Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and 11.0.31. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-fastdebugUpgrade java-1.8.0-openjdk-accessibility-slowdebugUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade java-1.8.0-openjdk-accessibility-fastdebugUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-demo-fastdebugUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-src-fastdebugUpgrade java-1.8.0-openjdk-src-slowdebugUpgrade java-1.8.0-openjdk-headless-slowdebugUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-slowdebugUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-openjdk-devel-slowdebugUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-openjdk-demo-slowdebugUpgrade java-1.8.0-openjdk-devel-fastdebugUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-headless-fastdebug | Jul 26, 2026 | Jul 23, 2026 |
| Alpine Linux | — | Upgrade openjdk11 | Aug 4, 2026 | Jul 21, 2026 |
| Amazon Linux Ami 2 | — | Upgrade java-1.8.0-openjdk-src-debugUpgrade java-1.8.0-openjdk-demo-debugUpgrade java-1.8.0-openjdk-headlessUpgrade java-11-amazon-corretto-javadocUpgrade java-1.8.0-openjdk-debuginfoUpgrade java-11-amazon-corretto-headlessUpgrade java-1.8.0-openjdk-headless-debugUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade java-1.8.0-amazon-corretto-develUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-openjdk-debugUpgrade java-1.8.0-openjdk-javadoc-debugUpgrade java-1.8.0-openjdk-javadoc-zip-debugUpgrade java-1.8.0-openjdk-devel-debugUpgrade java-1.8.0-amazon-correttoUpgrade java-11-amazon-correttoUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-amazon-corretto-debugsymbolsUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-11-amazon-corretto-debugsymbolsUpgrade java-1.8.0-openjdk-accessibility-debugUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-devel | Aug 5, 2026 | Aug 5, 2026 |
| Amazon_linux_2023 | — | Upgrade java-11-amazon-corretto-develUpgrade java-1.8.0-amazon-correttoUpgrade java-11-amazon-corretto-jmodsUpgrade java-11-amazon-corretto-debugsymbolsUpgrade java-11-amazon-correttoUpgrade java-1.8.0-amazon-corretto-develUpgrade java-1.8.0-amazon-corretto-debugsymbolsUpgrade java-11-amazon-corretto-javadocUpgrade java-11-amazon-corretto-headless | Aug 10, 2026 | Jul 21, 2026 |
| Azul Zulu | — | Upgrade to Azul Zulu JDK 8 installer 8.95.0.14 (JDK 8u501-b01, quarterly CPU) (LTS stream)Upgrade to Azul Zulu JDK 11 installer 11.89.14 (JDK 11.0.31.0.101+1, quarterly CPU) (LTS stream) | Jul 30, 2026 | Jul 21, 2026 |
| Debian | — | Upgrade openjdk-11 | Jul 29, 2026 | Jul 29, 2026 |
| Eclipseadoptium | — | Upgrade to the latest version of Eclipse Adoptium | Jul 24, 2026 | Jul 21, 2026 |
| Ibm Aix | — | Apply the fix or workaround for aix_vios_advisory | Aug 16, 2026 | Aug 14, 2026 |
| Ibm Java | — | Upgrade IBM Java to version 8.0.8.70 | Jul 21, 2026 | Jul 21, 2026 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jul 21, 2026 | Jul 21, 2026 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Jul 23, 2026 | Jul 21, 2026 |
| Redhat_linux | — | Upgrade java-1.8.0-openjdk-srcUpgrade java-11-openjdk-devel-slowdebug-debuginfoUpgrade java-11-openjdkUpgrade java-11-openjdk-static-libs-fastdebugUpgrade java-11-openjdk-demo-debugUpgrade java-1.8.0-openjdk-accessibility-fastdebugUpgrade java-11-openjdk-devel-fastdebugUpgrade java-11-openjdk-src-debugUpgrade java-1.8.0-openjdk-slowdebug-debuginfoUpgrade java-1.8.0-ibm-headlessUpgrade java-11-openjdk-demo-slowdebugUpgrade java-1.8.0-openjdk-headless-debuginfoUpgrade java-1.8.0-openjdk-devel-fastdebugUpgrade java-1.8.0-openjdk-demo-slowdebugUpgrade java-11-openjdk-debuginfoUpgrade java-1.8.0-openjdk-demo-fastdebug-debuginfoUpgrade java-11-openjdk-fastdebug-debuginfoUpgrade java-1.8.0-openjdk-headless-slowdebug-debuginfoUpgrade java-11-openjdk-javadoc-debugUpgrade java-1.8.0-openjdk-debuginfoUpgrade java-1.8.0-ibmUpgrade java-1.8.0-openjdk-demo-debuginfoUpgrade java-11-openjdk-devel-debugUpgrade java-11-openjdk-slowdebugUpgrade java-1.8.0-ibm-develUpgrade java-11-openjdk-devel-slowdebugUpgrade java-1.8.0-ibm-jdbcUpgrade java-11-openjdk-slowdebug-debuginfoUpgrade java-11-openjdk-demoUpgrade java-11-openjdk-srcUpgrade java-11-openjdk-headless-fastdebugUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-openjdk-src-fastdebugUpgrade java-11-openjdk-javadocUpgrade java-11-openjdk-demo-fastdebugUpgrade java-11-openjdk-fastdebugUpgrade java-1.8.0-openjdk-headless-fastdebugUpgrade java-11-openjdk-headless-slowdebug-debuginfoUpgrade java-11-openjdk-static-libs-debugUpgrade java-11-openjdk-headless-slowdebugUpgrade java-11-openjdk-static-libs-slowdebugUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-openjdk-slowdebugUpgrade java-1.8.0-openjdk-fastdebugUpgrade java-1.8.0-openjdk-debugsourceUpgrade java-11-openjdk-jmods-fastdebugUpgrade java-11-openjdk-jmods-slowdebugUpgrade java-11-openjdk-devel-fastdebug-debuginfoUpgrade java-1.8.0-openjdkUpgrade java-11-openjdk-devel-debuginfoUpgrade java-11-openjdk-static-libsUpgrade java-11-openjdk-headless-debugUpgrade java-1.8.0-openjdk-headless-slowdebugUpgrade java-11-openjdk-javadoc-zipUpgrade java-1.8.0-openjdk-demo-slowdebug-debuginfoUpgrade java-11-openjdk-src-slowdebugUpgrade java-11-openjdk-javadoc-zip-debugUpgrade java-11-openjdk-headless-debuginfoUpgrade java-11-openjdk-src-fastdebugUpgrade java-1.8.0-openjdk-devel-slowdebug-debuginfoUpgrade java-11-openjdk-headlessUpgrade java-1.8.0-openjdk-demo-fastdebugUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-11-openjdk-jmods-debugUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade java-1.8.0-openjdk-headless-fastdebug-debuginfoUpgrade java-1.8.0-ibm-srcUpgrade java-11-openjdk-jmodsUpgrade java-1.8.0-openjdk-devel-debuginfoUpgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-devel-slowdebugNo solution existsUpgrade java-11-openjdk-debugUpgrade java-1.8.0-openjdk-javadocUpgrade java-11-openjdk-debugsourceUpgrade java-1.8.0-openjdk-src-slowdebugUpgrade java-1.8.0-openjdk-devel-fastdebug-debuginfoUpgrade java-1.8.0-ibm-webstartUpgrade java-1.8.0-openjdk-fastdebug-debuginfoUpgrade java-11-openjdk-headless-fastdebug-debuginfoUpgrade java-11-openjdk-develUpgrade java-1.8.0-openjdk-accessibility-slowdebug | Jul 23, 2026 | Jul 21, 2026 |
| Ubuntu | — | Upgrade openjdk-11-jre-headlessUpgrade openjdk-8-jre-zeroUpgrade openjdk-11-jdkUpgrade openjdk-8-jdk-headlessUpgrade openjdk-8-jreUpgrade openjdk-11-jreUpgrade openjdk-8-jre-headlessUpgrade openjdk-11-jre-zeroUpgrade openjdk-8-jre-jamvmUpgrade openjdk-8-jdkUpgrade openjdk-11-jdk-headless | Aug 26, 2026 | Aug 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub