Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and 11.0.31. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade java-1.8.0-openjdk-javadoc-zipUpgrade java-1.8.0-openjdk-accessibility-fastdebugUpgrade java-1.8.0-openjdk-accessibility-slowdebugUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-fastdebugUpgrade java-1.8.0-openjdk-demo-fastdebugUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-src-slowdebugUpgrade java-1.8.0-openjdk-slowdebugUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-headless-slowdebugUpgrade java-1.8.0-openjdk-devel-slowdebugUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-openjdk-demo-slowdebugUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-openjdk-src-fastdebugUpgrade java-1.8.0-openjdk-headless-fastdebugUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-devel-fastdebug | Jul 26, 2026 | Jul 23, 2026 |
| Alpine Linux | — | Upgrade openjdk11 | Aug 4, 2026 | Jul 21, 2026 |
| Amazon Linux Ami 2 | — | Upgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-amazon-corretto-develUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade java-1.8.0-openjdk-debugUpgrade java-11-amazon-corretto-headlessUpgrade java-1.8.0-openjdk-javadoc-debugUpgrade java-1.8.0-openjdk-srcUpgrade java-11-amazon-corretto-javadocUpgrade java-1.8.0-openjdk-headless-debugUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-openjdk-src-debugUpgrade java-1.8.0-openjdk-debuginfoUpgrade java-1.8.0-openjdk-demo-debugUpgrade java-11-amazon-corretto-debugsymbolsUpgrade java-1.8.0-amazon-correttoUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-accessibility-debugUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-11-amazon-correttoUpgrade java-1.8.0-openjdk-devel-debugUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-openjdk-javadoc-zip-debugUpgrade java-1.8.0-amazon-corretto-debugsymbols | Aug 5, 2026 | Aug 5, 2026 |
| Amazon_linux_2023 | — | Upgrade java-11-amazon-corretto-develUpgrade java-11-amazon-corretto-jmodsUpgrade java-11-amazon-correttoUpgrade java-11-amazon-corretto-debugsymbolsUpgrade java-1.8.0-amazon-correttoUpgrade java-11-amazon-corretto-headlessUpgrade java-11-amazon-corretto-javadocUpgrade java-1.8.0-amazon-corretto-develUpgrade java-1.8.0-amazon-corretto-debugsymbols | Aug 10, 2026 | Jul 21, 2026 |
| Azul Zulu | — | Upgrade to Azul Zulu JDK 8 installer 8.95.0.14 (JDK 8u501-b01, quarterly CPU) (LTS stream)Upgrade to Azul Zulu JDK 11 installer 11.89.14 (JDK 11.0.31.0.101+1, quarterly CPU) (LTS stream) | Jul 30, 2026 | Jul 21, 2026 |
| Debian | — | Upgrade openjdk-11 | Jul 29, 2026 | Jul 29, 2026 |
| Eclipseadoptium | — | Upgrade to the latest version of Eclipse Adoptium | Jul 24, 2026 | Jul 21, 2026 |
| Ibm Aix | — | Apply the fix or workaround for aix_vios_advisory | Aug 16, 2026 | Aug 14, 2026 |
| Ibm Java | — | Upgrade IBM Java to version 8.0.8.70 | Jul 21, 2026 | Jul 21, 2026 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jul 21, 2026 | Jul 21, 2026 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Jul 23, 2026 | Jul 21, 2026 |
| Redhat_linux | — | Upgrade java-11-openjdk-demoUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-openjdk-debuginfoUpgrade java-11-openjdk-devel-debugUpgrade java-1.8.0-openjdk-demo-debuginfoUpgrade java-11-openjdk-devel-slowdebugUpgrade java-1.8.0-openjdk-headless-fastdebugUpgrade java-11-openjdk-demo-fastdebugUpgrade java-1.8.0-openjdk-src-fastdebugUpgrade java-11-openjdk-src-debugUpgrade java-1.8.0-ibm-headlessUpgrade java-11-openjdk-devel-slowdebug-debuginfoUpgrade java-1.8.0-openjdk-accessibility-fastdebugUpgrade java-1.8.0-openjdk-slowdebug-debuginfoUpgrade java-11-openjdkUpgrade java-11-openjdk-demo-slowdebugUpgrade java-11-openjdk-debuginfoUpgrade java-11-openjdk-javadoc-debugUpgrade java-1.8.0-openjdk-demo-slowdebugUpgrade java-1.8.0-openjdk-headless-debuginfoUpgrade java-1.8.0-openjdk-demo-fastdebug-debuginfoUpgrade java-11-openjdk-devel-fastdebugUpgrade java-1.8.0-openjdk-devel-fastdebugUpgrade java-1.8.0-openjdk-srcUpgrade java-11-openjdk-fastdebug-debuginfoUpgrade java-1.8.0-ibmUpgrade java-11-openjdk-slowdebugUpgrade java-11-openjdk-slowdebug-debuginfoUpgrade java-1.8.0-openjdk-headless-slowdebug-debuginfoUpgrade java-11-openjdk-static-libs-fastdebugUpgrade java-11-openjdk-srcUpgrade java-11-openjdk-demo-debugUpgrade java-11-openjdk-headless-fastdebugUpgrade java-11-openjdk-headless-slowdebugUpgrade java-11-openjdk-javadocUpgrade java-11-openjdk-static-libs-debugUpgrade java-11-openjdk-headless-slowdebug-debuginfoUpgrade java-11-openjdk-static-libs-slowdebugUpgrade java-1.8.0-ibm-develUpgrade java-11-openjdk-fastdebugUpgrade java-1.8.0-ibm-demoUpgrade java-11-openjdk-debugsourceUpgrade java-11-openjdk-headlessUpgrade java-11-openjdk-src-slowdebugUpgrade java-1.8.0-openjdk-devel-slowdebug-debuginfoUpgrade java-1.8.0-openjdk-devel-fastdebug-debuginfoUpgrade java-11-openjdk-debugUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-webstartUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-src-slowdebugUpgrade java-1.8.0-openjdk-headless-slowdebugUpgrade java-11-openjdk-src-fastdebugUpgrade java-11-openjdk-headless-debuginfoUpgrade java-11-openjdk-devel-debuginfoUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-devel-debuginfoUpgrade java-1.8.0-ibm-pluginUpgrade java-11-openjdk-javadoc-zip-debugUpgrade java-1.8.0-openjdk-devel-slowdebugUpgrade java-1.8.0-openjdk-demo-slowdebug-debuginfoUpgrade java-11-openjdk-jmods-fastdebugNo solution existsUpgrade java-11-openjdk-javadoc-zipUpgrade java-11-openjdk-devel-fastdebug-debuginfoUpgrade java-1.8.0-openjdk-headless-fastdebug-debuginfoUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-openjdk-demo-fastdebugUpgrade java-1.8.0-openjdk-fastdebugUpgrade java-11-openjdk-jmodsUpgrade java-11-openjdk-develUpgrade java-11-openjdk-static-libsUpgrade java-11-openjdk-jmods-slowdebugUpgrade java-11-openjdk-headless-debugUpgrade java-1.8.0-openjdk-debugsourceUpgrade java-1.8.0-openjdk-slowdebugUpgrade java-1.8.0-openjdk-accessibility-slowdebugUpgrade java-1.8.0-openjdkUpgrade java-11-openjdk-jmods-debugUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade java-11-openjdk-headless-fastdebug-debuginfoUpgrade java-1.8.0-openjdk-fastdebug-debuginfo | Jul 23, 2026 | Jul 21, 2026 |
| Ubuntu | — | Upgrade openjdk-8-jre-jamvmUpgrade openjdk-11-jre-zeroUpgrade openjdk-8-jdkUpgrade openjdk-11-jdk-headlessUpgrade openjdk-11-jreUpgrade openjdk-11-jdkUpgrade openjdk-8-jre-zeroUpgrade openjdk-8-jdk-headlessUpgrade openjdk-8-jre-headlessUpgrade openjdk-8-jreUpgrade openjdk-11-jre-headless | Aug 26, 2026 | Aug 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub