Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade java-17-openjdk-develUpgrade java-17-openjdk-srcUpgrade java-21-openjdk-srcUpgrade java-21-openjdk-static-libsUpgrade java-17-openjdk-demo-fastdebugUpgrade java-17-openjdk-slowdebugUpgrade java-17-openjdk-fastdebugUpgrade java-21-openjdk-demo-fastdebugUpgrade java-21-openjdk-devel-fastdebugUpgrade java-17-openjdk-static-libs-fastdebugUpgrade java-21-openjdk-jmodsUpgrade java-21-openjdk-jmods-fastdebugUpgrade java-17-openjdk-static-libsUpgrade java-21-openjdk-headless-slowdebugUpgrade java-17-openjdk-jmods-fastdebugUpgrade java-21-openjdk-fastdebugUpgrade java-21-openjdk-demo-slowdebugUpgrade java-17-openjdk-static-libs-slowdebugUpgrade java-21-openjdk-static-libs-fastdebugUpgrade java-17-openjdk-javadoc-zipUpgrade java-17-openjdkUpgrade java-17-openjdk-javadocUpgrade java-21-openjdk-javadoc-zipUpgrade java-21-openjdk-develUpgrade java-21-openjdk-static-libs-slowdebugUpgrade java-21-openjdk-src-slowdebugUpgrade java-17-openjdk-jmods-slowdebugUpgrade java-17-openjdk-src-fastdebugUpgrade java-21-openjdk-headless-fastdebugUpgrade java-21-openjdk-headlessUpgrade java-21-openjdk-slowdebugUpgrade java-17-openjdk-devel-fastdebugUpgrade java-21-openjdk-demoUpgrade java-17-openjdk-headlessUpgrade java-17-openjdk-demo-slowdebugUpgrade java-17-openjdk-headless-slowdebugUpgrade java-17-openjdk-headless-fastdebugUpgrade java-17-openjdk-src-slowdebugUpgrade java-21-openjdk-jmods-slowdebugUpgrade java-21-openjdk-devel-slowdebugUpgrade java-17-openjdk-jmodsUpgrade java-17-openjdk-demoUpgrade java-21-openjdk-javadocUpgrade java-21-openjdkUpgrade java-17-openjdk-devel-slowdebugUpgrade java-21-openjdk-src-fastdebug | Jul 26, 2026 | Jul 22, 2026 |
| Alpine Linux | — | Upgrade openjdk17Upgrade openjdk21Upgrade openjdk11Upgrade openjdk25 | Aug 4, 2026 | Jul 21, 2026 |
| Amazon Linux Ami 2 | — | Upgrade java-11-amazon-corretto-debugsymbolsUpgrade java-17-amazon-corretto-jmodsUpgrade java-11-amazon-corretto-headlessUpgrade java-11-amazon-corretto-javadocUpgrade java-17-amazon-corretto-headlessUpgrade java-17-amazon-corretto-javadocUpgrade java-17-amazon-corretto-develUpgrade java-11-amazon-correttoUpgrade java-17-amazon-corretto-debugsymbolsUpgrade java-17-amazon-corretto | Aug 5, 2026 | Aug 5, 2026 |
| Amazon_linux_2023 | — | Upgrade java-21-amazon-corretto-javadocUpgrade java-11-amazon-correttoUpgrade java-21-amazon-corretto-develUpgrade java-11-amazon-corretto-debugsymbolsUpgrade java-11-amazon-corretto-develUpgrade java-21-amazon-corretto-debugsymbolsUpgrade java-17-amazon-corretto-develUpgrade java-17-amazon-corretto-javadocUpgrade java-25-amazon-corretto-develUpgrade java-26-amazon-corretto-debugsymbolsUpgrade java-26-amazon-corretto-headlessUpgrade java-21-amazon-correttoUpgrade java-17-amazon-corretto-debugsymbolsUpgrade java-26-amazon-corretto-jmodsUpgrade java-25-amazon-corretto-headlessUpgrade java-25-amazon-corretto-jmodsUpgrade java-25-amazon-correttoUpgrade java-21-amazon-corretto-headlessUpgrade java-26-amazon-corretto-develUpgrade java-26-amazon-correttoUpgrade java-25-amazon-corretto-javadocUpgrade java-26-amazon-corretto-javadocUpgrade java-11-amazon-corretto-javadocUpgrade java-17-amazon-corretto-headlessUpgrade java-21-amazon-corretto-jmodsUpgrade java-11-amazon-corretto-jmodsUpgrade java-11-amazon-corretto-headlessUpgrade java-25-amazon-corretto-debugsymbolsUpgrade java-17-amazon-correttoUpgrade java-17-amazon-corretto-jmods | Aug 10, 2026 | Jul 21, 2026 |
| Azul Zulu | — | Upgrade to Azul Zulu JDK 25 installer 25.35.12 (JDK 25.0.3.0.101+1, quarterly CPU) (LTS stream)Apply Azul Zulu JDK 26 installer 26.32.13 (JDK 26.0.2+10, PSU) (short-term support); migrate to JDK 25 (LTS)Upgrade to Azul Zulu JDK 11 installer 11.89.14 (JDK 11.0.31.0.101+1, quarterly CPU) (LTS stream)Upgrade to Azul Zulu JDK 21 installer 21.51.14 (JDK 21.0.11.0.101+1, quarterly CPU) (LTS stream)Upgrade to Azul Zulu JDK 17 installer 17.67.14 (JDK 17.0.19.0.101+1, quarterly CPU) (LTS stream) | Jul 30, 2026 | Jul 21, 2026 |
| Debian | — | Upgrade openjdk-11Upgrade openjdk-25Upgrade openjdk-17Upgrade openjdk-21 | Jul 29, 2026 | Jul 29, 2026 |
| Eclipseadoptium | — | Upgrade to the latest version of Eclipse Adoptium | Jul 24, 2026 | Jul 21, 2026 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Jul 23, 2026 | Jul 21, 2026 |
| Redhat_linux | — | Upgrade java-25-openjdk-static-libs-fastdebugUpgrade java-17-openjdk-javadoc-zipUpgrade java-11-openjdk-slowdebug-debuginfoUpgrade java-21-openjdkUpgrade java-17-openjdk-slowdebug-debuginfoUpgrade java-25-openjdk-jmods-slowdebugUpgrade java-21-openjdk-devel-fastdebugUpgrade java-25-openjdk-crypto-adapter-debuginfoUpgrade java-25-openjdk-fastdebug-debuginfoUpgrade java-11-openjdk-headless-fastdebug-debuginfoUpgrade java-11-openjdk-javadocUpgrade java-11-openjdkUpgrade java-21-openjdk-demoUpgrade java-11-openjdk-headless-slowdebug-debuginfoUpgrade java-11-openjdk-jmods-fastdebugUpgrade java-11-openjdk-javadoc-zipUpgrade java-11-openjdk-static-libsUpgrade java-11-openjdk-headless-fastdebugUpgrade java-11-openjdk-src-fastdebugUpgrade java-21-openjdk-static-libs-fastdebugUpgrade java-25-openjdk-debugsourceUpgrade java-11-openjdk-debuginfoUpgrade java-17-openjdkUpgrade java-21-openjdk-headless-slowdebugUpgrade java-25-openjdk-crypto-adapter-fastdebug-debuginfoUpgrade java-17-openjdk-jmods-slowdebugUpgrade java-21-openjdk-headless-fastdebug-debuginfoUpgrade java-11-openjdk-demo-debugUpgrade java-25-openjdk-slowdebugUpgrade java-11-openjdk-jmodsUpgrade java-25-openjdk-src-slowdebugUpgrade java-17-openjdk-static-libsUpgrade java-11-openjdk-static-libs-slowdebugUpgrade java-25-openjdk-static-libsUpgrade java-25-openjdk-static-libs-slowdebugUpgrade java-11-openjdk-develUpgrade java-11-openjdk-src-debugUpgrade java-21-ibm-semeru-certified-jdk-jmodsUpgrade java-25-openjdk-devel-slowdebug-debuginfoUpgrade java-21-openjdk-headlessUpgrade java-25-openjdk-demo-fastdebugUpgrade java-21-openjdk-static-libs-slowdebugUpgrade java-17-openjdk-headless-fastdebug-debuginfoUpgrade java-25-openjdk-crypto-adapter-fastdebugUpgrade java-25-openjdk-crypto-adapterUpgrade java-17-openjdk-src-slowdebugUpgrade java-17-openjdk-develUpgrade java-11-openjdk-headless-slowdebugUpgrade java-17-openjdk-debuginfoUpgrade java-21-openjdk-debuginfoUpgrade java-21-openjdk-slowdebug-debuginfoUpgrade java-21-openjdk-src-slowdebugUpgrade java-21-openjdk-srcUpgrade java-25-openjdk-devel-slowdebugUpgrade java-25-openjdk-headless-fastdebugUpgrade java-25-openjdk-develUpgrade java-17-openjdk-debugsourceUpgrade java-17-openjdk-demoUpgrade java-17-openjdk-javadocUpgrade java-17-openjdk-src-fastdebugUpgrade java-17-openjdk-demo-fastdebugUpgrade java-21-openjdk-devel-slowdebugUpgrade java-11-openjdk-debugsourceUpgrade java-11-openjdk-jmods-debugUpgrade java-17-openjdk-static-libs-slowdebugUpgrade java-21-openjdk-jmods-fastdebugUpgrade java-17-openjdk-devel-debuginfoUpgrade java-11-openjdk-demoUpgrade java-17-openjdk-devel-fastdebug-debuginfoUpgrade java-17-openjdk-srcUpgrade java-11-openjdk-static-libs-debugUpgrade java-21-openjdk-develUpgrade java-17-openjdk-headless-fastdebugUpgrade java-11-openjdk-slowdebugUpgrade java-11-openjdk-fastdebug-debuginfoUpgrade java-17-openjdk-headless-slowdebugUpgrade java-21-openjdk-demo-slowdebugUpgrade java-25-openjdk-demo-slowdebugUpgrade java-17-openjdk-headless-debuginfoUpgrade java-11-openjdk-demo-fastdebugUpgrade java-25-openjdk-jmodsUpgrade java-11-openjdk-devel-fastdebug-debuginfoUpgrade java-25-openjdk-slowdebug-debuginfoUpgrade java-11-openjdk-srcUpgrade java-25-openjdk-devel-fastdebugUpgrade java-21-openjdk-fastdebugUpgrade java-21-openjdk-slowdebugUpgrade java-25-openjdk-headless-debuginfoUpgrade java-21-ibm-semeru-certified-jdk-develUpgrade java-17-openjdk-devel-fastdebugUpgrade java-11-openjdk-headlessUpgrade java-17-openjdk-fastdebugUpgrade java-25-openjdk-headless-slowdebug-debuginfoUpgrade java-21-openjdk-demo-fastdebugUpgrade java-25-openjdk-javadoc-zipUpgrade java-11-openjdk-devel-debuginfoUpgrade java-25-openjdk-fastdebugUpgrade java-25-openjdk-srcUpgrade java-25-openjdk-src-fastdebugUpgrade java-25-openjdk-javadocUpgrade java-25-openjdk-crypto-adapter-slowdebug-debuginfoUpgrade java-25-openjdk-demoUpgrade java-21-openjdk-devel-fastdebug-debuginfoUpgrade java-21-openjdk-headless-debuginfoUpgrade java-21-openjdk-devel-slowdebug-debuginfoUpgrade java-11-openjdk-devel-slowdebug-debuginfoUpgrade java-11-openjdk-javadoc-zip-debugUpgrade java-11-openjdk-devel-fastdebugUpgrade java-11-openjdk-debugUpgrade java-25-openjdk-devel-debuginfoUpgrade java-21-openjdk-fastdebug-debuginfoUpgrade java-21-openjdk-devel-debuginfoUpgrade java-21-openjdk-debugsourceUpgrade java-21-ibm-semeru-certified-jdk-srcUpgrade java-17-openjdk-static-libs-fastdebugUpgrade java-17-openjdk-slowdebugUpgrade java-17-openjdk-fastdebug-debuginfoUpgrade java-21-openjdk-src-fastdebugUpgrade java-21-ibm-semeru-certified-jdk-headlessUpgrade java-21-openjdk-headless-slowdebug-debuginfoUpgrade java-21-openjdk-static-libsUpgrade java-17-openjdk-jmods-fastdebugUpgrade java-17-openjdk-devel-slowdebugUpgrade java-11-openjdk-src-slowdebugUpgrade java-11-openjdk-jmods-slowdebugUpgrade java-11-openjdk-devel-debugUpgrade java-11-openjdk-demo-slowdebugUpgrade java-25-openjdk-jmods-fastdebugUpgrade java-25-openjdk-devel-fastdebug-debuginfoUpgrade java-21-openjdk-jmods-slowdebugUpgrade java-21-openjdk-javadocUpgrade java-21-openjdk-headless-fastdebugUpgrade java-11-openjdk-devel-slowdebugUpgrade java-17-openjdk-jmodsUpgrade java-17-openjdk-headless-slowdebug-debuginfoUpgrade java-25-openjdk-headless-slowdebugNo solution existsUpgrade java-21-ibm-semeru-certified-jdkUpgrade java-11-openjdk-headless-debugUpgrade java-11-openjdk-javadoc-debugUpgrade java-25-openjdk-headlessUpgrade java-25-openjdk-headless-fastdebug-debuginfoUpgrade java-17-openjdk-devel-slowdebug-debuginfoUpgrade java-25-openjdk-debuginfoUpgrade java-17-openjdk-headlessUpgrade java-11-openjdk-fastdebugUpgrade java-21-openjdk-javadoc-zipUpgrade java-21-openjdk-jmodsUpgrade java-11-openjdk-static-libs-fastdebugUpgrade java-25-openjdk-crypto-adapter-slowdebugUpgrade java-11-openjdk-headless-debuginfoUpgrade java-17-openjdk-demo-slowdebugUpgrade java-25-openjdk | Jul 23, 2026 | Jul 21, 2026 |
| Rocky_linux | — | Upgrade java-17-openjdk-fastdebugUpgrade java-25-openjdk-srcUpgrade java-25-openjdkUpgrade java-17-openjdk-fastdebug-debuginfoUpgrade java-17-openjdkUpgrade java-25-openjdk-demo-slowdebugUpgrade java-17-openjdk-debugsourceUpgrade java-17-openjdk-src-fastdebugUpgrade java-17-openjdk-src-slowdebugUpgrade java-25-openjdk-static-libsUpgrade java-25-openjdk-javadocUpgrade java-17-openjdk-slowdebug-debuginfoUpgrade java-25-openjdk-static-libs-slowdebugUpgrade java-25-openjdk-crypto-adapter-fastdebug-debuginfoUpgrade java-25-openjdk-crypto-adapter-debuginfoUpgrade java-17-openjdk-demoUpgrade java-25-openjdk-javadoc-zipUpgrade java-17-openjdk-headless-slowdebugUpgrade java-25-openjdk-headlessUpgrade java-25-openjdk-src-slowdebugUpgrade java-17-openjdk-headless-fastdebug-debuginfoUpgrade java-17-openjdk-headlessUpgrade java-25-openjdk-devel-slowdebug-debuginfoUpgrade java-17-openjdk-static-libs-slowdebugUpgrade java-17-openjdk-headless-fastdebugUpgrade java-17-openjdk-debuginfoUpgrade java-25-openjdk-crypto-adapterUpgrade java-25-openjdk-demo-fastdebugUpgrade java-25-openjdk-headless-fastdebug-debuginfoUpgrade java-25-openjdk-jmods-fastdebugUpgrade java-25-openjdk-jmodsUpgrade java-17-openjdk-devel-fastdebugUpgrade java-25-openjdk-slowdebugUpgrade java-25-openjdk-devel-fastdebugUpgrade java-25-openjdk-headless-slowdebugUpgrade java-17-openjdk-javadoc-zipUpgrade java-17-openjdk-javadocUpgrade java-25-openjdk-crypto-adapter-fastdebugUpgrade java-25-openjdk-demoUpgrade java-25-openjdk-headless-slowdebug-debuginfoUpgrade java-25-openjdk-static-libs-fastdebugUpgrade java-25-openjdk-fastdebugUpgrade java-17-openjdk-srcUpgrade java-25-openjdk-slowdebug-debuginfoUpgrade java-25-openjdk-devel-fastdebug-debuginfoUpgrade java-25-openjdk-debuginfoUpgrade java-17-openjdk-devel-slowdebug-debuginfoUpgrade java-17-openjdk-slowdebugUpgrade java-17-openjdk-jmods-fastdebugUpgrade java-17-openjdk-devel-debuginfoUpgrade java-25-openjdk-devel-debuginfoUpgrade java-17-openjdk-jmodsUpgrade java-17-openjdk-develUpgrade java-17-openjdk-static-libsUpgrade java-25-openjdk-headless-debuginfoUpgrade java-25-openjdk-crypto-adapter-slowdebug-debuginfoUpgrade java-17-openjdk-demo-slowdebugUpgrade java-25-openjdk-src-fastdebugUpgrade java-25-openjdk-crypto-adapter-slowdebugUpgrade java-25-openjdk-jmods-slowdebugUpgrade java-17-openjdk-static-libs-fastdebugUpgrade java-17-openjdk-devel-fastdebug-debuginfoUpgrade java-25-openjdk-devel-slowdebugUpgrade java-17-openjdk-headless-slowdebug-debuginfoUpgrade java-17-openjdk-jmods-slowdebugUpgrade java-17-openjdk-demo-fastdebugUpgrade java-25-openjdk-fastdebug-debuginfoUpgrade java-25-openjdk-headless-fastdebugUpgrade java-17-openjdk-devel-slowdebugUpgrade java-25-openjdk-debugsourceUpgrade java-25-openjdk-develUpgrade java-17-openjdk-headless-debuginfo | Jul 27, 2026 | Jul 26, 2026 |
| Ubuntu | — | Upgrade openjdk-21-sourceUpgrade openjdk-21-demoUpgrade openjdk-26-jre-zeroUpgrade openjdk-17-crac-jdkUpgrade openjdk-17-crac-jre-zeroUpgrade openjdk-26-jdkUpgrade openjdk-25-crac-jreUpgrade openjdk-21-docUpgrade openjdk-21-jdk-headlessUpgrade openjdk-25-jdkUpgrade openjdk-11-jre-zeroUpgrade openjdk-25-jdk-headlessUpgrade openjdk-21-crac-jdkUpgrade openjdk-21-jre-zeroUpgrade openjdk-25-jre-headlessUpgrade openjdk-11-jdk-headlessUpgrade openjdk-21-crac-jre-headlessUpgrade openjdk-26-jreUpgrade openjdk-21-crac-jdk-headlessUpgrade openjdk-25-crac-jdk-headlessUpgrade openjdk-17-sourceUpgrade openjdk-17-jdk-headlessUpgrade openjdk-17-jdkUpgrade openjdk-26-jdk-headlessUpgrade openjdk-17-crac-jdk-headlessUpgrade openjdk-25-crac-jdkUpgrade openjdk-21-jdkUpgrade openjdk-11-jreUpgrade openjdk-17-jreUpgrade openjdk-17-jre-zeroUpgrade openjdk-17-jre-headlessUpgrade openjdk-21-crac-jreUpgrade openjdk-26-jre-headlessUpgrade openjdk-21-crac-jre-zeroUpgrade openjdk-25-crac-jre-zeroUpgrade openjdk-25-crac-jre-headlessUpgrade openjdk-17-demoUpgrade openjdk-25-jre-zeroUpgrade openjdk-21-jre-headlessUpgrade openjdk-17-crac-jre-headlessUpgrade openjdk-11-jre-headlessUpgrade openjdk-21-jreUpgrade openjdk-25-jreUpgrade openjdk-17-crac-jreUpgrade openjdk-11-jdkUpgrade openjdk-21-testsupport | Aug 26, 2026 | Aug 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub