Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade java-25-amazon-corretto-debugsymbolsUpgrade java-11-amazon-corretto-headlessUpgrade java-1.8.0-amazon-corretto-develUpgrade java-26-amazon-corretto-develUpgrade java-17-amazon-corretto-jmodsUpgrade java-17-amazon-corretto-headlessUpgrade java-25-amazon-correttoUpgrade java-1.8.0-amazon-correttoUpgrade java-26-amazon-corretto-javadocUpgrade java-21-amazon-corretto-javadocUpgrade java-11-amazon-corretto-jmodsUpgrade java-17-amazon-corretto-debugsymbolsUpgrade java-21-amazon-corretto-headlessUpgrade java-25-amazon-corretto-jmodsUpgrade java-26-amazon-correttoUpgrade java-21-amazon-corretto-debugsymbolsUpgrade java-17-amazon-correttoUpgrade java-11-amazon-corretto-javadocUpgrade java-11-amazon-corretto-develUpgrade java-25-amazon-corretto-headlessUpgrade java-25-amazon-corretto-develUpgrade java-21-amazon-correttoUpgrade java-26-amazon-corretto-debugsymbolsUpgrade java-26-amazon-corretto-headlessUpgrade java-21-amazon-corretto-develUpgrade java-17-amazon-corretto-javadocUpgrade java-17-amazon-corretto-develUpgrade java-25-amazon-corretto-javadocUpgrade java-21-amazon-corretto-jmodsUpgrade java-11-amazon-correttoUpgrade java-26-amazon-corretto-jmodsUpgrade java-11-amazon-corretto-debugsymbolsUpgrade java-1.8.0-amazon-corretto-debugsymbols | Sep 1, 2026 | Aug 18, 2026 |
| Azul Zulu | — | Upgrade to Azul Zulu JDK 21 installer 21.51.204 (JDK 21.0.11.0.201+1, quarterly CPU) (LTS stream)Apply Azul Zulu JDK 26 installer 26.32.203 (JDK 26.0.2.1+1, PSU) (short-term support); migrate to JDK 25 (LTS)Upgrade to Azul Zulu JDK 25 installer 25.35.204 (JDK 25.0.3.0.201+1, quarterly CPU) (LTS stream)Upgrade to Azul Zulu JDK 8 installer 8.95.0.204 (JDK 8u503-b01, quarterly CPU) (LTS stream)Upgrade to Azul Zulu JDK 11 installer 11.89.204 (JDK 11.0.31.0.201+1, quarterly CPU) (LTS stream)Upgrade to Azul Zulu JDK 17 installer 17.67.204 (JDK 17.0.19.0.201+1, quarterly CPU) (LTS stream) | Aug 19, 2026 | Aug 18, 2026 |
| Debian | — | Upgrade openjdk-25Upgrade openjdk-21Upgrade openjdk-11Upgrade openjdk-17 | Aug 23, 2026 | Aug 23, 2026 |
| Ibm Java | — | Upgrade IBM Java to version 8.0.8.71 | Aug 27, 2026 | Aug 18, 2026 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Aug 18, 2026 | Aug 18, 2026 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Aug 19, 2026 | Aug 18, 2026 |
| Redhat_linux | — | Upgrade java-21-openjdk-headless-debuginfoUpgrade java-17-openjdk-fastdebug-debuginfoUpgrade java-17-openjdk-src-fastdebugUpgrade java-21-openjdk-static-libsUpgrade java-25-openjdk-headlessUpgrade java-11-openjdk-src-fastdebugUpgrade java-21-openjdk-devel-fastdebugUpgrade java-1.8.0-openjdk-src-slowdebugUpgrade java-21-openjdk-fastdebug-debuginfoUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-openjdk-demo-fastdebugUpgrade java-1.8.0-openjdk-javadocUpgrade java-17-openjdk-jmodsUpgrade java-17-openjdk-headless-debuginfoUpgrade java-25-openjdk-static-libsUpgrade java-17-openjdk-javadocUpgrade java-25-openjdk-headless-fastdebug-debuginfoUpgrade java-21-openjdk-headless-slowdebugUpgrade java-21-openjdk-javadoc-zipUpgrade java-21-openjdk-fastdebugUpgrade java-25-openjdk-demo-fastdebugUpgrade java-25-openjdk-slowdebug-debuginfoUpgrade java-1.8.0-openjdk-devel-fastdebug-debuginfoUpgrade java-25-openjdk-fastdebug-debuginfoUpgrade java-1.8.0-openjdk-develUpgrade java-11-openjdk-headless-debugUpgrade java-21-openjdk-src-slowdebugUpgrade java-11-openjdk-jmods-debugUpgrade java-25-openjdk-devel-debuginfoUpgrade java-1.8.0-openjdk-slowdebugUpgrade java-25-openjdk-src-fastdebugUpgrade java-11-openjdk-jmodsUpgrade java-21-openjdk-jmods-fastdebugUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-demo-debuginfoUpgrade java-11-openjdk-headless-debuginfoUpgrade java-17-openjdk-static-libs-fastdebugUpgrade java-1.8.0-openjdk-devel-slowdebugUpgrade java-11-openjdk-headless-fastdebug-debuginfoUpgrade java-11-openjdk-jmods-slowdebugUpgrade java-1.8.0-ibm-webstartUpgrade java-17-openjdk-headlessUpgrade java-17-openjdk-headless-fastdebugUpgrade java-25-openjdk-devel-slowdebug-debuginfoUpgrade java-17-openjdk-slowdebug-debuginfoUpgrade java-21-openjdk-headless-slowdebug-debuginfoUpgrade java-25-openjdk-devel-fastdebugUpgrade java-25-openjdk-crypto-adapter-fastdebug-debuginfoUpgrade java-25-openjdkUpgrade java-25-openjdk-jmodsUpgrade java-17-openjdk-devel-slowdebug-debuginfoUpgrade java-1.8.0-openjdk-headless-slowdebugUpgrade java-21-openjdk-debuginfoUpgrade java-17-openjdk-devel-fastdebugUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-25-openjdk-demo-slowdebugUpgrade java-1.8.0-openjdk-fastdebug-debuginfoUpgrade java-25-openjdk-crypto-adapterUpgrade java-1.8.0-openjdk-headlessUpgrade java-25-openjdk-debuginfoUpgrade java-21-openjdk-devel-slowdebug-debuginfoUpgrade java-11-openjdk-src-slowdebugUpgrade java-1.8.0-openjdk-demo-slowdebug-debuginfoUpgrade java-25-openjdk-slowdebugUpgrade java-17-openjdk-fastdebugUpgrade java-11-openjdk-headlessUpgrade java-17-openjdk-src-slowdebugUpgrade java-25-openjdk-headless-slowdebug-debuginfoUpgrade java-25-openjdk-javadoc-zipUpgrade java-17-openjdk-headless-fastdebug-debuginfoUpgrade java-17-openjdk-static-libs-slowdebugUpgrade java-21-openjdk-srcUpgrade java-11-openjdk-jmods-fastdebugUpgrade java-1.8.0-openjdk-fastdebugUpgrade java-21-openjdk-jmods-slowdebugUpgrade java-25-openjdk-headless-slowdebugUpgrade java-1.8.0-openjdk-debugsourceUpgrade java-25-openjdk-srcUpgrade java-17-openjdk-headless-slowdebugUpgrade java-17-openjdkUpgrade java-1.8.0-openjdk-accessibility-slowdebugUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade java-1.8.0-openjdk-devel-slowdebug-debuginfoUpgrade java-11-openjdk-devel-debuginfoUpgrade java-17-openjdk-debugsourceUpgrade java-1.8.0-openjdk-devel-debuginfoUpgrade java-11-openjdk-debugsourceUpgrade java-17-openjdk-headless-slowdebug-debuginfoUpgrade java-21-openjdk-jmodsUpgrade java-1.8.0-openjdk-src-fastdebugUpgrade java-21-openjdk-slowdebug-debuginfoUpgrade java-25-openjdk-headless-debuginfoUpgrade java-1.8.0-ibm-pluginUpgrade java-25-openjdk-jmods-fastdebugUpgrade java-11-openjdk-develUpgrade java-11-openjdk-debuginfoUpgrade java-25-openjdk-crypto-adapter-slowdebugUpgrade java-11-openjdk-devel-fastdebugUpgrade java-11-openjdk-debugUpgrade java-1.8.0-openjdk-demo-slowdebugUpgrade java-25-openjdk-fastdebugUpgrade java-11-openjdk-devel-fastdebug-debuginfoUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-devel-fastdebugUpgrade java-1.8.0-ibm-develUpgrade java-25-openjdk-javadocUpgrade java-25-openjdk-develUpgrade java-21-openjdk-javadocUpgrade java-17-openjdk-demo-slowdebugUpgrade java-1.8.0-openjdk-accessibility-fastdebugUpgrade java-17-openjdk-javadoc-zipUpgrade java-17-openjdk-devel-debuginfoUpgrade java-11-openjdk-static-libsUpgrade java-21-openjdk-demo-slowdebugUpgrade java-1.8.0-openjdk-slowdebug-debuginfoUpgrade java-21-openjdk-devel-debuginfoUpgrade java-21-openjdk-demo-fastdebugUpgrade java-17-openjdk-jmods-fastdebugUpgrade java-11-openjdk-javadoc-zipUpgrade java-11-openjdk-headless-fastdebugUpgrade java-11-openjdk-fastdebug-debuginfoUpgrade java-11-openjdk-devel-debugUpgrade java-11-openjdk-demo-fastdebugUpgrade java-25-openjdk-static-libs-slowdebugUpgrade java-25-openjdk-static-libs-fastdebugUpgrade java-1.8.0-openjdk-demo-fastdebug-debuginfoUpgrade java-21-openjdkUpgrade java-25-openjdk-devel-fastdebug-debuginfoUpgrade java-21-openjdk-static-libs-slowdebugUpgrade java-21-openjdk-src-fastdebugUpgrade java-21-openjdk-devel-slowdebugUpgrade java-11-openjdk-slowdebugUpgrade java-1.8.0-openjdk-headless-fastdebug-debuginfoUpgrade java-1.8.0-ibmUpgrade java-11-openjdk-srcUpgrade java-21-openjdk-headless-fastdebugUpgrade java-1.8.0-openjdk-debuginfoUpgrade java-11-openjdk-demo-debugUpgrade java-1.8.0-ibm-headlessUpgrade java-1.8.0-openjdk-demoUpgrade java-17-openjdk-demoUpgrade java-11-openjdk-javadoc-debugUpgrade java-11-openjdk-src-debugUpgrade java-25-openjdk-headless-fastdebugUpgrade java-25-openjdk-demoUpgrade java-11-openjdk-headless-slowdebug-debuginfoUpgrade java-17-openjdk-debuginfoUpgrade java-11-openjdk-static-libs-fastdebugNo solution existsUpgrade java-17-openjdk-develUpgrade java-17-openjdk-srcUpgrade java-11-openjdk-static-libs-slowdebugUpgrade java-11-openjdk-static-libs-debugUpgrade java-1.8.0-ibm-jdbcUpgrade java-25-openjdk-devel-slowdebugUpgrade java-25-openjdk-debugsourceUpgrade java-25-openjdk-crypto-adapter-debuginfoUpgrade java-21-openjdk-static-libs-fastdebugUpgrade java-17-openjdk-static-libsUpgrade java-11-openjdk-javadocUpgrade java-11-openjdk-demo-slowdebugUpgrade java-17-openjdk-jmods-slowdebugUpgrade java-17-openjdk-devel-slowdebugUpgrade java-11-openjdk-slowdebug-debuginfoUpgrade java-1.8.0-openjdk-headless-fastdebugUpgrade java-25-openjdk-crypto-adapter-fastdebugUpgrade java-11-openjdk-demoUpgrade java-11-openjdk-javadoc-zip-debugUpgrade java-21-openjdk-slowdebugUpgrade java-1.8.0-openjdk-headless-slowdebug-debuginfoUpgrade java-1.8.0-ibm-demoUpgrade java-21-openjdk-debugsourceUpgrade java-11-openjdkUpgrade java-25-openjdk-src-slowdebugUpgrade java-21-openjdk-demoUpgrade java-11-openjdk-fastdebugUpgrade java-25-openjdk-jmods-slowdebugUpgrade java-17-openjdk-devel-fastdebug-debuginfoUpgrade java-21-openjdk-devel-fastdebug-debuginfoUpgrade java-17-openjdk-demo-fastdebugUpgrade java-21-openjdk-develUpgrade java-21-openjdk-headless-fastdebug-debuginfoUpgrade java-25-openjdk-crypto-adapter-slowdebug-debuginfoUpgrade java-11-openjdk-headless-slowdebugUpgrade java-1.8.0-openjdk-headless-debuginfoUpgrade java-21-openjdk-headlessUpgrade java-17-openjdk-slowdebugUpgrade java-11-openjdk-devel-slowdebug-debuginfoUpgrade java-11-openjdk-devel-slowdebug | Aug 21, 2026 | Aug 18, 2026 |
| Rocky_linux | — | Upgrade java-17-openjdk-headless-debuginfoUpgrade java-17-openjdk-static-libsUpgrade java-17-openjdkUpgrade java-21-openjdk-develUpgrade java-17-openjdk-debugsourceUpgrade java-21-openjdk-headless-slowdebug-debuginfoUpgrade java-21-openjdk-srcUpgrade java-21-openjdk-jmods-fastdebugUpgrade java-1.8.0-openjdk-fastdebugUpgrade java-21-openjdk-demo-fastdebugUpgrade java-17-openjdk-devel-slowdebug-debuginfoUpgrade java-17-openjdk-javadocUpgrade java-21-openjdk-devel-fastdebugUpgrade java-1.8.0-openjdk-accessibility-fastdebugUpgrade java-17-openjdk-src-fastdebugUpgrade java-21-openjdk-devel-slowdebug-debuginfoUpgrade java-21-openjdk-src-slowdebugUpgrade java-17-openjdk-devel-debuginfoUpgrade java-1.8.0-openjdk-debugsourceUpgrade java-17-openjdk-headless-fastdebug-debuginfoUpgrade java-21-openjdk-fastdebugUpgrade java-21-openjdk-javadoc-zipUpgrade java-17-openjdk-jmods-fastdebugUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-src-slowdebugUpgrade java-17-openjdk-slowdebugUpgrade java-21-openjdk-fastdebug-debuginfoUpgrade java-21-openjdk-jmodsUpgrade java-21-openjdk-devel-fastdebug-debuginfoUpgrade java-1.8.0-openjdk-devel-slowdebug-debuginfoUpgrade java-17-openjdk-src-slowdebugUpgrade java-21-openjdk-headless-debuginfoUpgrade java-1.8.0-openjdk-devel-fastdebug-debuginfoUpgrade java-1.8.0-openjdk-headless-slowdebug-debuginfoUpgrade java-1.8.0-openjdk-demo-debuginfoUpgrade java-17-openjdk-devel-fastdebug-debuginfoUpgrade java-17-openjdk-javadoc-zipUpgrade java-17-openjdk-fastdebugUpgrade java-17-openjdk-fastdebug-debuginfoUpgrade java-17-openjdk-srcUpgrade java-1.8.0-openjdk-demo-fastdebugUpgrade java-17-openjdk-static-libs-slowdebugUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-demo-slowdebug-debuginfoUpgrade java-1.8.0-openjdk-devel-debuginfoUpgrade java-1.8.0-openjdk-debuginfoUpgrade java-1.8.0-openjdk-demo-slowdebugUpgrade java-17-openjdk-headless-slowdebug-debuginfoUpgrade java-17-openjdk-demo-fastdebugUpgrade java-1.8.0-openjdk-src-fastdebugUpgrade java-21-openjdk-headless-slowdebugUpgrade java-21-openjdk-static-libs-slowdebugUpgrade java-1.8.0-openjdk-headless-slowdebugUpgrade java-1.8.0-openjdk-headless-fastdebugUpgrade java-1.8.0-openjdk-slowdebugUpgrade java-21-openjdk-static-libs-fastdebugUpgrade java-1.8.0-openjdk-fastdebug-debuginfoUpgrade java-21-openjdk-debugsourceUpgrade java-21-openjdk-devel-debuginfoUpgrade java-17-openjdk-jmods-slowdebugUpgrade java-17-openjdk-jmodsUpgrade java-21-openjdk-jmods-slowdebugUpgrade java-21-openjdk-javadocUpgrade java-21-openjdk-debuginfoUpgrade java-21-openjdk-demoUpgrade java-1.8.0-openjdk-devel-slowdebugUpgrade java-21-openjdk-headlessUpgrade java-17-openjdk-devel-fastdebugUpgrade java-21-openjdk-headless-fastdebug-debuginfoUpgrade java-1.8.0-openjdk-develUpgrade java-21-openjdkUpgrade java-21-openjdk-slowdebugUpgrade java-1.8.0-openjdk-headless-fastdebug-debuginfoUpgrade java-17-openjdk-headless-fastdebugUpgrade java-21-openjdk-headless-fastdebugUpgrade java-17-openjdk-static-libs-fastdebugUpgrade java-21-openjdk-static-libsUpgrade java-21-openjdk-demo-slowdebugUpgrade java-1.8.0-openjdk-slowdebug-debuginfoUpgrade java-21-openjdk-slowdebug-debuginfoUpgrade java-1.8.0-openjdk-devel-fastdebugUpgrade java-1.8.0-openjdkUpgrade java-21-openjdk-src-fastdebugUpgrade java-21-openjdk-devel-slowdebugUpgrade java-17-openjdk-develUpgrade java-17-openjdk-demoUpgrade java-1.8.0-openjdk-headless-debuginfoUpgrade java-1.8.0-openjdk-accessibility-slowdebugUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-openjdk-demo-fastdebug-debuginfoUpgrade java-17-openjdk-slowdebug-debuginfoUpgrade java-17-openjdk-headless-slowdebugUpgrade java-17-openjdk-headlessUpgrade java-17-openjdk-devel-slowdebugUpgrade java-17-openjdk-demo-slowdebugUpgrade java-17-openjdk-debuginfoUpgrade java-1.8.0-openjdk-src | Aug 21, 2026 | Aug 20, 2026 |
| Ubuntu | — | Upgrade openjdk-8-jre-headlessUpgrade openjdk-17-jdkUpgrade openjdk-8-jre-zeroUpgrade openjdk-11-jdk-headlessUpgrade openjdk-21-jreUpgrade openjdk-17-jre-zeroUpgrade openjdk-25-jdk-headlessUpgrade openjdk-8-jdk-headlessUpgrade openjdk-21-jre-headlessUpgrade openjdk-8-jre-jamvmUpgrade openjdk-21-sourceUpgrade openjdk-11-jre-zeroUpgrade openjdk-21-testsupportUpgrade openjdk-17-sourceUpgrade openjdk-21-jdk-headlessUpgrade openjdk-25-jdkUpgrade openjdk-11-jre-headlessUpgrade openjdk-25-jreUpgrade openjdk-21-jdkUpgrade openjdk-17-jdk-headlessUpgrade openjdk-17-jre-headlessUpgrade openjdk-25-jre-headlessUpgrade openjdk-21-jre-zeroUpgrade openjdk-17-jreUpgrade openjdk-8-sourceUpgrade openjdk-8-jdkUpgrade openjdk-11-sourceUpgrade openjdk-11-jdkUpgrade openjdk-11-jreUpgrade openjdk-25-jre-zeroUpgrade openjdk-8-jre | Sep 22, 2026 | Sep 21, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub