update8` `= 1.5.0-update9`
CVE-2008-3109	High	July 9, 2008 7/9/08	`<= 6` `= 6-update_1` `= 6-update_2` `= 6-update_3` `= 6-update_4` `= 6-update_5`
CVE-2008-3110	Medium	July 9, 2008 7/9/08	`<= 6` `= 6-update_1` `= 6-update_2` `= 6-update_3` `= 6-update_4` `= 6-update_5`
CVE-2008-3111	High	July 9, 2008 7/9/08	`= 1.4` `= 1.4.2_01` `= 1.4.2_02` `= 1.4.2_03` `= 1.4.2_04` `= 1.4.2_05` `= 1.4.2_06` `= 1.4.2_07` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 1.4.2_14` `= 1.4.2_15` `= 1.4.2_16` `= 1.4.2_17` `= 5.0-update_1` `= 5.0-update_10` `= 5.0-update_11` `= 5.0-update_12` `= 5.0-update_13` `= 5.0-update_14` `= 5.0-update_15` `= 5.0-update_2` `= 5.0-update_3` `= 5.0-update_4` `= 5.0-update_5` `= 5.0-update_6` `= 5.0-update_7` `= 5.0-update_8` `= 5.0-update_9` `= 6-update_1` `= 6-update_2` `= 6-update_3`
CVE-2008-3112	High	July 9, 2008 7/9/08	`<= 1.4.2_17` `<= 5.0` `<= 6` `= 1.4.2` `= 1.4.2_01` `= 1.4.2_02` `= 1.4.2_03` `= 1.4.2_04` `= 1.4.2_05` `= 1.4.2_06` `= 1.4.2_07` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 1.4.2_14` `= 1.4.2_15` `= 1.4.2_16` `= 5.0-update_1` `= 5.0-update_10` `= 5.0-update_11` `= 5.0-update_12` `= 5.0-update_13` `= 5.0-update_14` `= 5.0-update_2` `= 5.0-update_3` `= 5.0-update_4` `= 5.0-update_5` `= 5.0-update_6` `= 5.0-update_7` `= 5.0-update_8` `= 5.0-update_9` `= 6-update_1` `= 6-update_2` `= 6-update_3` `= 6-update_4` `= 6-update_5`
CVE-2008-3113	High	July 9, 2008 7/9/08	`<= 1.4.2_17` `<= 5.0` `= 1.4.2` `= 1.4.2_01` `= 1.4.2_02` `= 1.4.2_03` `= 1.4.2_04` `= 1.4.2_05` `= 1.4.2_06` `= 1.4.2_07` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 1.4.2_14` `= 1.4.2_15` `= 1.4.2_16` `= 5.0-update_1` `= 5.0-update_10` `= 5.0-update_11` `= 5.0-update_12` `= 5.0-update_13` `= 5.0-update_14` `= 5.0-update_2` `= 5.0-update_3` `= 5.0-update_4` `= 5.0-update_5` `= 5.0-update_6` `= 5.0-update_7` `= 5.0-update_8` `= 5.0-update_9`
CVE-2008-3114	Medium	July 9, 2008 7/9/08	`<= 1.4.2_17` `<= 5.0` `<= 6` `= 1.4.2` `= 1.4.2_01` `= 1.4.2_02` `= 1.4.2_03` `= 1.4.2_04` `= 1.4.2_05` `= 1.4.2_06` `= 1.4.2_07` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 1.4.2_14` `= 1.4.2_15` `= 1.4.2_16` `= 5.0-update_1` `= 5.0-update_10` `= 5.0-update_11` `= 5.0-update_12` `= 5.0-update_13` `= 5.0-update_14` `= 5.0-update_2` `= 5.0-update_3` `= 5.0-update_4` `= 5.0-update_5` `= 5.0-update_6` `= 5.0-update_7` `= 5.0-update_8` `= 5.0-update_9` `= 6-update_1` `= 6-update_2` `= 6-update_3` `= 6-update_4` `= 6-update_5`
CVE-2008-3115	High	July 9, 2008 7/9/08	`<= 6` `= 5.0-update_10` `= 5.0-update_11` `= 5.0-update_12` `= 5.0-update_13` `= 5.0-update_14` `= 5.0-update_15` `= 5.0-update_6` `= 5.0-update_7` `= 5.0-update_8` `= 5.0-update_9` `= 6-update_1` `= 6-update_2` `= 6-update_3` `= 6-update_4` `= 6-update_5`
CVE-2008-1185	High	March 6, 2008 3/6/08	`= 1.4.2` `= 1.4.2_1` `= 1.4.2_2` `= 1.4.2_3` `= 1.4.2_4` `= 1.4.2_5` `= 1.4.2_6` `= 1.4.2_7` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 1.4.2_14` `= 1.4.2_15` `= 1.4.2_16` `= 1.5.0` `= 1.5.0-update1` `= 1.5.0-update10` `= 1.5.0-update11` `= 1.5.0-update12` `= 1.5.0-update13` `= 1.5.0-update14` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7` `= 1.5.0-update8` `= 1.5.0-update9` `= 1.6.0` `= 1.6.0-update_1` `= 1.6.0-update_2` `= 1.6.0-update_3` `= 1.6.0-update_4`
CVE-2008-1186	High	March 6, 2008 3/6/08	`= 1.4.2` `= 1.4.2_1` `= 1.4.2_2` `= 1.4.2_3` `= 1.4.2_4` `= 1.4.2_5` `= 1.4.2_6` `= 1.4.2_7` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 1.4.2_14` `= 1.4.2_15` `= 1.4.2_16` `= 1.5.0` `= 1.5.0-update1` `= 1.5.0-update10` `= 1.5.0-update11` `= 1.5.0-update12` `= 1.5.0-update13` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7` `= 1.5.0-update8` `= 1.5.0-update9`
CVE-2008-1187	Medium	March 6, 2008 3/6/08	`<= 1.4.2_14` `<= 5.0` `<= 6` `= 1.4.2_01` `= 1.4.2_1` `= 1.4.2_02` `= 1.4.2_03` `= 1.4.2_04` `= 1.4.2_05` `= 1.4.2_06` `= 1.4.2_07` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 5.0` `= 5.0-update_1` `= 5.0-update_10` `= 5.0-update_11` `= 5.0-update_12` `= 5.0-update_13` `= 5.0-update_2` `= 5.0-update_3` `= 5.0-update_4` `= 5.0-update_5` `= 5.0-update_6` `= 5.0-update_7` `= 5.0-update_8` `= 5.0-update_9` `= 6` `= 6-update_1` `= 6-update_2` `= 6-update_3`
CVE-2008-1188	High	March 6, 2008 3/6/08	`= 1.5.0` `= 1.5.0-update1` `= 1.5.0-update10` `= 1.5.0-update11` `= 1.5.0-update12` `= 1.5.0-update13` `= 1.5.0-update14` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7` `= 1.5.0-update8` `= 1.5.0-update9` `= 1.6.0` `= 1.6.0-update_1` `= 1.6.0-update_2` `= 1.6.0-update_3` `= 1.6.0-update_4`
CVE-2008-1189	Medium	March 6, 2008 3/6/08	`= 1.4.2` `= 1.4.2_1` `= 1.4.2_2` `= 1.4.2_3` `= 1.4.2_4` `= 1.4.2_5` `= 1.4.2_6` `= 1.4.2_7` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 1.4.2_14` `= 1.4.2_15` `= 1.4.2_16` `= 1.5.0` `= 1.5.0-update1` `= 1.5.0-update10` `= 1.5.0-update11` `= 1.5.0-update12` `= 1.5.0-update13` `= 1.5.0-update14` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7` `= 1.5.0-update8` `= 1.5.0-update9` `= 1.6.0` `= 1.6.0-update_1` `= 1.6.0-update_2` `= 1.6.0-update_3` `= 1.6.0-update_4`
CVE-2008-1190	High	March 6, 2008 3/6/08	`= 1.4.2` `= 1.4.2_1` `= 1.4.2_2` `= 1.4.2_3` `= 1.4.2_4` `= 1.4.2_5` `= 1.4.2_6` `= 1.4.2_7` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 1.4.2_14` `= 1.4.2_15` `= 1.4.2_16` `= 1.5.0` `= 1.5.0-update1` `= 1.5.0-update10` `= 1.5.0-update11` `= 1.5.0-update12` `= 1.5.0-update13` `= 1.5.0-update14` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7` `= 1.5.0-update8` `= 1.5.0-update9` `= 1.6.0` `= 1.6.0-update_1` `= 1.6.0-update_2` `= 1.6.0-update_3` `= 1.6.0-update_4`
CVE-2008-1191	Medium	March 6, 2008 3/6/08	`<= 6_update_4`
CVE-2008-1192	Medium	March 6, 2008 3/6/08	`= 1.3.1` `= 1.3.1_2` `= 1.3.1_03` `= 1.3.1_04` `= 1.3.1_05` `= 1.3.1_06` `= 1.3.1_07` `= 1.3.1_08` `= 1.3.1_09` `= 1.3.1_10` `= 1.3.1_11` `= 1.3.1_12` `= 1.3.1_13` `= 1.3.1_14` `= 1.3.1_15` `= 1.3.1_16` `= 1.3.1_17` `= 1.3.1_18` `= 1.3.1_19` `= 1.3.1_20` `= 1.3.1_21` `= 1.4.2` `= 1.4.2_1` `= 1.4.2_2` `= 1.4.2_3` `= 1.4.2_4` `= 1.4.2_5` `= 1.4.2_6` `= 1.4.2_7` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 1.4.2_14` `= 1.4.2_15` `= 1.4.2_16` `= 1.5.0` `= 1.5.0-update1` `= 1.5.0-update10` `= 1.5.0-update11` `= 1.5.0-update12` `= 1.5.0-update13` `= 1.5.0-update14` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7` `= 1.5.0-update8` `= 1.5.0-update9` `= 1.6.0` `= 1.6.0-update_1` `= 1.6.0-update_2` `= 1.6.0-update_3` `= 1.6.0-update_4`
CVE-2008-1193	High	March 6, 2008 3/6/08	`= 1.5.0` `= 1.5.0-update1` `= 1.5.0-update10` `= 1.5.0-update11` `= 1.5.0-update12` `= 1.5.0-update13` `= 1.5.0-update14` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7` `= 1.5.0-update8` `= 1.5.0-update9` `= 1.6.0` `= 1.6.0-update_1` `= 1.6.0-update_2` `= 1.6.0-update_3` `= 1.6.0-update_4`
CVE-2008-1194	Medium	March 6, 2008 3/6/08	`= 1.5.0` `= 1.5.0-update1` `= 1.5.0-update10` `= 1.5.0-update11` `= 1.5.0-update12` `= 1.5.0-update13` `= 1.5.0-update14` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7` `= 1.5.0-update8` `= 1.5.0-update9` `= 1.6.0` `= 1.6.0-update_1` `= 1.6.0-update_2` `= 1.6.0-update_3` `= 1.6.0-update_4`
CVE-2008-1195	High	March 6, 2008 3/6/08	`= 1.4.2` `= 1.4.2_1` `= 1.4.2_2` `= 1.4.2_3` `= 1.4.2_4` `= 1.4.2_5` `= 1.4.2_6` `= 1.4.2_7` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 1.4.2_14` `= 1.4.2_15` `= 1.4.2_16` `= 1.5.0` `= 1.5.0-update1` `= 1.5.0-update10` `= 1.5.0-update11` `= 1.5.0-update12` `= 1.5.0-update13` `= 1.5.0-update14` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7` `= 1.5.0-update8` `= 1.5.0-update9` `= 1.6.0` `= 1.6.0-update_1` `= 1.6.0-update_2` `= 1.6.0-update_3` `= 1.6.0-update_4`
CVE-2008-1196	Medium	March 6, 2008 3/6/08	`= 1.4.2` `= 1.4.2_1` `= 1.4.2_2` `= 1.4.2_3` `= 1.4.2_4` `= 1.4.2_5` `= 1.4.2_6` `= 1.4.2_7` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 1.4.2_14` `= 1.4.2_15` `= 1.4.2_16` `= 1.5.0` `= 1.5.0-update1` `= 1.5.0-update10` `= 1.5.0-update11` `= 1.5.0-update12` `= 1.5.0-update13` `= 1.5.0-update14` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7` `= 1.5.0-update8` `= 1.5.0-update9` `= 1.6.0` `= 1.6.0-update_1` `= 1.6.0-update_2` `= 1.6.0-update_3` `= 1.6.0-update_4`
CVE-2008-0657	High	February 7, 2008 2/7/08	`<= 1.5.0` `<= 1.6.0`
CVE-2008-0628	High	February 6, 2008 2/6/08	`<= 1.6.0`
CVE-2007-0012	Medium	January 9, 2008 1/9/08	`<= 1.5.0`
CVE-2007-5689	High	October 29, 2007 10/29/07	`<= 1.3.1` `<= 1.4.2` `<= 1.5.0` `= 1.3.0` `= 1.3.0-update5` `= 1.3.1-update1` `= 1.3.1-update16` `= 1.3.1-update18` `= 1.3.1-update19` `= 1.3.1-update1a` `= 1.4` `= 1.4.1-update3` `= 1.4.2` `= 1.4.2_1` `= 1.4.2_3` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 1.4.2_14` `= 1.5.0-update1` `= 1.5.0-update10` `= 1.5.0-update11` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7` `= 1.5.0-update8` `= 1.5.0-update9` `= 1.6.0-update_1` `= 1.6.0-update_2`
CVE-2007-5273	Low	October 8, 2007 10/8/07	`= 1.3.0` `= 1.3.0-update5` `= 1.3.1-update1` `= 1.3.1-update16` `= 1.3.1-update18` `= 1.3.1-update19` `= 1.3.1-update1a` `= 1.3.1-update20` `= 1.4` `= 1.4.1-update3` `= 1.4.2` `= 1.4.2_1` `= 1.4.2_3` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 1.4.2_14` `= 1.4.2_15` `= 1.5.0-update1` `= 1.5.0-update10` `= 1.5.0-update11` `= 1.5.0-update12` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7` `= 1.5.0-update8` `= 1.5.0-update9` `= 1.6.0-update_1` `= 1.6.0-update_2`
CVE-2007-5274	Low	October 8, 2007 10/8/07	`<= 1.3.1` `<= 1.4.2` `<= 1.6.0` `= 1.3.0` `= 1.3.0-update5` `= 1.3.1-update1` `= 1.3.1-update16` `= 1.3.1-update18` `= 1.3.1-update19` `= 1.3.1-update1a` `= 1.4` `= 1.4.1-update3` `= 1.4.2` `= 1.4.2_1` `= 1.4.2_3` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 1.4.2_14` `= 1.5.0-update1` `= 1.5.0-update10` `= 1.5.0-update11` `= 1.5.0-update12` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7` `= 1.5.0-update8` `= 1.5.0-update9` `= 1.6.0-update_1`
CVE-2007-5236	Medium	October 6, 2007 10/6/07	`= 1.4.2` `= 1.4.2_1` `= 1.4.2_2` `= 1.4.2_3` `= 1.4.2_4` `= 1.4.2_5` `= 1.4.2_6` `= 1.4.2_7` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 1.4.2_14` `= 1.4.2_15` `= 1.4.2_21` `= 1.5.0-update1` `= 1.5.0-update10` `= 1.5.0-update11` `= 1.5.0-update12` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7` `= 1.5.0-update8` `= 1.5.0-update9`
CVE-2007-5237	High	October 6, 2007 10/6/07	`<= 1.6.0`
CVE-2007-5238	Low	October 6, 2007 10/6/07	`= 1.3.0` `= 1.3.0-update5` `= 1.3.1-update1` `= 1.3.1-update16` `= 1.3.1-update18` `= 1.3.1-update19` `= 1.3.1-update1a` `= 1.3.1-update20` `= 1.4` `= 1.4.1-update3` `= 1.4.2` `= 1.4.2_1` `= 1.4.2_3` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 1.4.2_14` `= 1.4.2_15` `= 1.5.0-update1` `= 1.5.0-update10` `= 1.5.0-update11` `= 1.5.0-update12` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7` `= 1.5.0-update8` `= 1.5.0-update9` `= 1.6.0-update_1` `= 1.6.0-update_2`
CVE-2007-5239	Medium	October 6, 2007 10/6/07	`= 1.3.0` `= 1.3.0-update5` `= 1.3.1-update1` `= 1.3.1-update16` `= 1.3.1-update18` `= 1.3.1-update19` `= 1.3.1-update1a` `= 1.3.1-update20` `= 1.4` `= 1.4.1-update3` `= 1.4.2` `= 1.4.2_1` `= 1.4.2_3` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 1.4.2_14` `= 1.4.2_15` `= 1.5.0-update1` `= 1.5.0-update10` `= 1.5.0-update11` `= 1.5.0-update12` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7` `= 1.5.0-update8` `= 1.5.0-update9` `= 1.6.0-update_1` `= 1.6.0-update_2`
CVE-2007-5240	Medium	October 6, 2007 10/6/07	`= 1.3.0` `= 1.3.0-update5` `= 1.3.1-update1` `= 1.3.1-update16` `= 1.3.1-update18` `= 1.3.1-update19` `= 1.3.1-update1a` `= 1.3.1-update20` `= 1.4` `= 1.4.1-update3` `= 1.4.2` `= 1.4.2_1` `= 1.4.2_3` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 1.4.2_14` `= 1.4.2_15` `= 1.5.0-update1` `= 1.5.0-update10` `= 1.5.0-update11` `= 1.5.0-update12` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7` `= 1.5.0-update8` `= 1.5.0-update9` `= 1.6.0-update_1` `= 1.6.0-update_2`
CVE-2007-5232	Medium	October 5, 2007 10/5/07	`= 1.3.0` `= 1.3.0-update5` `= 1.3.1-update1` `= 1.3.1-update16` `= 1.3.1-update18` `= 1.3.1-update19` `= 1.3.1-update1a` `= 1.3.1-update20` `= 1.4` `= 1.4.1-update3` `= 1.4.2` `= 1.4.2_1` `= 1.4.2_3` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 1.4.2_14` `= 1.4.2_15` `= 1.5.0-update1` `= 1.5.0-update10` `= 1.5.0-update11` `= 1.5.0-update12` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7` `= 1.5.0-update8` `= 1.5.0-update9` `= 1.6.0-update_1` `= 1.6.0-update_2`
CVE-2007-5019	High	September 20, 2007 9/20/07	`= 1.6.0_0` `= 1.6.0_10`
CVE-2007-4381	High	August 17, 2007 8/17/07	`<= 1.4.2`
CVE-2007-3922	Medium	July 21, 2007 7/21/07	`<= 1.5.0` `<= 1.6.0`
CVE-2007-3716	High	July 11, 2007 7/11/07	`<= 6`
CVE-2007-3698	High	July 11, 2007 7/11/07	`= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 1.4.2_14` `= 1.5.0-update10` `= 1.5.0-update11` `= 1.5.0-update7` `= 1.5.0-update8` `= 1.5.0-update9` `= 1.6.0-update_1`
CVE-2007-3655	Medium	July 10, 2007 7/10/07	`= 1.5.0-update1` `= 1.5.0-update10` `= 1.5.0-update11` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7` `= 1.5.0-update8` `= 1.5.0-update9` `= 1.6.0-update_1`
CVE-2007-3504	High	June 30, 2007 6/30/07	`<= 1.4.2` `<= 1.5.0`
CVE-2007-2788	Medium	May 22, 2007 5/22/07	`= 1.3.1` `= 1.3.1_2` `= 1.3.1_03` `= 1.3.1_04` `= 1.3.1_05` `= 1.3.1_06` `= 1.3.1_07` `= 1.3.1_08` `= 1.3.1_09` `= 1.3.1_10` `= 1.3.1_11` `= 1.3.1_12` `= 1.3.1_13` `= 1.3.1_14` `= 1.3.1_15` `= 1.3.1_16` `= 1.3.1_17` `= 1.3.1_18` `= 1.3.1_19` `= 1.3.1_20` `= 1.4.2` `= 1.4.2_1` `= 1.4.2_2` `= 1.4.2_3` `= 1.4.2_4` `= 1.4.2_5` `= 1.4.2_6` `= 1.4.2_7` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 1.4.2_14` `= 1.5.0` `= 1.5.0-update1` `= 1.5.0-update10` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7` `= 1.5.0-update8` `= 1.5.0-update9` `= 1.6.0`
CVE-2007-2789	Medium	May 22, 2007 5/22/07	`= 1.3.1` `= 1.3.1_2` `= 1.3.1_03` `= 1.3.1_04` `= 1.3.1_05` `= 1.3.1_06` `= 1.3.1_07` `= 1.3.1_08` `= 1.3.1_09` `= 1.3.1_10` `= 1.3.1_11` `= 1.3.1_12` `= 1.3.1_13` `= 1.3.1_14` `= 1.3.1_15` `= 1.3.1_16` `= 1.3.1_17` `= 1.3.1_18` `= 1.3.1_19` `= 1.4.2` `= 1.4.2_1` `= 1.4.2_2` `= 1.4.2_3` `= 1.4.2_4` `= 1.4.2_5` `= 1.4.2_6` `= 1.4.2_7` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 1.4.2_14` `= 1.5.0` `= 1.5.0-update1` `= 1.5.0-update10` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7` `= 1.5.0-update8` `= 1.5.0-update9` `= 1.6.0`
CVE-2007-2435	High	May 2, 2007 5/2/07	`<= 1.4.2` `<= 1.5.0`
CVE-2007-0243	Medium	January 17, 2007 1/17/07	`<= 1.3.1` `= 1.3.1-update16` `= 1.4.2_1` `= 1.4.2_2` `= 1.4.2_3` `= 1.4.2_4` `= 1.4.2_5` `= 1.4.2_6` `= 1.4.2_7` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7` `= 1.5.0-update8` `= 1.5.0-update9`
CVE-2006-6731	High	December 26, 2006 12/26/06	`= 1.3.1` `= 1.3.1_2` `= 1.3.1_03` `= 1.3.1_04` `= 1.3.1_05` `= 1.3.1_06` `= 1.3.1_07` `= 1.3.1_08` `= 1.3.1_09` `= 1.3.1_10` `= 1.3.1_11` `= 1.3.1_12` `= 1.3.1_13` `= 1.3.1_14` `= 1.3.1_15` `= 1.3.1_16` `= 1.3.1_17` `= 1.3.1_18` `= 1.4.2` `= 1.4.2_1` `= 1.4.2_2` `= 1.4.2_3` `= 1.4.2_4` `= 1.4.2_5` `= 1.4.2_6` `= 1.4.2_7` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.5.0` `= 1.5.0-update1` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7`
CVE-2006-6736	Medium	December 26, 2006 12/26/06	`= 1.3.1` `= 1.3.1_2` `= 1.3.1_03` `= 1.3.1_04` `= 1.3.1_05` `= 1.3.1_06` `= 1.3.1_07` `= 1.3.1_08` `= 1.3.1_09` `= 1.3.1_10` `= 1.3.1_11` `= 1.3.1_12` `= 1.3.1_13` `= 1.3.1_14` `= 1.3.1_15` `= 1.3.1_16` `= 1.3.1_17` `= 1.3.1_18` `= 1.4.2` `= 1.4.2_1` `= 1.4.2_2` `= 1.4.2_3` `= 1.4.2_4` `= 1.4.2_5` `= 1.4.2_6` `= 1.4.2_7` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.5.0` `= 1.5.0-update1` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6`
CVE-2006-6737	Medium	December 26, 2006 12/26/06	`= 1.3.1` `= 1.3.1_2` `= 1.3.1_03` `= 1.3.1_04` `= 1.3.1_05` `= 1.3.1_06` `= 1.3.1_07` `= 1.3.1_08` `= 1.3.1_09` `= 1.3.1_10` `= 1.3.1_11` `= 1.3.1_12` `= 1.3.1_13` `= 1.3.1_14` `= 1.3.1_15` `= 1.3.1_16` `= 1.3.1_17` `= 1.3.1_18` `= 1.4.2` `= 1.4.2_1` `= 1.4.2_2` `= 1.4.2_3` `= 1.4.2_4` `= 1.4.2_5` `= 1.4.2_6` `= 1.4.2_7` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.5.0` `= 1.5.0-update1` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5`
CVE-2006-6745	High	December 26, 2006 12/26/06	`= 1.4.1` `= 1.4.2` `= 1.4.2_1` `= 1.4.2_2` `= 1.4.2_3` `= 1.4.2_4` `= 1.4.2_5` `= 1.4.2_6` `= 1.4.2_7` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.4.2_13` `= 1.5.0` `= 1.5.0-update1` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7`
CVE-2006-6009	Medium	November 21, 2006 11/21/06	`<= 1.5.0` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5`
CVE-2006-5201	Medium	October 10, 2006 10/10/06	`= 1.3.1` `= 1.3.1_2` `= 1.3.1_03` `= 1.3.1_04` `= 1.3.1_05` `= 1.3.1_06` `= 1.3.1_07` `= 1.3.1_08` `= 1.3.1_09` `= 1.3.1_10` `= 1.3.1_11` `= 1.3.1_12` `= 1.3.1_13` `= 1.3.1_14` `= 1.3.1_15` `= 1.3.1_16` `= 1.3.1_17` `= 1.3.1_18` `= 1.3.1_19` `= 1.4.2` `= 1.4.2_1` `= 1.4.2_2` `= 1.4.2_3` `= 1.4.2_4` `= 1.4.2_5` `= 1.4.2_6` `= 1.4.2_7` `= 1.4.2_8` `= 1.4.2_9` `= 1.4.2_10` `= 1.4.2_11` `= 1.4.2_12` `= 1.5.0` `= 1.5.0-update1` `= 1.5.0-update2` `= 1.5.0-update3` `= 1.5.0-update4` `= 1.5.0-update5` `= 1.5.0-update6` `= 1.5.0-update7` `= 1.5.0-update8`
CVE-2006-2426	Medium	May 17, 2006 5/17/06	`= 1.5.0-update6`

oracle / jre

817 vulnerabilities found

Title	Severity	Date	Affected versions
CVE-2016-3511	Medium	July 21, 2016 7/21/16	`= 1.7.0-update101` `= 1.8.0-update92`
CVE-2016-3508	Medium	July 21, 2016 7/21/16	`= 1.6.0-update115` `= 1.7.0-update101` `= 1.8.0-update91` `= 1.8.0-update92`
CVE-2016-3503	Medium	July 21, 2016 7/21/16	`= 1.6.0-update115` `= 1.7.0-update101` `= 1.8.0-update92`
CVE-2016-3500	Medium	July 21, 2016 7/21/16	`= 1.6.0-update115` `= 1.7.0-update101` `= 1.8.0-update91` `= 1.8.0-update92`
CVE-2016-3498	Medium	July 21, 2016 7/21/16	`= 1.7.0-update101` `= 1.8.0-update92`
CVE-2016-3485	Low	July 21, 2016 7/21/16	`= 1.6.0-update115` `= 1.7.0-update101` `= 1.8.0-update91` `= 1.8.0-update92`
CVE-2016-3458	Medium	July 21, 2016 7/21/16	`= 1.6.0-update115` `= 1.7.0-update101` `= 1.8.0-update92`
CVE-2016-3449	High	April 21, 2016 4/21/16	`= 1.6.0-update113` `= 1.7.0-update99` `= 1.8.0-update77`
CVE-2016-3443	High	April 21, 2016 4/21/16	`= 1.6.0-update113` `= 1.7.0-update99` `= 1.8.0-update77`
CVE-2016-3427	Critical	April 21, 2016 4/21/16	`= 1.6.0-update113` `= 1.7.0-update99` `= 1.8.0-update77`
CVE-2016-3426	Medium	April 21, 2016 4/21/16	`= 1.8.0-update77`
CVE-2016-3425	Medium	April 21, 2016 4/21/16	`= 1.6.0-update113` `= 1.7.0-update99` `= 1.8.0-update77`
CVE-2016-3422	Medium	April 21, 2016 4/21/16	`= 1.6.0-update113` `= 1.7.0-update99` `= 1.8.0-update77`
CVE-2016-0695	Low	April 21, 2016 4/21/16	`= 1.6.0-update113` `= 1.7.0-update99` `= 1.8.0-update77`
CVE-2016-0686	High	April 21, 2016 4/21/16	`= 1.6.0-update113` `= 1.7.0-update99` `= 1.8.0-update77`
CVE-2016-0687	High	April 21, 2016 4/21/16	`= 1.6.0-update113` `= 1.7.0-update99` `= 1.8.0-update77`
CVE-2016-0636	High	March 24, 2016 3/24/16	`= 1.7.0-update97` `= 1.8.0-update73` `= 1.8.0-update74`
CVE-2016-0603	High	February 8, 2016 2/8/16	`= 1.6.0-update111` `= 1.7.0-update95` `= 1.8.0-update71` `= 1.8.0-update72`
CVE-2016-0494	High	January 21, 2016 1/21/16	`= 1.6.0-update105` `= 1.7.0-update91` `= 1.8.0-update66`
CVE-2016-0483	High	January 21, 2016 1/21/16	`= 1.6.0-update105` `= 1.7.0-update91` `= 1.8.0-update66`
CVE-2016-0475	Medium	January 21, 2016 1/21/16	`= 1.8.0-update66`
CVE-2016-0466	Medium	January 21, 2016 1/21/16	`= 1.6.0-update105` `= 1.7.0-update91` `= 1.8.0-update66`
CVE-2016-0448	Medium	January 21, 2016 1/21/16	`= 1.6.0-update105` `= 1.8.0-update66`
CVE-2016-0402	Medium	January 21, 2016 1/21/16	`= 1.6.0-update105` `= 1.7.0-update91` `= 1.8.0-update66`
CVE-2015-8126	High	November 13, 2015 11/13/15	`= 1.6.0-update105` `= 1.7.0-update91` `= 1.8.0-update65` `= 1.8.0-update66`
CVE-2015-4916	Medium	October 22, 2015 10/22/15	`= 1.8.0-update_60`
CVE-2015-4911	Medium	October 22, 2015 10/22/15	`= 1.6.0-update_101` `= 1.7.0-update_85` `= 1.8.0-update_51` `= 1.8.0-update_60`
CVE-2015-4908	Medium	October 22, 2015 10/22/15	`= 1.8.0-update_60`
CVE-2015-4906	Medium	October 22, 2015 10/22/15	`= 1.8.0-update_60`
CVE-2015-4903	Medium	October 22, 2015 10/22/15	`= 1.6.0-update_101` `= 1.7.0-update_85` `= 1.8.0-update_51` `= 1.8.0-update_60`
CVE-2015-4902	Medium	October 22, 2015 10/22/15	`= 1.6.0-update101` `= 1.7.0-update85` `= 1.8.0-update60`
CVE-2015-4901	High	October 22, 2015 10/22/15	`= 1.8.0-update_60`
CVE-2015-4893	Medium	October 21, 2015 10/21/15	`= 1.6.0-update_101` `= 1.7.0-update_85` `= 1.8.0-update_51` `= 1.8.0-update_60`
CVE-2015-4883	High	October 21, 2015 10/21/15	`= 1.6.0-update_101` `= 1.7.0-update_85` `= 1.8.0-update_51` `= 1.8.0-update_60`
CVE-2015-4881	High	October 21, 2015 10/21/15	`= 1.6.0-update_101` `= 1.7.0-update_85` `= 1.8.0-update_51` `= 1.8.0-update_60`
CVE-2015-4882	Medium	October 21, 2015 10/21/15	`= 1.6.0-update_101` `= 1.7.0-update_85` `= 1.8.0-update_51` `= 1.8.0-update_60`
CVE-2015-4872	Medium	October 21, 2015 10/21/15	`= 1.6.0-update_101` `= 1.7.0-update_85` `= 1.8.0-update_51` `= 1.8.0-update_60`
CVE-2015-4871	Medium	October 21, 2015 10/21/15	`= 1.7.0-update_85`
CVE-2015-4868	High	October 21, 2015 10/21/15	`= 1.8.0-update_51` `= 1.8.0-update_60`
CVE-2015-4860	High	October 21, 2015 10/21/15	`= 1.6.0-update_101` `= 1.7.0-update_85` `= 1.8.0-update_51` `= 1.8.0-update_60`
CVE-2015-4844	High	October 21, 2015 10/21/15	`= 1.6.0-update_101` `= 1.7.0-update_85` `= 1.8.0-update_51` `= 1.8.0-update_60`
CVE-2015-4843	High	October 21, 2015 10/21/15	`= 1.6.0-update_101` `= 1.7.0-update_85` `= 1.8.0-update_51` `= 1.8.0-update_60`
CVE-2015-4842	Medium	October 21, 2015 10/21/15	`= 1.6.0-update_101` `= 1.7.0-update_85` `= 1.8.0-update_51` `= 1.8.0-update_60`
CVE-2015-4840	Medium	October 21, 2015 10/21/15	`= 1.7.0-update_85` `= 1.8.0-update_51` `= 1.8.0-update_60`
CVE-2015-4835	High	October 21, 2015 10/21/15	`= 1.6.0-update_101` `= 1.7.0-update_85` `= 1.8.0-update_51` `= 1.8.0-update_60`
CVE-2015-4810	Medium	October 21, 2015 10/21/15	`= 1.7.0-update_85` `= 1.8.0-update_60`
CVE-2015-4806	Medium	October 21, 2015 10/21/15	`= 1.6.0-update_101` `= 1.7.0-update_85` `= 1.8.0-update_51` `= 1.8.0-update_60`
CVE-2015-4805	High	October 21, 2015 10/21/15	`= 1.6.0-update_101` `= 1.7.0-update_85` `= 1.8.0-update_51` `= 1.8.0-update_60`
CVE-2015-4803	Medium	October 21, 2015 10/21/15	`= 1.6.0-update_101` `= 1.7.0-update_85` `= 1.8.0-update_51` `= 1.8.0-update_60`
CVE-2015-4734	Medium	October 21, 2015 10/21/15	`= 1.6.0-update_101` `= 1.7.0-update_85` `= 1.8.0-update_51` `= 1.8.0-update_60`

Showing vulnerabilities for 3 products matching "jre". Each product has independent pagination.

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo

Frequently Asked Questions

What is a Vulnerability (CVE) and why does it matter?

A security vulnerability is a weakness in software, hardware, or configuration that can be exploited to compromise confidentiality, integrity, or availability. Many vulnerabilities are tracked as CVEs (Common Vulnerabilities and Exposures), which provide a standardized identifier so teams can coordinate patching, mitigation, and risk assessment across tools and vendors.

CVSS (Common Vulnerability Scoring System) estimates technical severity, but it doesn't automatically equal business risk. Prioritize using context like internet exposure, affected asset criticality, known exploitation (proof-of-concept or in-the-wild), and whether compensating controls exist. A "Medium" CVSS on an exposed, production system can be more urgent than a "Critical" on an isolated, non-production host.

A vulnerability is the underlying weakness. An exploit is the method or code used to take advantage of it. A zero-day is a vulnerability that is unknown to the vendor or has no publicly available fix when attackers begin using it. In practice, risk increases sharply when exploitation becomes reliable or widespread.

Recurring findings usually come from incomplete Asset Discovery, inconsistent patch management, inherited images, and configuration drift. In modern environments, you also need to watch the software supply chain: dependencies, containers, build pipelines, and third-party services can reintroduce the same weakness even after you patch a single host. Unknown or unmanaged assets (often called Shadow IT) are a common reason the same issues resurface.

Use a simple, repeatable triage model: focus first on externally exposed assets, high-value systems (identity, VPN, email, production), vulnerabilities with known exploits, and issues that enable remote code execution or privilege escalation. Then enforce patch SLAs and track progress using consistent metrics so remediation is steady, not reactive.

SynScan combines attack surface monitoring and continuous security auditing to keep your inventory current, flag high-impact vulnerabilities early, and help you turn raw findings into a practical remediation plan.