Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf; Oracle GraalVM Enterprise Edition: 20.3.11 and 21.3.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via CORBA to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Adoptopenjdk | adoptopenjdk-upgrade-latest | Nov 9, 2023 | Oct 17, 2023 | |
| Alma_linux | alma-upgrade-java-1.8.0-openjdkalma-upgrade-java-1.8.0-openjdk-accessibilityalma-upgrade-java-1.8.0-openjdk-accessibility-fastdebugalma-upgrade-java-1.8.0-openjdk-accessibility-slowdebugalma-upgrade-java-1.8.0-openjdk-demoalma-upgrade-java-1.8.0-openjdk-demo-fastdebugalma-upgrade-java-1.8.0-openjdk-demo-slowdebugalma-upgrade-java-1.8.0-openjdk-develalma-upgrade-java-1.8.0-openjdk-devel-fastdebugalma-upgrade-java-1.8.0-openjdk-devel-slowdebugalma-upgrade-java-1.8.0-openjdk-fastdebugalma-upgrade-java-1.8.0-openjdk-headlessalma-upgrade-java-1.8.0-openjdk-headless-fastdebugalma-upgrade-java-1.8.0-openjdk-headless-slowdebugalma-upgrade-java-1.8.0-openjdk-javadocalma-upgrade-java-1.8.0-openjdk-javadoc-zipalma-upgrade-java-1.8.0-openjdk-slowdebugalma-upgrade-java-1.8.0-openjdk-srcalma-upgrade-java-1.8.0-openjdk-src-fastdebugalma-upgrade-java-1.8.0-openjdk-src-slowdebug | Oct 23, 2023 | Oct 17, 2023 | |
| Alpine Linux | alpine-linux-upgrade-openjdk8 | Aug 22, 2024 | Oct 17, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-java-1-8-0-amazon-correttoamazon-linux-ami-2-upgrade-java-1-8-0-amazon-corretto-develamazon-linux-ami-2-upgrade-java-1-8-0-openjdkamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-accessibilityamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-accessibility-debugamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-debugamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-debuginfoamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-demoamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-demo-debugamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-develamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-devel-debugamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-headlessamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-headless-debugamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-javadocamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-javadoc-debugamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-javadoc-zipamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-javadoc-zip-debugamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-srcamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-src-debug | Oct 23, 2023 | Oct 17, 2023 | |
| Amazon_linux | — | amazon-linux-upgrade-java-1-8-0-openjdk | Jan 9, 2024 | Oct 17, 2023 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-java-1-8-0-amazon-correttoamazon-linux-2023-upgrade-java-1-8-0-amazon-corretto-devel | Feb 17, 2025 | Oct 17, 2023 | |
| Azul Zulu | azul-zulu-jdk6azul-zulu-jdk7azul-zulu-jdk8 | Oct 20, 2023 | Oct 17, 2023 | |
| Centos_linux | — | centos-upgrade-java-1-8-0-openjdkcentos-upgrade-java-1-8-0-openjdk-accessibilitycentos-upgrade-java-1-8-0-openjdk-debuginfocentos-upgrade-java-1-8-0-openjdk-democentos-upgrade-java-1-8-0-openjdk-develcentos-upgrade-java-1-8-0-openjdk-headlesscentos-upgrade-java-1-8-0-openjdk-javadoccentos-upgrade-java-1-8-0-openjdk-javadoc-zipcentos-upgrade-java-1-8-0-openjdk-src | Nov 1, 2023 | Oct 17, 2023 |
| Eclipseadoptium | eclipseadoptium-upgrade-latest | Jun 26, 2026 | Oct 17, 2023 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-java-openjdkgentoo-linux-upgrade-dev-java-openjdk-bingentoo-linux-upgrade-dev-java-openjdk-jre-bin | Dec 9, 2024 | Oct 17, 2023 | |
| Ibm Aix | ibm-aix-java_dec2023_advisory | Dec 21, 2023 | Oct 17, 2023 | |
| Ibm Java | ibm-java-upgrade-7_1_5_20ibm-java-upgrade-8_0_8_15 | Oct 17, 2023 | Oct 17, 2023 | |
| Ibm Was | ibm-was-upgrade-latest | Oct 17, 2023 | Oct 17, 2023 | |
| Jre Vuln | jre-upgrade-latest | Oct 19, 2023 | Oct 17, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-graalvm-community-17-espressooracle-linux-upgrade-graalvm-community-17-espresso-llvmoracle-linux-upgrade-graalvm-community-17-icu4joracle-linux-upgrade-graalvm-community-17-javascriptoracle-linux-upgrade-graalvm-community-17-jdkoracle-linux-upgrade-graalvm-community-17-libpolyglotoracle-linux-upgrade-graalvm-community-17-llvmoracle-linux-upgrade-graalvm-community-17-llvm-toolchainoracle-linux-upgrade-graalvm-community-17-native-imageoracle-linux-upgrade-graalvm-community-17-native-image-llvm-backendoracle-linux-upgrade-graalvm-community-17-nodejsoracle-linux-upgrade-graalvm-community-17-nodejs-develoracle-linux-upgrade-graalvm-community-17-polyglotoracle-linux-upgrade-graalvm-community-17-pythonoracle-linux-upgrade-graalvm-community-17-python-develoracle-linux-upgrade-graalvm-community-17-regexoracle-linux-upgrade-graalvm-community-17-rubyoracle-linux-upgrade-graalvm-community-17-ruby-develoracle-linux-upgrade-graalvm-community-17-toolsoracle-linux-upgrade-graalvm-community-17-wasmoracle-linux-upgrade-graalvm-community-21-jdkoracle-linux-upgrade-graalvm-community-21-native-imageoracle-linux-upgrade-java-1-8-0-openjdkoracle-linux-upgrade-java-1-8-0-openjdk-accessibilityoracle-linux-upgrade-java-1-8-0-openjdk-accessibility-fastdebugoracle-linux-upgrade-java-1-8-0-openjdk-accessibility-slowdebugoracle-linux-upgrade-java-1-8-0-openjdk-demooracle-linux-upgrade-java-1-8-0-openjdk-demo-fastdebugoracle-linux-upgrade-java-1-8-0-openjdk-demo-slowdebugoracle-linux-upgrade-java-1-8-0-openjdk-develoracle-linux-upgrade-java-1-8-0-openjdk-devel-fastdebugoracle-linux-upgrade-java-1-8-0-openjdk-devel-slowdebugoracle-linux-upgrade-java-1-8-0-openjdk-fastdebugoracle-linux-upgrade-java-1-8-0-openjdk-headlessoracle-linux-upgrade-java-1-8-0-openjdk-headless-fastdebugoracle-linux-upgrade-java-1-8-0-openjdk-headless-slowdebugoracle-linux-upgrade-java-1-8-0-openjdk-javadocoracle-linux-upgrade-java-1-8-0-openjdk-javadoc-ziporacle-linux-upgrade-java-1-8-0-openjdk-slowdebugoracle-linux-upgrade-java-1-8-0-openjdk-srcoracle-linux-upgrade-java-1-8-0-openjdk-src-fastdebugoracle-linux-upgrade-java-1-8-0-openjdk-src-slowdebug | Oct 19, 2023 | Oct 17, 2023 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-java-1-8-0-ibmredhat-upgrade-java-1-8-0-ibm-demoredhat-upgrade-java-1-8-0-ibm-develredhat-upgrade-java-1-8-0-ibm-headlessredhat-upgrade-java-1-8-0-ibm-jdbcredhat-upgrade-java-1-8-0-ibm-pluginredhat-upgrade-java-1-8-0-ibm-srcredhat-upgrade-java-1-8-0-ibm-webstartredhat-upgrade-java-1-8-0-openjdkredhat-upgrade-java-1-8-0-openjdk-accessibilityredhat-upgrade-java-1-8-0-openjdk-accessibility-fastdebugredhat-upgrade-java-1-8-0-openjdk-accessibility-slowdebugredhat-upgrade-java-1-8-0-openjdk-debuginforedhat-upgrade-java-1-8-0-openjdk-debugsourceredhat-upgrade-java-1-8-0-openjdk-demoredhat-upgrade-java-1-8-0-openjdk-demo-debuginforedhat-upgrade-java-1-8-0-openjdk-demo-fastdebugredhat-upgrade-java-1-8-0-openjdk-demo-fastdebug-debuginforedhat-upgrade-java-1-8-0-openjdk-demo-slowdebugredhat-upgrade-java-1-8-0-openjdk-demo-slowdebug-debuginforedhat-upgrade-java-1-8-0-openjdk-develredhat-upgrade-java-1-8-0-openjdk-devel-debuginforedhat-upgrade-java-1-8-0-openjdk-devel-fastdebugredhat-upgrade-java-1-8-0-openjdk-devel-fastdebug-debuginforedhat-upgrade-java-1-8-0-openjdk-devel-slowdebugredhat-upgrade-java-1-8-0-openjdk-devel-slowdebug-debuginforedhat-upgrade-java-1-8-0-openjdk-fastdebugredhat-upgrade-java-1-8-0-openjdk-fastdebug-debuginforedhat-upgrade-java-1-8-0-openjdk-headlessredhat-upgrade-java-1-8-0-openjdk-headless-debuginforedhat-upgrade-java-1-8-0-openjdk-headless-fastdebugredhat-upgrade-java-1-8-0-openjdk-headless-fastdebug-debuginforedhat-upgrade-java-1-8-0-openjdk-headless-slowdebugredhat-upgrade-java-1-8-0-openjdk-headless-slowdebug-debuginforedhat-upgrade-java-1-8-0-openjdk-javadocredhat-upgrade-java-1-8-0-openjdk-javadoc-zipredhat-upgrade-java-1-8-0-openjdk-slowdebugredhat-upgrade-java-1-8-0-openjdk-slowdebug-debuginforedhat-upgrade-java-1-8-0-openjdk-srcredhat-upgrade-java-1-8-0-openjdk-src-fastdebugredhat-upgrade-java-1-8-0-openjdk-src-slowdebug | Nov 1, 2023 | Oct 17, 2023 | |
| Suse | — | suse-upgrade-java-1_8_0-ibmsuse-upgrade-java-1_8_0-ibm-32bitsuse-upgrade-java-1_8_0-ibm-alsasuse-upgrade-java-1_8_0-ibm-demosuse-upgrade-java-1_8_0-ibm-develsuse-upgrade-java-1_8_0-ibm-devel-32bitsuse-upgrade-java-1_8_0-ibm-pluginsuse-upgrade-java-1_8_0-ibm-srcsuse-upgrade-java-1_8_0-openj9suse-upgrade-java-1_8_0-openj9-accessibilitysuse-upgrade-java-1_8_0-openj9-demosuse-upgrade-java-1_8_0-openj9-develsuse-upgrade-java-1_8_0-openj9-headlesssuse-upgrade-java-1_8_0-openj9-javadocsuse-upgrade-java-1_8_0-openj9-srcsuse-upgrade-java-1_8_0-openjdksuse-upgrade-java-1_8_0-openjdk-accessibilitysuse-upgrade-java-1_8_0-openjdk-demosuse-upgrade-java-1_8_0-openjdk-develsuse-upgrade-java-1_8_0-openjdk-headlesssuse-upgrade-java-1_8_0-openjdk-javadocsuse-upgrade-java-1_8_0-openjdk-src | Nov 22, 2023 | Oct 17, 2023 |
| Ubuntu | ubuntu-upgrade-openjdk-8-jdkubuntu-upgrade-openjdk-8-jdk-headlessubuntu-upgrade-openjdk-8-jreubuntu-upgrade-openjdk-8-jre-headlessubuntu-upgrade-openjdk-8-jre-jamvmubuntu-upgrade-openjdk-8-jre-zero | Nov 30, 2023 | Oct 17, 2023 | |
| Zimbra Collaboration | zimbra-collaboration-upgrade-latest | Jan 20, 2025 | Oct 17, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub