Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and 21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful a
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Apple, Oracle
- Product
- oracle, java
- CVSS
- 9.1
- EPSS
- 0.003 (p17)
- Exposure class
- Developer platform
Why it ranks 29 (Notable)
- CVSS 9.1 critical
- Product class: developer platform
- Widely deployed vendor product (Apple)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.