Description
Vulnerability in the Oracle GraalVM for JDK product of Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle GraalVM for JDK: 17.0.16 and 21.0.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GraalVM for JDK accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Oracle | Oracle GraalVM for JDK | 17.0.16, 21.0.8 | — |
Advisories 5
- WID-SEC-2025-2365 Oracle Java SE: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 3, 2026
- NCSC-2026-0021 Kwetsbaarheden verholpen in Oracle Database Server producten NCSC-NL (Netherlands) · Jan 21, 2026
- WID-SEC-2026-0180 Dell Data Protection Advisor: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 20, 2026
- WID-SEC-2026-0157 Oracle Database Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 20, 2026
- NCSC-2025-0337 Kwetsbaarheden verholpen in Oracle Java NCSC-NL (Netherlands) · Oct 23, 2025
References
- Oracle Advisory vendor-advisory