Unauthenticated Network Vulnerability in Oracle GraalVM Enterprise Edition
CVE-2019-2862

6.8MEDIUM

Key Information:

Vendor

Oracle
Status
Graalvm Enterprise Edition
Vendor
CVE Published:
23 July 2019

What is CVE-2019-2862?

A vulnerability exists in Oracle GraalVM Enterprise Edition that allows an unauthenticated attacker with network access through various protocols to exploit the system. This flaw could lead to unauthorized actions, including the creation, deletion, or modification of critical data within Oracle GraalVM. Notably, successful exploitation requires user interaction, thereby introducing an additional layer of complexity. The consequences of this vulnerability can extend to causing significant disruptions such as frequent system crashes or Denial of Service, impacting the availability of the affected system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

GraalVM Enterprise Edition 19.0.0

References

http://www.oracle.com/technetwork/security-advisory/cpuju...
x_refsource_MISC

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.