Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf; Oracle GraalVM Enterprise Edition: 20.3.8 and 21.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Adoptopenjdk | adoptopenjdk-upgrade-latest | Jan 26, 2023 | Jan 18, 2023 | |
| Alma_linux | alma-upgrade-java-1.8.0-openjdkalma-upgrade-java-1.8.0-openjdk-accessibilityalma-upgrade-java-1.8.0-openjdk-accessibility-fastdebugalma-upgrade-java-1.8.0-openjdk-accessibility-slowdebugalma-upgrade-java-1.8.0-openjdk-demoalma-upgrade-java-1.8.0-openjdk-demo-fastdebugalma-upgrade-java-1.8.0-openjdk-demo-slowdebugalma-upgrade-java-1.8.0-openjdk-develalma-upgrade-java-1.8.0-openjdk-devel-fastdebugalma-upgrade-java-1.8.0-openjdk-devel-slowdebugalma-upgrade-java-1.8.0-openjdk-fastdebugalma-upgrade-java-1.8.0-openjdk-headlessalma-upgrade-java-1.8.0-openjdk-headless-fastdebugalma-upgrade-java-1.8.0-openjdk-headless-slowdebugalma-upgrade-java-1.8.0-openjdk-javadocalma-upgrade-java-1.8.0-openjdk-javadoc-zipalma-upgrade-java-1.8.0-openjdk-slowdebugalma-upgrade-java-1.8.0-openjdk-srcalma-upgrade-java-1.8.0-openjdk-src-fastdebugalma-upgrade-java-1.8.0-openjdk-src-slowdebug | Feb 13, 2023 | Jan 18, 2023 | |
| Alpine Linux | alpine-linux-upgrade-openjdk8 | Aug 22, 2024 | Jan 17, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-java-1-8-0-amazon-correttoamazon-linux-ami-2-upgrade-java-1-8-0-amazon-corretto-develamazon-linux-ami-2-upgrade-java-1-8-0-openjdkamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-accessibilityamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-accessibility-debugamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-debugamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-debuginfoamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-demoamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-demo-debugamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-develamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-devel-debugamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-headlessamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-headless-debugamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-javadocamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-javadoc-debugamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-javadoc-zipamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-javadoc-zip-debugamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-srcamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-src-debug | Jan 24, 2023 | Jan 18, 2023 | |
| Amazon_linux | — | amazon-linux-upgrade-java-1-8-0-openjdk | Mar 7, 2023 | Jan 18, 2023 |
| Azul Zulu | azul-zulu-jdk6azul-zulu-jdk7azul-zulu-jdk8 | Jan 25, 2023 | Jan 17, 2023 | |
| Centos_linux | — | centos-upgrade-java-1-8-0-ibmcentos-upgrade-java-1-8-0-ibm-democentos-upgrade-java-1-8-0-ibm-develcentos-upgrade-java-1-8-0-ibm-jdbccentos-upgrade-java-1-8-0-ibm-plugincentos-upgrade-java-1-8-0-ibm-srccentos-upgrade-java-1-8-0-openjdkcentos-upgrade-java-1-8-0-openjdk-accessibilitycentos-upgrade-java-1-8-0-openjdk-debuginfocentos-upgrade-java-1-8-0-openjdk-democentos-upgrade-java-1-8-0-openjdk-develcentos-upgrade-java-1-8-0-openjdk-headlesscentos-upgrade-java-1-8-0-openjdk-javadoccentos-upgrade-java-1-8-0-openjdk-javadoc-zipcentos-upgrade-java-1-8-0-openjdk-src | Jan 27, 2023 | Jan 18, 2023 |
| Eclipseadoptium | eclipseadoptium-upgrade-latest | Jun 26, 2026 | Jan 17, 2023 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-java-icedteagentoo-linux-upgrade-dev-java-icedtea-bingentoo-linux-upgrade-dev-java-openjdkgentoo-linux-upgrade-dev-java-openjdk-bingentoo-linux-upgrade-dev-java-openjdk-jre-bin | Jan 18, 2024 | Jan 18, 2023 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-java-1.8.0-openjdkhuawei-euleros-2_0_sp5-upgrade-java-1.8.0-openjdk-develhuawei-euleros-2_0_sp5-upgrade-java-1.8.0-openjdk-headless | Jun 9, 2023 | Jan 18, 2023 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-java-1.8.0-openjdkhuawei-euleros-2_0_sp8-upgrade-java-1.8.0-openjdk-develhuawei-euleros-2_0_sp8-upgrade-java-1.8.0-openjdk-headless | Apr 13, 2023 | Jan 18, 2023 | |
| Ibm Aix | ibm-aix-java_may2023_advisory | Jul 27, 2023 | Jan 18, 2023 | |
| Ibm Java | ibm-java-upgrade-7_1_5_17ibm-java-upgrade-8_0_8_0 | Jan 17, 2023 | Jan 17, 2023 | |
| Ibm Was | ibm-was-upgrade-latest | Jan 17, 2023 | Jan 17, 2023 | |
| Jre Vuln | jre-upgrade-latest | Mar 24, 2023 | Jan 17, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-graalvm22-ce-11oracle-linux-upgrade-graalvm22-ce-11-develoracle-linux-upgrade-graalvm22-ce-11-espressooracle-linux-upgrade-graalvm22-ce-11-espresso-llvmoracle-linux-upgrade-graalvm22-ce-11-fastroracle-linux-upgrade-graalvm22-ce-11-javascriptoracle-linux-upgrade-graalvm22-ce-11-jdkoracle-linux-upgrade-graalvm22-ce-11-libpolyglotoracle-linux-upgrade-graalvm22-ce-11-llvmoracle-linux-upgrade-graalvm22-ce-11-llvm-toolchainoracle-linux-upgrade-graalvm22-ce-11-native-imageoracle-linux-upgrade-graalvm22-ce-11-native-image-llvm-backendoracle-linux-upgrade-graalvm22-ce-11-nodejsoracle-linux-upgrade-graalvm22-ce-11-nodejs-develoracle-linux-upgrade-graalvm22-ce-11-polyglotoracle-linux-upgrade-graalvm22-ce-11-pythonoracle-linux-upgrade-graalvm22-ce-11-python-develoracle-linux-upgrade-graalvm22-ce-11-rubyoracle-linux-upgrade-graalvm22-ce-11-ruby-develoracle-linux-upgrade-graalvm22-ce-11-toolsoracle-linux-upgrade-graalvm22-ce-11-wasmoracle-linux-upgrade-graalvm22-ce-17oracle-linux-upgrade-graalvm22-ce-17-develoracle-linux-upgrade-graalvm22-ce-17-espressooracle-linux-upgrade-graalvm22-ce-17-espresso-llvmoracle-linux-upgrade-graalvm22-ce-17-fastroracle-linux-upgrade-graalvm22-ce-17-javascriptoracle-linux-upgrade-graalvm22-ce-17-jdkoracle-linux-upgrade-graalvm22-ce-17-libpolyglotoracle-linux-upgrade-graalvm22-ce-17-llvmoracle-linux-upgrade-graalvm22-ce-17-llvm-toolchainoracle-linux-upgrade-graalvm22-ce-17-native-imageoracle-linux-upgrade-graalvm22-ce-17-native-image-llvm-backendoracle-linux-upgrade-graalvm22-ce-17-nodejsoracle-linux-upgrade-graalvm22-ce-17-nodejs-develoracle-linux-upgrade-graalvm22-ce-17-polyglotoracle-linux-upgrade-graalvm22-ce-17-pythonoracle-linux-upgrade-graalvm22-ce-17-python-develoracle-linux-upgrade-graalvm22-ce-17-rubyoracle-linux-upgrade-graalvm22-ce-17-ruby-develoracle-linux-upgrade-graalvm22-ce-17-toolsoracle-linux-upgrade-graalvm22-ce-17-wasmoracle-linux-upgrade-java-1-8-0-openjdkoracle-linux-upgrade-java-1-8-0-openjdk-accessibilityoracle-linux-upgrade-java-1-8-0-openjdk-accessibility-fastdebugoracle-linux-upgrade-java-1-8-0-openjdk-accessibility-slowdebugoracle-linux-upgrade-java-1-8-0-openjdk-demooracle-linux-upgrade-java-1-8-0-openjdk-demo-fastdebugoracle-linux-upgrade-java-1-8-0-openjdk-demo-slowdebugoracle-linux-upgrade-java-1-8-0-openjdk-develoracle-linux-upgrade-java-1-8-0-openjdk-devel-fastdebugoracle-linux-upgrade-java-1-8-0-openjdk-devel-slowdebugoracle-linux-upgrade-java-1-8-0-openjdk-fastdebugoracle-linux-upgrade-java-1-8-0-openjdk-headlessoracle-linux-upgrade-java-1-8-0-openjdk-headless-fastdebugoracle-linux-upgrade-java-1-8-0-openjdk-headless-slowdebugoracle-linux-upgrade-java-1-8-0-openjdk-javadocoracle-linux-upgrade-java-1-8-0-openjdk-javadoc-ziporacle-linux-upgrade-java-1-8-0-openjdk-slowdebugoracle-linux-upgrade-java-1-8-0-openjdk-srcoracle-linux-upgrade-java-1-8-0-openjdk-src-fastdebugoracle-linux-upgrade-java-1-8-0-openjdk-src-slowdebug | Jan 25, 2023 | Jan 17, 2023 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-java-1-8-0-ibmredhat-upgrade-java-1-8-0-ibm-demoredhat-upgrade-java-1-8-0-ibm-develredhat-upgrade-java-1-8-0-ibm-jdbcredhat-upgrade-java-1-8-0-ibm-pluginredhat-upgrade-java-1-8-0-ibm-srcredhat-upgrade-java-1-8-0-openjdkredhat-upgrade-java-1-8-0-openjdk-accessibilityredhat-upgrade-java-1-8-0-openjdk-accessibility-fastdebugredhat-upgrade-java-1-8-0-openjdk-accessibility-slowdebugredhat-upgrade-java-1-8-0-openjdk-debuginforedhat-upgrade-java-1-8-0-openjdk-debugsourceredhat-upgrade-java-1-8-0-openjdk-demoredhat-upgrade-java-1-8-0-openjdk-demo-debuginforedhat-upgrade-java-1-8-0-openjdk-demo-fastdebugredhat-upgrade-java-1-8-0-openjdk-demo-fastdebug-debuginforedhat-upgrade-java-1-8-0-openjdk-demo-slowdebugredhat-upgrade-java-1-8-0-openjdk-demo-slowdebug-debuginforedhat-upgrade-java-1-8-0-openjdk-develredhat-upgrade-java-1-8-0-openjdk-devel-debuginforedhat-upgrade-java-1-8-0-openjdk-devel-fastdebugredhat-upgrade-java-1-8-0-openjdk-devel-fastdebug-debuginforedhat-upgrade-java-1-8-0-openjdk-devel-slowdebugredhat-upgrade-java-1-8-0-openjdk-devel-slowdebug-debuginforedhat-upgrade-java-1-8-0-openjdk-fastdebugredhat-upgrade-java-1-8-0-openjdk-fastdebug-debuginforedhat-upgrade-java-1-8-0-openjdk-headlessredhat-upgrade-java-1-8-0-openjdk-headless-debuginforedhat-upgrade-java-1-8-0-openjdk-headless-fastdebugredhat-upgrade-java-1-8-0-openjdk-headless-fastdebug-debuginforedhat-upgrade-java-1-8-0-openjdk-headless-slowdebugredhat-upgrade-java-1-8-0-openjdk-headless-slowdebug-debuginforedhat-upgrade-java-1-8-0-openjdk-javadocredhat-upgrade-java-1-8-0-openjdk-javadoc-zipredhat-upgrade-java-1-8-0-openjdk-slowdebugredhat-upgrade-java-1-8-0-openjdk-slowdebug-debuginforedhat-upgrade-java-1-8-0-openjdk-srcredhat-upgrade-java-1-8-0-openjdk-src-fastdebugredhat-upgrade-java-1-8-0-openjdk-src-slowdebug | Jan 24, 2023 | Jan 18, 2023 | |
| Rocky_linux | rocky-upgrade-java-1.8.0-openjdkrocky-upgrade-java-1.8.0-openjdk-accessibilityrocky-upgrade-java-1.8.0-openjdk-accessibility-fastdebugrocky-upgrade-java-1.8.0-openjdk-accessibility-slowdebugrocky-upgrade-java-1.8.0-openjdk-debuginforocky-upgrade-java-1.8.0-openjdk-debugsourcerocky-upgrade-java-1.8.0-openjdk-demorocky-upgrade-java-1.8.0-openjdk-demo-debuginforocky-upgrade-java-1.8.0-openjdk-demo-fastdebugrocky-upgrade-java-1.8.0-openjdk-demo-fastdebug-debuginforocky-upgrade-java-1.8.0-openjdk-demo-slowdebugrocky-upgrade-java-1.8.0-openjdk-demo-slowdebug-debuginforocky-upgrade-java-1.8.0-openjdk-develrocky-upgrade-java-1.8.0-openjdk-devel-debuginforocky-upgrade-java-1.8.0-openjdk-devel-fastdebugrocky-upgrade-java-1.8.0-openjdk-devel-fastdebug-debuginforocky-upgrade-java-1.8.0-openjdk-devel-slowdebugrocky-upgrade-java-1.8.0-openjdk-devel-slowdebug-debuginforocky-upgrade-java-1.8.0-openjdk-fastdebugrocky-upgrade-java-1.8.0-openjdk-fastdebug-debuginforocky-upgrade-java-1.8.0-openjdk-headlessrocky-upgrade-java-1.8.0-openjdk-headless-debuginforocky-upgrade-java-1.8.0-openjdk-headless-fastdebugrocky-upgrade-java-1.8.0-openjdk-headless-fastdebug-debuginforocky-upgrade-java-1.8.0-openjdk-headless-slowdebugrocky-upgrade-java-1.8.0-openjdk-headless-slowdebug-debuginforocky-upgrade-java-1.8.0-openjdk-slowdebugrocky-upgrade-java-1.8.0-openjdk-slowdebug-debuginforocky-upgrade-java-1.8.0-openjdk-srcrocky-upgrade-java-1.8.0-openjdk-src-fastdebugrocky-upgrade-java-1.8.0-openjdk-src-slowdebug | Mar 12, 2024 | Jan 18, 2023 | |
| Suse | — | suse-upgrade-java-1_8_0-ibmsuse-upgrade-java-1_8_0-ibm-32bitsuse-upgrade-java-1_8_0-ibm-alsasuse-upgrade-java-1_8_0-ibm-demosuse-upgrade-java-1_8_0-ibm-develsuse-upgrade-java-1_8_0-ibm-devel-32bitsuse-upgrade-java-1_8_0-ibm-pluginsuse-upgrade-java-1_8_0-ibm-srcsuse-upgrade-java-1_8_0-openj9suse-upgrade-java-1_8_0-openj9-accessibilitysuse-upgrade-java-1_8_0-openj9-demosuse-upgrade-java-1_8_0-openj9-develsuse-upgrade-java-1_8_0-openj9-headlesssuse-upgrade-java-1_8_0-openj9-javadocsuse-upgrade-java-1_8_0-openj9-srcsuse-upgrade-java-1_8_0-openjdksuse-upgrade-java-1_8_0-openjdk-accessibilitysuse-upgrade-java-1_8_0-openjdk-demosuse-upgrade-java-1_8_0-openjdk-develsuse-upgrade-java-1_8_0-openjdk-headlesssuse-upgrade-java-1_8_0-openjdk-javadocsuse-upgrade-java-1_8_0-openjdk-src | Feb 17, 2023 | Jan 18, 2023 |
| Ubuntu | ubuntu-upgrade-openjdk-8-jdkubuntu-upgrade-openjdk-8-jreubuntu-upgrade-openjdk-8-jre-headlessubuntu-upgrade-openjdk-8-jre-zero | Mar 22, 2023 | Jan 18, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub