The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf; Oracle GraalVM Enterprise Edition: 20.3.11 and 21.3.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via CORBA to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Adoptopenjdk | — | — | Nov 9, 2023 | Oct 17, 2023 |
| Alma_linux | — | Upgrade java-1.8.0-openjdk-slowdebugUpgrade java-1.8.0-openjdk-demo-fastdebugUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-headless-slowdebugUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-openjdk-devel-slowdebugUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-fastdebugUpgrade java-1.8.0-openjdk-accessibility-slowdebugUpgrade java-1.8.0-openjdk-src-slowdebugUpgrade java-1.8.0-openjdk-devel-fastdebugUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-src-fastdebugUpgrade java-1.8.0-openjdk-demo-slowdebugUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-accessibility-fastdebugUpgrade java-1.8.0-openjdk-headless-fastdebug | Oct 23, 2023 | Oct 17, 2023 |
| Alpine Linux | — | Upgrade openjdk8 | Aug 22, 2024 | Oct 17, 2023 |
| Amazon Linux Ami 2 | — | Upgrade java-1.8.0-openjdk-src-debugUpgrade java-1.8.0-amazon-corretto-develUpgrade java-1.8.0-openjdk-debugUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-openjdk-demo-debugUpgrade java-1.8.0-openjdk-javadoc-debugUpgrade java-1.8.0-openjdk-debuginfoUpgrade java-1.8.0-amazon-correttoUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade java-1.8.0-openjdk-accessibility-debugUpgrade java-1.8.0-openjdk-javadoc-zip-debugUpgrade java-1.8.0-openjdk-headless-debugUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-openjdk-devel-debugUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-accessibility | Oct 23, 2023 | Oct 17, 2023 |
| Amazon_linux | — | Upgrade java-1.8.0-openjdk | Jan 9, 2024 | Oct 17, 2023 |
| Amazon_linux_2023 | — | Upgrade java-1.8.0-amazon-corretto-develUpgrade java-1.8.0-amazon-corretto | Feb 17, 2025 | Oct 17, 2023 |
| Azul Zulu | — | Upgrade to Azul Zulu JDK 8 installer 8.73.0.12 (JDK 8u391-b01, quarterly CPU) (LTS stream)Apply legacy security update: Azul Zulu JDK 7 installer 7.65.0.14 (JDK 7u401-b01, quarterly CPU) — Azul Legacy Production SupportApply legacy security update: Azul Zulu JDK 6 installer 6.59.0.14 (JDK 6b159, quarterly CPU) — Azul Legacy Production Support | Oct 20, 2023 | Oct 17, 2023 |
| Centos_linux | — | Upgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-debuginfoUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-demo | Nov 1, 2023 | Oct 17, 2023 |
| Eclipseadoptium | — | Upgrade to the latest version of Eclipse Adoptium | Jun 26, 2026 | Oct 17, 2023 |
| Gentoo Linux | — | Upgrade dev-java/openjdk-bin.Upgrade dev-java/openjdk-jre-bin.Upgrade dev-java/openjdk. | Dec 9, 2024 | Oct 17, 2023 |
| Ibm Aix | — | Apply the fix or workaround for java_dec2023_advisory | Dec 21, 2023 | Oct 17, 2023 |
| Ibm Java | — | Upgrade IBM Java to version 7.1.5.20Upgrade IBM Java to version 8.0.8.15 | Oct 20, 2026 | Oct 20, 2026 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Nov 17, 2023 | Nov 17, 2023 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Oct 19, 2023 | Oct 17, 2023 |
| Oracle_linux | — | Upgrade graalvm-community-17-wasmUpgrade graalvm-community-17-espresso-llvmUpgrade graalvm-community-17-pythonUpgrade graalvm-community-17-rubyUpgrade java-1.8.0-openjdk-demoUpgrade graalvm-community-17-native-image-llvm-backendUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade java-1.8.0-openjdk-fastdebugUpgrade graalvm-community-17-llvmUpgrade java-1.8.0-openjdk-demo-fastdebugUpgrade java-1.8.0-openjdk-headless-fastdebugUpgrade java-1.8.0-openjdk-src-fastdebugUpgrade graalvm-community-21-native-imageUpgrade graalvm-community-21-jdkUpgrade java-1.8.0-openjdk-demo-slowdebugUpgrade graalvm-community-17-ruby-develUpgrade graalvm-community-17-native-imageUpgrade graalvm-community-17-nodejs-develUpgrade graalvm-community-17-jdkUpgrade java-1.8.0-openjdk-devel-fastdebugUpgrade java-1.8.0-openjdk-headless-slowdebugUpgrade java-1.8.0-openjdk-accessibilityUpgrade graalvm-community-17-python-develUpgrade graalvm-community-17-espressoUpgrade graalvm-community-17-toolsUpgrade graalvm-community-17-libpolyglotUpgrade java-1.8.0-openjdk-develUpgrade graalvm-community-17-nodejsUpgrade graalvm-community-17-regexUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-headlessUpgrade graalvm-community-17-polyglotUpgrade graalvm-community-17-javascriptUpgrade graalvm-community-17-llvm-toolchainUpgrade graalvm-community-17-icu4jUpgrade java-1.8.0-openjdk-accessibility-slowdebugUpgrade java-1.8.0-openjdk-src-slowdebugUpgrade java-1.8.0-openjdk-devel-slowdebugUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-slowdebugUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-accessibility-fastdebug | Oct 19, 2023 | Oct 17, 2023 |
| Redhat_linux | — | No solution existsUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-openjdk-fastdebugUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade java-1.8.0-openjdk-demo-slowdebug-debuginfoUpgrade java-1.8.0-openjdk-headless-debuginfoUpgrade java-1.8.0-openjdk-devel-debuginfoUpgrade java-1.8.0-openjdk-devel-slowdebugUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-demo-debuginfoUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-demo-slowdebugUpgrade java-1.8.0-openjdk-accessibility-slowdebugUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-src-fastdebugUpgrade java-1.8.0-openjdk-headless-slowdebugUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-webstartUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-openjdk-fastdebug-debuginfoUpgrade java-1.8.0-openjdk-headless-fastdebugUpgrade java-1.8.0-openjdk-devel-slowdebug-debuginfoUpgrade java-1.8.0-openjdk-headless-slowdebug-debuginfoUpgrade java-1.8.0-ibmUpgrade java-1.8.0-openjdk-slowdebugUpgrade java-1.8.0-ibm-develUpgrade java-1.8.0-openjdk-demo-fastdebugUpgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-openjdk-devel-fastdebugUpgrade java-1.8.0-openjdk-debugsourceUpgrade java-1.8.0-openjdk-slowdebug-debuginfoUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibm-headlessUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-openjdk-headless-fastdebug-debuginfoUpgrade java-1.8.0-openjdk-src-slowdebugUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-accessibility-fastdebugUpgrade java-1.8.0-openjdk-devel-fastdebug-debuginfoUpgrade java-1.8.0-openjdk-debuginfoUpgrade java-1.8.0-openjdk-demo-fastdebug-debuginfo | Nov 1, 2023 | Oct 17, 2023 |
| Suse | — | Upgrade java-1_8_0-openj9-javadocUpgrade java-1_8_0-openj9-develUpgrade java-1_8_0-openjdk-srcUpgrade java-1_8_0-ibm-alsaUpgrade java-1_8_0-openj9-accessibilityUpgrade java-1_8_0-openjdk-javadocUpgrade java-1_8_0-openjdk-headlessUpgrade java-1_8_0-openjdkUpgrade java-1_8_0-ibm-32bitUpgrade java-1_8_0-ibm-develUpgrade java-1_8_0-ibm-devel-32bitUpgrade java-1_8_0-ibm-demoUpgrade java-1_8_0-openj9-demoUpgrade java-1_8_0-openj9-headlessUpgrade java-1_8_0-openjdk-develUpgrade java-1_8_0-ibmUpgrade java-1_8_0-openjdk-demoUpgrade java-1_8_0-ibm-pluginUpgrade java-1_8_0-openj9-srcUpgrade java-1_8_0-openj9Upgrade java-1_8_0-openjdk-accessibilityUpgrade java-1_8_0-ibm-src | Nov 22, 2023 | Oct 17, 2023 |
| Ubuntu | — | Upgrade openjdk-8-jreUpgrade openjdk-8-jdk-headlessUpgrade openjdk-8-jdkUpgrade openjdk-8-jre-headlessUpgrade openjdk-8-jre-zeroUpgrade openjdk-8-jre-jamvm | Nov 30, 2023 | Oct 17, 2023 |
| Zimbra Collaboration | — | Upgrade Zimbra Collaboration to the latest version | Jan 20, 2025 | Oct 17, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub