Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1; Oracle GraalVM for JDK: 17.0.13, 21.0.5, 23.0.1; Oracle GraalVM Enterprise Edition: 20.3.16 and 21.3.12. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).
CVSS Details
- CVSS 3.1 Base Score: 4.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Adoptopenjdk | — | Upgrade to the latest version of AdoptOpenJDK | Feb 13, 2025 | Jan 21, 2025 |
| Alma_linux | — | Upgrade java-17-openjdk-jmodsUpgrade java-17-openjdk-static-libs-fastdebugUpgrade java-21-openjdk-jmods-fastdebugUpgrade java-17-openjdk-demo-fastdebugUpgrade java-17-openjdk-fastdebugUpgrade java-17-openjdk-headless-fastdebugUpgrade java-17-openjdk-static-libs-slowdebugUpgrade java-17-openjdk-javadocUpgrade java-21-openjdk-src-slowdebugUpgrade java-17-openjdk-headless-slowdebugUpgrade java-17-openjdk-headlessUpgrade java-21-openjdk-devel-fastdebugUpgrade java-21-openjdk-static-libsUpgrade java-17-openjdkUpgrade java-21-openjdk-srcUpgrade java-17-openjdk-src-fastdebugUpgrade java-21-openjdk-demo-fastdebugUpgrade java-21-openjdk-fastdebugUpgrade java-17-openjdk-devel-fastdebugUpgrade java-21-openjdk-jmods-slowdebugUpgrade java-17-openjdk-srcUpgrade java-21-openjdk-headless-slowdebugUpgrade java-21-openjdk-jmodsUpgrade java-17-openjdk-src-slowdebugUpgrade java-21-openjdk-javadoc-zipUpgrade java-17-openjdk-slowdebugUpgrade java-21-openjdk-headless-fastdebugUpgrade java-21-openjdk-develUpgrade java-21-openjdkUpgrade java-17-openjdk-develUpgrade java-17-openjdk-devel-slowdebugUpgrade java-21-openjdk-demoUpgrade java-21-openjdk-slowdebugUpgrade java-21-openjdk-javadocUpgrade java-17-openjdk-static-libsUpgrade java-17-openjdk-demo-slowdebugUpgrade java-17-openjdk-jmods-fastdebugUpgrade java-21-openjdk-demo-slowdebugUpgrade java-21-openjdk-devel-slowdebugUpgrade java-17-openjdk-javadoc-zipUpgrade java-21-openjdk-src-fastdebugUpgrade java-21-openjdk-static-libs-fastdebugUpgrade java-17-openjdk-demoUpgrade java-21-openjdk-headlessUpgrade java-17-openjdk-jmods-slowdebugUpgrade java-21-openjdk-static-libs-slowdebug | Jan 27, 2025 | Jan 21, 2025 |
| Alpine Linux | — | Upgrade openjdk21Upgrade openjdk17Upgrade openjdk11 | Aug 8, 2025 | Jan 21, 2025 |
| Amazon Linux Ami 2 | — | Upgrade java-11-amazon-correttoUpgrade java-17-amazon-correttoUpgrade java-11-amazon-corretto-javadocUpgrade java-17-amazon-corretto-headlessUpgrade java-17-amazon-corretto-jmodsUpgrade java-17-amazon-corretto-develUpgrade java-11-amazon-corretto-headlessUpgrade java-17-amazon-corretto-javadocUpgrade java-17-amazon-corretto-debugsymbols | Feb 5, 2025 | Jan 21, 2025 |
| Amazon_linux_2023 | — | Upgrade java-21-amazon-corretto-jmodsUpgrade java-11-amazon-correttoUpgrade java-21-amazon-correttoUpgrade java-17-amazon-corretto-javadocUpgrade java-23-amazon-corretto-javadocUpgrade java-17-amazon-corretto-develUpgrade java-23-amazon-corretto-headlessUpgrade java-17-amazon-correttoUpgrade java-23-amazon-corretto-jmodsUpgrade java-23-amazon-correttoUpgrade java-11-amazon-corretto-jmodsUpgrade java-21-amazon-corretto-debugsymbolsUpgrade java-21-amazon-corretto-javadocUpgrade java-11-amazon-corretto-javadocUpgrade java-17-amazon-corretto-headlessUpgrade java-21-amazon-corretto-develUpgrade java-23-amazon-corretto-debugsymbolsUpgrade java-23-amazon-corretto-develUpgrade java-17-amazon-corretto-jmodsUpgrade java-21-amazon-corretto-headlessUpgrade java-11-amazon-corretto-develUpgrade java-11-amazon-corretto-headlessUpgrade java-17-amazon-corretto-debugsymbols | Feb 17, 2025 | Jan 21, 2025 |
| Azul Zulu | — | Upgrade to Azul Zulu JDK 17 installer 17.55.14 (JDK 17.0.13.0.101+1, quarterly CPU) (LTS stream)Upgrade to Azul Zulu JDK 11 installer 11.77.14 (JDK 11.0.25.0.101+1, quarterly CPU) (LTS stream)Upgrade to Azul Zulu JDK 21 installer 21.39.14 (JDK 21.0.5.0.101+1, quarterly CPU) (LTS stream)Apply Azul Zulu JDK 23 installer 23.32.11 (JDK 23.0.2+7, PSU) (short-term support); migrate to JDK 25 (LTS) | Feb 5, 2025 | Jan 21, 2025 |
| Debian | — | Upgrade openjdk-21Upgrade openjdk-17Upgrade openjdk-11 | Feb 3, 2025 | Jan 21, 2025 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Eclipseadoptium | — | Upgrade to the latest version of Eclipse Adoptium | Jun 26, 2026 | Jan 21, 2025 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Jan 22, 2025 | Jan 21, 2025 |
| Oracle_linux | — | Upgrade java-21-openjdk-fastdebugUpgrade java-17-openjdk-fastdebugUpgrade java-21-openjdk-static-libsUpgrade java-17-openjdk-jmods-fastdebugUpgrade java-21-openjdk-demo-slowdebugUpgrade java-21-openjdk-devel-slowdebugUpgrade java-17-openjdk-srcUpgrade java-21-openjdk-jmodsUpgrade java-21-openjdk-headlessUpgrade java-17-openjdk-demo-slowdebugUpgrade java-21-openjdk-demoUpgrade java-17-openjdk-slowdebugUpgrade java-17-openjdk-jmodsUpgrade java-21-openjdk-src-fastdebugUpgrade java-17-openjdk-javadoc-zipUpgrade java-21-openjdk-develUpgrade java-21-openjdk-slowdebugUpgrade java-17-openjdk-devel-slowdebugUpgrade java-17-openjdk-develUpgrade java-21-openjdk-static-libs-fastdebugUpgrade java-17-openjdk-static-libs-fastdebugUpgrade java-17-openjdk-javadocUpgrade java-17-openjdk-demo-fastdebugUpgrade java-17-openjdk-static-libsUpgrade java-21-openjdk-headless-fastdebugUpgrade java-21-openjdk-javadocUpgrade java-17-openjdkUpgrade java-17-openjdk-src-slowdebugUpgrade java-21-openjdk-headless-slowdebugUpgrade java-17-openjdk-jmods-slowdebugUpgrade java-21-openjdk-devel-fastdebugUpgrade java-21-openjdk-demo-fastdebugUpgrade java-21-openjdk-javadoc-zipUpgrade java-17-openjdk-headless-slowdebugUpgrade java-21-openjdk-jmods-slowdebugUpgrade java-21-openjdkUpgrade java-17-openjdk-headless-fastdebugUpgrade java-17-openjdk-demoUpgrade java-21-openjdk-static-libs-slowdebugUpgrade java-21-openjdk-srcUpgrade java-17-openjdk-static-libs-slowdebugUpgrade java-17-openjdk-devel-fastdebugUpgrade java-17-openjdk-src-fastdebugUpgrade java-17-openjdk-headlessUpgrade java-21-openjdk-jmods-fastdebugUpgrade java-21-openjdk-src-slowdebug | Jan 23, 2025 | Jan 21, 2025 |
| Redhat_linux | — | Upgrade java-11-openjdk-src-slowdebugUpgrade java-21-openjdk-headless-slowdebug-debuginfoUpgrade java-1.8.0-ibm-demoUpgrade java-17-openjdk-headless-fastdebugUpgrade java-21-openjdk-headless-fastdebugUpgrade java-11-openjdk-debugUpgrade java-17-openjdk-headless-debuginfoUpgrade java-11-openjdk-jmods-debugUpgrade java-21-openjdk-devel-fastdebug-debuginfoUpgrade java-21-openjdk-javadoc-zipUpgrade java-17-openjdk-static-libs-fastdebugUpgrade java-17-openjdk-devel-fastdebug-debuginfoUpgrade java-17-openjdk-demo-slowdebugUpgrade java-11-openjdk-develUpgrade java-11-openjdk-headless-fastdebug-debuginfoUpgrade java-11-openjdk-headlessUpgrade java-11-openjdk-devel-fastdebug-debuginfoUpgrade java-17-openjdk-headless-fastdebug-debuginfoUpgrade java-11-openjdk-devel-debuginfoUpgrade java-11-openjdk-jmods-slowdebugUpgrade java-11-openjdk-headless-debugUpgrade java-21-openjdk-demo-fastdebugUpgrade java-17-openjdk-static-libsUpgrade java-1.8.0-ibm-webstartUpgrade java-21-openjdk-headless-slowdebugUpgrade java-21-openjdk-srcUpgrade java-21-openjdk-jmodsUpgrade java-11-openjdk-fastdebugUpgrade java-21-openjdk-devel-slowdebug-debuginfoUpgrade java-11-openjdk-src-fastdebugUpgrade java-21-openjdk-slowdebug-debuginfoUpgrade java-17-openjdk-headless-slowdebug-debuginfoUpgrade java-17-openjdk-fastdebug-debuginfoUpgrade java-21-openjdk-slowdebugUpgrade java-17-openjdk-slowdebug-debuginfoUpgrade java-21-openjdk-devel-fastdebugUpgrade java-17-openjdk-src-slowdebugUpgrade java-21-openjdk-static-libsUpgrade java-17-openjdk-devel-slowdebug-debuginfoUpgrade java-11-openjdk-javadoc-zip-debugUpgrade java-21-openjdk-fastdebug-debuginfoUpgrade java-1.8.0-ibm-headlessUpgrade java-1.8.0-ibm-srcUpgrade java-17-openjdk-jmodsUpgrade java-21-openjdk-headless-debuginfoUpgrade java-17-openjdk-slowdebugUpgrade java-17-openjdk-fastdebugUpgrade java-17-openjdk-src-fastdebugUpgrade java-17-openjdk-headlessUpgrade java-11-openjdk-jmods-fastdebugUpgrade java-11-openjdk-jmodsUpgrade java-21-openjdk-fastdebugUpgrade java-21-openjdk-jmods-fastdebugUpgrade java-21-openjdk-src-slowdebugUpgrade java-11-openjdk-headless-debuginfoUpgrade java-11-openjdk-static-libs-fastdebugUpgrade java-21-openjdk-headlessUpgrade java-1.8.0-ibm-pluginUpgrade java-17-openjdk-devel-slowdebugUpgrade java-11-openjdk-srcUpgrade java-17-openjdk-javadoc-zipUpgrade java-21-openjdk-debugsourceUpgrade java-17-openjdk-jmods-slowdebugUpgrade java-17-openjdk-debuginfoUpgrade java-11-openjdk-headless-slowdebug-debuginfoUpgrade java-21-openjdk-devel-debuginfoUpgrade java-17-openjdk-headless-slowdebugUpgrade java-11-openjdk-javadocUpgrade java-11-openjdk-devel-slowdebug-debuginfoUpgrade java-11-openjdk-devel-debugUpgrade java-21-openjdk-demo-slowdebugUpgrade java-17-openjdk-devel-debuginfoUpgrade java-21-openjdk-static-libs-fastdebugUpgrade java-21-openjdk-develUpgrade java-21-openjdk-debuginfoUpgrade java-21-openjdkUpgrade java-11-openjdk-javadoc-zipUpgrade java-11-openjdk-demo-fastdebugUpgrade java-1.8.0-ibmUpgrade java-21-openjdk-devel-slowdebugUpgrade java-1.8.0-ibm-develUpgrade java-17-openjdk-devel-fastdebugUpgrade java-21-openjdk-demoUpgrade java-17-openjdk-jmods-fastdebugUpgrade java-17-openjdkUpgrade java-11-openjdk-slowdebug-debuginfoUpgrade java-11-openjdk-debugsourceUpgrade java-11-openjdk-demo-debugUpgrade java-17-openjdk-static-libs-slowdebugUpgrade java-1.8.0-ibm-jdbcUpgrade java-11-openjdk-src-debugUpgrade java-11-openjdk-headless-slowdebugUpgrade java-11-openjdk-devel-slowdebugUpgrade java-11-openjdk-devel-fastdebugUpgrade java-11-openjdk-slowdebugUpgrade java-21-openjdk-javadocUpgrade java-17-openjdk-develUpgrade java-11-openjdk-static-libs-debugUpgrade java-17-openjdk-srcUpgrade java-17-openjdk-demoUpgrade java-11-openjdk-static-libs-slowdebugUpgrade java-21-openjdk-jmods-slowdebugNo solution existsUpgrade java-21-openjdk-src-fastdebugUpgrade java-11-openjdk-fastdebug-debuginfoUpgrade java-21-openjdk-headless-fastdebug-debuginfoUpgrade java-11-openjdk-static-libsUpgrade java-11-openjdkUpgrade java-17-openjdk-debugsourceUpgrade java-17-openjdk-demo-fastdebugUpgrade java-11-openjdk-headless-fastdebugUpgrade java-17-openjdk-javadocUpgrade java-11-openjdk-demoUpgrade java-11-openjdk-demo-slowdebugUpgrade java-11-openjdk-debuginfoUpgrade java-11-openjdk-javadoc-debugUpgrade java-21-openjdk-static-libs-slowdebug | Jan 23, 2025 | Jan 21, 2025 |
| Rocky_linux | — | Upgrade java-21-openjdk-demoUpgrade java-17-openjdk-develUpgrade java-17-openjdk-demoUpgrade java-17-openjdk-headless-fastdebugUpgrade java-21-openjdk-develUpgrade java-21-openjdk-devel-slowdebugUpgrade java-21-openjdk-headlessUpgrade java-17-openjdk-static-libs-slowdebugUpgrade java-17-openjdk-src-fastdebugUpgrade java-21-openjdk-devel-fastdebugUpgrade java-21-openjdk-devel-fastdebug-debuginfoUpgrade java-17-openjdk-headless-slowdebugUpgrade java-17-openjdk-devel-fastdebugUpgrade java-17-openjdk-devel-debuginfoUpgrade java-17-openjdk-debugsourceUpgrade java-17-openjdk-javadoc-zipUpgrade java-17-openjdk-javadocUpgrade java-21-openjdk-jmods-slowdebugUpgrade java-17-openjdk-headlessUpgrade java-21-openjdk-demo-fastdebugUpgrade java-17-openjdk-src-slowdebugUpgrade java-21-openjdk-src-slowdebugUpgrade java-21-openjdkUpgrade java-21-openjdk-static-libs-slowdebugUpgrade java-21-openjdk-headless-fastdebug-debuginfoUpgrade java-17-openjdkUpgrade java-17-openjdk-jmods-slowdebugUpgrade java-17-openjdk-debuginfoUpgrade java-17-openjdk-jmods-fastdebugUpgrade java-21-openjdk-headless-slowdebugUpgrade java-21-openjdk-static-libs-fastdebugUpgrade java-17-openjdk-demo-fastdebugUpgrade java-17-openjdk-devel-slowdebugUpgrade java-17-openjdk-jmodsUpgrade java-17-openjdk-slowdebug-debuginfoUpgrade java-17-openjdk-headless-fastdebug-debuginfoUpgrade java-21-openjdk-srcUpgrade java-21-openjdk-fastdebugUpgrade java-21-openjdk-javadocUpgrade java-17-openjdk-static-libsUpgrade java-21-openjdk-headless-fastdebugUpgrade java-17-openjdk-devel-fastdebug-debuginfoUpgrade java-17-openjdk-demo-slowdebugUpgrade java-21-openjdk-fastdebug-debuginfoUpgrade java-21-openjdk-slowdebug-debuginfoUpgrade java-21-openjdk-slowdebugUpgrade java-17-openjdk-devel-slowdebug-debuginfoUpgrade java-17-openjdk-slowdebugUpgrade java-17-openjdk-headless-debuginfoUpgrade java-21-openjdk-javadoc-zipUpgrade java-21-openjdk-demo-slowdebugUpgrade java-21-openjdk-jmodsUpgrade java-21-openjdk-debugsourceUpgrade java-17-openjdk-fastdebug-debuginfoUpgrade java-21-openjdk-headless-debuginfoUpgrade java-21-openjdk-debuginfoUpgrade java-17-openjdk-srcUpgrade java-17-openjdk-fastdebugUpgrade java-21-openjdk-src-fastdebugUpgrade java-21-openjdk-headless-slowdebug-debuginfoUpgrade java-21-openjdk-devel-slowdebug-debuginfoUpgrade java-17-openjdk-headless-slowdebug-debuginfoUpgrade java-17-openjdk-static-libs-fastdebugUpgrade java-21-openjdk-jmods-fastdebugUpgrade java-21-openjdk-devel-debuginfoUpgrade java-21-openjdk-static-libs | Feb 14, 2025 | Jan 21, 2025 |
| Suse | — | Upgrade java-21-openjdk-headlessUpgrade java-1_8_0-ibm-32bitUpgrade java-21-openjdk-demoUpgrade java-17-openjdk-develUpgrade java-1_8_0-ibm-demoUpgrade java-1_8_0-ibmUpgrade java-11-openjdk-develUpgrade java-11-openj9-javadocUpgrade java-17-openjdk-srcUpgrade java-11-openj9-headlessUpgrade java-17-openjdk-javadocUpgrade java-17-openjdk-demoUpgrade java-21-openjdkUpgrade java-11-openjdk-javadocUpgrade java-17-openj9-javadocUpgrade java-17-openjdk-jmodsUpgrade java-11-openjdkUpgrade java-11-openjdk-demoUpgrade java-11-openj9-jmodsUpgrade java-11-openjdk-srcUpgrade java-1_8_0-ibm-pluginUpgrade java-11-openj9Upgrade java-1_8_0-ibm-srcUpgrade java-11-openjdk-jmodsUpgrade java-17-openjdkUpgrade java-17-openj9-headlessUpgrade java-17-openj9Upgrade java-1_8_0-ibm-develUpgrade java-11-openj9-demoUpgrade java-21-openjdk-jmodsUpgrade java-11-openj9-srcUpgrade java-11-openjdk-headlessUpgrade java-21-openjdk-srcUpgrade java-1_8_0-ibm-alsaUpgrade java-21-openjdk-develUpgrade java-1_8_0-ibm-devel-32bitUpgrade java-17-openjdk-headlessUpgrade java-17-openj9-jmodsUpgrade java-17-openj9-srcUpgrade java-17-openj9-demoUpgrade java-21-openjdk-javadocUpgrade java-11-openj9-develUpgrade java-17-openj9-devel | Jan 27, 2025 | Jan 21, 2025 |
| Ubuntu | — | Upgrade openjdk-21-jdk-headlessUpgrade openjdk-17-jdk-headlessUpgrade openjdk-21-jdkUpgrade openjdk-11-jdkUpgrade openjdk-21-crac-jre-headlessUpgrade openjdk-23-jreUpgrade openjdk-17-crac-jdk-headlessUpgrade openjdk-17-jreUpgrade openjdk-23-jre-headlessUpgrade openjdk-11-jre-zeroUpgrade openjdk-17-crac-jre-headlessUpgrade openjdk-17-crac-jdkUpgrade openjdk-17-jre-headlessUpgrade openjdk-21-jreUpgrade openjdk-21-jre-zeroUpgrade openjdk-23-jdkUpgrade openjdk-21-crac-jreUpgrade openjdk-23-jdk-headlessUpgrade openjdk-11-jre-headlessUpgrade openjdk-17-jre-zeroUpgrade openjdk-11-jreUpgrade openjdk-21-crac-jdkUpgrade openjdk-21-crac-jre-zeroUpgrade openjdk-11-jdk-headlessUpgrade openjdk-21-jre-headlessUpgrade openjdk-23-jre-zeroUpgrade openjdk-21-crac-jdk-headlessUpgrade openjdk-17-jdkUpgrade openjdk-17-crac-jre-zeroUpgrade openjdk-17-crac-jre | Feb 6, 2025 | Jan 21, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 27, 2025 | Jan 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub