Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade java-21-openjdkUpgrade java-25-openjdk-demo-fastdebugUpgrade java-21-openjdk-slowdebugUpgrade java-17-openjdk-devel-fastdebugUpgrade java-25-openjdk-static-libsUpgrade java-25-openjdk-src-slowdebugUpgrade java-17-openjdk-headless-fastdebugUpgrade java-21-openjdk-src-fastdebugUpgrade java-25-openjdk-javadoc-zipUpgrade java-17-openjdk-demo-slowdebugUpgrade java-17-openjdk-headless-slowdebugUpgrade java-25-openjdkUpgrade java-25-openjdk-srcUpgrade java-25-openjdk-javadocUpgrade java-21-openjdk-src-slowdebugUpgrade java-21-openjdk-devel-slowdebugUpgrade java-17-openjdk-jmodsUpgrade java-21-openjdk-javadocUpgrade java-17-openjdk-src-fastdebugUpgrade java-17-openjdk-devel-slowdebugUpgrade java-17-openjdk-src-slowdebugUpgrade java-17-openjdk-jmods-slowdebugUpgrade java-17-openjdk-demoUpgrade java-25-openjdk-demo-slowdebugUpgrade java-17-openjdk-headlessUpgrade java-25-openjdk-headlessUpgrade java-21-openjdk-demoUpgrade java-25-openjdk-headless-fastdebugUpgrade java-25-openjdk-static-libs-slowdebugUpgrade java-21-openjdk-jmods-slowdebugUpgrade java-21-openjdk-headlessUpgrade java-21-openjdk-headless-fastdebugUpgrade java-17-openjdk-demo-fastdebugUpgrade java-17-openjdk-fastdebugUpgrade java-25-openjdk-jmods-fastdebugUpgrade java-17-openjdk-develUpgrade java-25-openjdk-crypto-adapter-fastdebugUpgrade java-17-openjdk-srcUpgrade java-25-openjdk-fastdebugUpgrade java-25-openjdk-develUpgrade java-21-openjdk-static-libsUpgrade java-21-openjdk-headless-slowdebugUpgrade java-21-openjdk-javadoc-zipUpgrade java-25-openjdk-jmods-slowdebugUpgrade java-17-openjdk-jmods-fastdebugUpgrade java-25-openjdk-static-libs-fastdebugUpgrade java-21-openjdk-fastdebugUpgrade java-25-openjdk-demoUpgrade java-21-openjdk-jmodsUpgrade java-17-openjdk-static-libs-fastdebugUpgrade java-25-openjdk-devel-fastdebugUpgrade java-25-openjdk-headless-slowdebugUpgrade java-25-openjdk-crypto-adapter-slowdebugUpgrade java-25-openjdk-crypto-adapterUpgrade java-17-openjdk-javadocUpgrade java-21-openjdk-develUpgrade java-21-openjdk-jmods-fastdebugUpgrade java-21-openjdk-static-libs-slowdebugUpgrade java-17-openjdk-static-libsUpgrade java-21-openjdk-devel-fastdebugUpgrade java-17-openjdk-javadoc-zipUpgrade java-25-openjdk-jmodsUpgrade java-17-openjdkUpgrade java-21-openjdk-srcUpgrade java-17-openjdk-slowdebugUpgrade java-25-openjdk-slowdebugUpgrade java-21-openjdk-demo-slowdebugUpgrade java-21-openjdk-demo-fastdebugUpgrade java-25-openjdk-devel-slowdebugUpgrade java-25-openjdk-src-fastdebugUpgrade java-21-openjdk-static-libs-fastdebugUpgrade java-17-openjdk-static-libs-slowdebug | Jul 26, 2026 | Jul 22, 2026 |
| Alpine Linux | — | Upgrade openjdk11Upgrade openjdk25Upgrade openjdk21Upgrade openjdk17 | Aug 4, 2026 | Jul 21, 2026 |
| Amazon Linux Ami 2 | — | Upgrade java-17-amazon-corretto-headlessUpgrade java-17-amazon-corretto-jmodsUpgrade java-11-amazon-corretto-debugsymbolsUpgrade java-11-amazon-corretto-javadocUpgrade java-11-amazon-corretto-headlessUpgrade java-17-amazon-correttoUpgrade java-17-amazon-corretto-develUpgrade java-11-amazon-correttoUpgrade java-17-amazon-corretto-debugsymbolsUpgrade java-17-amazon-corretto-javadoc | Aug 5, 2026 | Aug 5, 2026 |
| Amazon_linux_2023 | — | Upgrade java-17-amazon-correttoUpgrade java-25-amazon-corretto-debugsymbolsUpgrade java-11-amazon-corretto-headlessUpgrade java-26-amazon-corretto-javadocUpgrade java-17-amazon-corretto-jmodsUpgrade java-26-amazon-correttoUpgrade java-26-amazon-corretto-develUpgrade java-11-amazon-corretto-javadocUpgrade java-21-amazon-corretto-headlessUpgrade java-17-amazon-corretto-headlessUpgrade java-21-amazon-corretto-jmodsUpgrade java-11-amazon-corretto-jmodsUpgrade java-25-amazon-corretto-javadocUpgrade java-17-amazon-corretto-debugsymbolsUpgrade java-26-amazon-corretto-jmodsUpgrade java-26-amazon-corretto-debugsymbolsUpgrade java-25-amazon-correttoUpgrade java-17-amazon-corretto-javadocUpgrade java-25-amazon-corretto-develUpgrade java-26-amazon-corretto-headlessUpgrade java-25-amazon-corretto-headlessUpgrade java-25-amazon-corretto-jmodsUpgrade java-21-amazon-correttoUpgrade java-11-amazon-corretto-debugsymbolsUpgrade java-21-amazon-corretto-javadocUpgrade java-21-amazon-corretto-develUpgrade java-11-amazon-correttoUpgrade java-11-amazon-corretto-develUpgrade java-17-amazon-corretto-develUpgrade java-21-amazon-corretto-debugsymbols | Aug 10, 2026 | Jul 21, 2026 |
| Azul Zulu | — | Apply Azul Zulu JDK 26 installer 26.32.13 (JDK 26.0.2+10, PSU) (short-term support); migrate to JDK 25 (LTS)Upgrade to Azul Zulu JDK 25 installer 25.35.12 (JDK 25.0.3.0.101+1, quarterly CPU) (LTS stream)Upgrade to Azul Zulu JDK 21 installer 21.51.14 (JDK 21.0.11.0.101+1, quarterly CPU) (LTS stream)Upgrade to Azul Zulu JDK 11 installer 11.89.14 (JDK 11.0.31.0.101+1, quarterly CPU) (LTS stream)Upgrade to Azul Zulu JDK 17 installer 17.67.14 (JDK 17.0.19.0.101+1, quarterly CPU) (LTS stream) | Jul 30, 2026 | Jul 21, 2026 |
| Debian | — | Upgrade openjdk-11Upgrade openjdk-25Upgrade openjdk-17Upgrade openjdk-21 | Jul 29, 2026 | Jul 29, 2026 |
| Eclipseadoptium | — | Upgrade to the latest version of Eclipse Adoptium | Jul 24, 2026 | Jul 21, 2026 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Jul 23, 2026 | Jul 21, 2026 |
| Redhat_linux | — | Upgrade java-25-openjdk-src-slowdebugUpgrade java-25-openjdk-jmods-slowdebugUpgrade java-11-openjdk-headless-slowdebug-debuginfoUpgrade java-17-openjdk-devel-debuginfoUpgrade java-25-openjdk-fastdebug-debuginfoUpgrade java-21-openjdk-jmods-fastdebugUpgrade java-11-openjdkUpgrade java-11-openjdk-demo-debugUpgrade java-25-openjdk-crypto-adapter-fastdebug-debuginfoUpgrade java-11-openjdk-headless-fastdebug-debuginfoUpgrade java-25-openjdk-crypto-adapterUpgrade java-17-openjdk-jmods-slowdebugUpgrade java-21-openjdk-headless-slowdebugUpgrade java-17-openjdk-slowdebug-debuginfoUpgrade java-21-openjdkUpgrade java-11-openjdk-demoUpgrade java-11-openjdk-jmods-debugUpgrade java-21-openjdk-develUpgrade java-25-openjdk-slowdebugUpgrade java-21-openjdk-demoUpgrade java-25-openjdk-static-libsUpgrade java-11-openjdk-debuginfoUpgrade java-17-openjdk-develUpgrade java-17-openjdk-srcUpgrade java-17-openjdk-javadocUpgrade java-17-openjdk-src-slowdebugUpgrade java-11-openjdk-headless-fastdebugUpgrade java-21-openjdk-headlessUpgrade java-25-openjdk-devel-slowdebug-debuginfoUpgrade java-11-openjdk-src-fastdebugUpgrade java-17-openjdk-debuginfoUpgrade java-17-openjdk-static-libsUpgrade java-17-openjdk-headless-fastdebug-debuginfoUpgrade java-21-ibm-semeru-certified-jdk-jmodsUpgrade java-17-openjdk-headless-fastdebugUpgrade java-17-openjdk-static-libs-slowdebugUpgrade java-11-openjdk-static-libsUpgrade java-17-openjdkUpgrade java-17-openjdk-demo-fastdebugUpgrade java-21-openjdk-srcUpgrade java-25-openjdk-crypto-adapter-debuginfoUpgrade java-11-openjdk-javadocUpgrade java-25-openjdk-debugsourceUpgrade java-11-openjdk-jmods-fastdebugUpgrade java-11-openjdk-javadoc-zipUpgrade java-17-openjdk-javadoc-zipUpgrade java-25-openjdk-demo-fastdebugUpgrade java-25-openjdk-static-libs-fastdebugUpgrade java-25-openjdk-develUpgrade java-25-openjdk-devel-slowdebugUpgrade java-21-openjdk-slowdebug-debuginfoUpgrade java-25-openjdk-headless-fastdebugUpgrade java-21-openjdk-debuginfoUpgrade java-21-openjdk-headless-fastdebug-debuginfoUpgrade java-21-openjdk-src-slowdebugUpgrade java-11-openjdk-headless-slowdebugUpgrade java-11-openjdk-jmodsUpgrade java-11-openjdk-static-libs-debugUpgrade java-11-openjdk-develUpgrade java-17-openjdk-debugsourceUpgrade java-21-openjdk-static-libs-slowdebugUpgrade java-25-openjdk-crypto-adapter-fastdebugUpgrade java-17-openjdk-src-fastdebugUpgrade java-11-openjdk-debugsourceUpgrade java-11-openjdk-static-libs-slowdebugUpgrade java-17-openjdk-demoUpgrade java-11-openjdk-src-debugUpgrade java-17-openjdk-devel-fastdebug-debuginfoUpgrade java-25-openjdk-static-libs-slowdebugUpgrade java-21-openjdk-devel-slowdebugUpgrade java-21-openjdk-static-libs-fastdebugUpgrade java-11-openjdk-slowdebug-debuginfoUpgrade java-21-openjdk-devel-fastdebugUpgrade java-11-openjdk-javadoc-zip-debugUpgrade java-21-ibm-semeru-certified-jdk-develUpgrade java-11-openjdk-javadoc-debugUpgrade java-11-openjdk-debugUpgrade java-21-openjdk-devel-fastdebug-debuginfoUpgrade java-21-ibm-semeru-certified-jdk-srcUpgrade java-17-openjdk-fastdebug-debuginfoUpgrade java-21-openjdk-fastdebug-debuginfoUpgrade java-17-openjdk-headless-slowdebug-debuginfoUpgrade java-21-openjdk-devel-debuginfoUpgrade java-17-openjdk-static-libs-fastdebugUpgrade java-21-openjdk-jmods-slowdebugUpgrade java-11-openjdk-devel-debugUpgrade java-21-openjdk-debugsourceUpgrade java-11-openjdk-fastdebug-debuginfoUpgrade java-17-openjdk-fastdebugUpgrade java-25-openjdk-javadoc-zipUpgrade java-17-openjdk-devel-slowdebug-debuginfoUpgrade java-25-openjdk-headless-slowdebug-debuginfoUpgrade java-25-openjdk-debuginfoUpgrade java-25-openjdkUpgrade java-17-openjdk-headlessUpgrade java-11-openjdk-devel-slowdebug-debuginfoUpgrade java-17-openjdk-headless-debuginfoUpgrade java-21-openjdk-fastdebugUpgrade java-25-openjdk-headless-debuginfoUpgrade java-25-openjdk-srcUpgrade java-11-openjdk-fastdebugUpgrade java-25-openjdk-src-fastdebugUpgrade java-11-openjdk-devel-fastdebug-debuginfoUpgrade java-17-openjdk-headless-slowdebugUpgrade java-21-openjdk-demo-slowdebugUpgrade java-11-openjdk-headless-debuginfoUpgrade java-11-openjdk-static-libs-fastdebugUpgrade java-11-openjdk-headless-debugUpgrade java-25-openjdk-slowdebug-debuginfoUpgrade java-25-openjdk-jmodsUpgrade java-25-openjdk-demo-slowdebugUpgrade java-11-openjdk-demo-fastdebugUpgrade java-25-openjdk-headless-fastdebug-debuginfoUpgrade java-25-openjdk-devel-debuginfoUpgrade java-25-openjdk-devel-fastdebugUpgrade java-21-ibm-semeru-certified-jdkUpgrade java-11-openjdk-slowdebugUpgrade java-21-openjdk-headless-fastdebugUpgrade java-21-openjdk-devel-slowdebug-debuginfoUpgrade java-11-openjdk-devel-fastdebugUpgrade java-25-openjdk-javadocUpgrade java-21-openjdk-slowdebugUpgrade java-25-openjdk-headlessUpgrade java-21-openjdk-javadoc-zipUpgrade java-17-openjdk-demo-slowdebugUpgrade java-25-openjdk-crypto-adapter-slowdebugUpgrade java-21-openjdk-jmodsUpgrade java-11-openjdk-srcUpgrade java-11-openjdk-devel-slowdebugNo solution existsUpgrade java-21-openjdk-static-libsUpgrade java-21-openjdk-headless-slowdebug-debuginfoUpgrade java-25-openjdk-headless-slowdebugUpgrade java-17-openjdk-slowdebugUpgrade java-25-openjdk-jmods-fastdebugUpgrade java-17-openjdk-jmods-fastdebugUpgrade java-21-ibm-semeru-certified-jdk-headlessUpgrade java-17-openjdk-jmodsUpgrade java-17-openjdk-devel-slowdebugUpgrade java-11-openjdk-src-slowdebugUpgrade java-11-openjdk-jmods-slowdebugUpgrade java-11-openjdk-demo-slowdebugUpgrade java-25-openjdk-devel-fastdebug-debuginfoUpgrade java-21-openjdk-src-fastdebugUpgrade java-21-openjdk-javadocUpgrade java-11-openjdk-devel-debuginfoUpgrade java-21-openjdk-demo-fastdebugUpgrade java-17-openjdk-devel-fastdebugUpgrade java-11-openjdk-headlessUpgrade java-25-openjdk-fastdebugUpgrade java-25-openjdk-demoUpgrade java-25-openjdk-crypto-adapter-slowdebug-debuginfoUpgrade java-21-openjdk-headless-debuginfo | Jul 23, 2026 | Jul 21, 2026 |
| Rocky_linux | — | Upgrade java-17-openjdk-devel-fastdebug-debuginfoUpgrade java-17-openjdk-devel-slowdebug-debuginfoUpgrade java-25-openjdk-slowdebug-debuginfoUpgrade java-17-openjdk-javadocUpgrade java-25-openjdk-crypto-adapter-fastdebugUpgrade java-25-openjdk-debuginfoUpgrade java-25-openjdk-devel-fastdebug-debuginfoUpgrade java-17-openjdk-srcUpgrade java-17-openjdk-headless-slowdebug-debuginfoUpgrade java-17-openjdk-jmods-slowdebugUpgrade java-25-openjdk-devel-slowdebugUpgrade java-25-openjdk-fastdebug-debuginfoUpgrade java-25-openjdk-jmods-slowdebugUpgrade java-17-openjdk-demo-fastdebugUpgrade java-25-openjdk-devel-debuginfoUpgrade java-25-openjdk-fastdebugUpgrade java-17-openjdk-jmods-fastdebugUpgrade java-25-openjdk-demoUpgrade java-17-openjdk-develUpgrade java-17-openjdk-jmodsUpgrade java-17-openjdk-devel-debuginfoUpgrade java-17-openjdk-slowdebugUpgrade java-17-openjdk-javadoc-zipUpgrade java-25-openjdk-src-fastdebugUpgrade java-25-openjdk-crypto-adapter-slowdebug-debuginfoUpgrade java-25-openjdk-headless-debuginfoUpgrade java-25-openjdk-headless-slowdebug-debuginfoUpgrade java-17-openjdk-static-libs-fastdebugUpgrade java-25-openjdk-debugsourceUpgrade java-17-openjdk-demo-slowdebugUpgrade java-25-openjdk-static-libs-fastdebugUpgrade java-25-openjdk-headless-fastdebugUpgrade java-17-openjdk-headless-debuginfoUpgrade java-17-openjdk-static-libsUpgrade java-17-openjdk-devel-slowdebugUpgrade java-25-openjdk-crypto-adapter-slowdebugUpgrade java-25-openjdk-develUpgrade java-17-openjdk-headless-fastdebug-debuginfoUpgrade java-25-openjdk-static-libsUpgrade java-25-openjdk-slowdebugUpgrade java-17-openjdk-fastdebugUpgrade java-17-openjdk-static-libs-slowdebugUpgrade java-17-openjdk-src-slowdebugUpgrade java-17-openjdk-src-fastdebugUpgrade java-17-openjdk-headless-fastdebugUpgrade java-25-openjdk-devel-fastdebugUpgrade java-17-openjdk-debuginfoUpgrade java-25-openjdk-crypto-adapterUpgrade java-17-openjdk-slowdebug-debuginfoUpgrade java-17-openjdk-demoUpgrade java-25-openjdk-headless-fastdebug-debuginfoUpgrade java-25-openjdk-demo-fastdebugUpgrade java-17-openjdk-headless-slowdebugUpgrade java-25-openjdk-src-slowdebugUpgrade java-25-openjdk-headlessUpgrade java-25-openjdk-javadoc-zipUpgrade java-25-openjdk-javadocUpgrade java-25-openjdk-static-libs-slowdebugUpgrade java-25-openjdk-jmods-fastdebugUpgrade java-17-openjdk-headlessUpgrade java-17-openjdk-devel-fastdebugUpgrade java-25-openjdk-jmodsUpgrade java-25-openjdk-headless-slowdebugUpgrade java-25-openjdk-devel-slowdebug-debuginfoUpgrade java-25-openjdk-crypto-adapter-debuginfoUpgrade java-17-openjdk-fastdebug-debuginfoUpgrade java-17-openjdk-debugsourceUpgrade java-25-openjdk-demo-slowdebugUpgrade java-25-openjdk-crypto-adapter-fastdebug-debuginfoUpgrade java-25-openjdk-srcUpgrade java-25-openjdkUpgrade java-17-openjdk | Jul 27, 2026 | Jul 26, 2026 |
| Ubuntu | — | Upgrade openjdk-17-jre-headlessUpgrade openjdk-21-crac-jreUpgrade openjdk-11-jreUpgrade openjdk-25-jre-zeroUpgrade openjdk-17-jreUpgrade openjdk-17-crac-jre-headlessUpgrade openjdk-25-crac-jre-headlessUpgrade openjdk-17-jdkUpgrade openjdk-11-jdkUpgrade openjdk-21-jre-headlessUpgrade openjdk-25-crac-jdkUpgrade openjdk-17-demoUpgrade openjdk-17-jre-zeroUpgrade openjdk-26-jre-headlessUpgrade openjdk-17-jdk-headlessUpgrade openjdk-25-jreUpgrade openjdk-21-crac-jre-zeroUpgrade openjdk-26-jdk-headlessUpgrade openjdk-25-crac-jre-zeroUpgrade openjdk-21-testsupportUpgrade openjdk-17-crac-jdk-headlessUpgrade openjdk-21-jdkUpgrade openjdk-17-crac-jreUpgrade openjdk-11-jre-headlessUpgrade openjdk-21-jreUpgrade openjdk-21-crac-jdkUpgrade openjdk-21-sourceUpgrade openjdk-25-crac-jreUpgrade openjdk-17-sourceUpgrade openjdk-21-jre-zeroUpgrade openjdk-26-jreUpgrade openjdk-25-crac-jdk-headlessUpgrade openjdk-21-crac-jre-headlessUpgrade openjdk-11-jdk-headlessUpgrade openjdk-21-demoUpgrade openjdk-21-crac-jdk-headlessUpgrade openjdk-26-jre-zeroUpgrade openjdk-17-crac-jdkUpgrade openjdk-26-jdkUpgrade openjdk-17-crac-jre-zeroUpgrade openjdk-25-jdk-headlessUpgrade openjdk-25-jdkUpgrade openjdk-21-jdk-headlessUpgrade openjdk-11-jre-zeroUpgrade openjdk-25-jre-headlessUpgrade openjdk-21-doc | Aug 26, 2026 | Aug 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub