Vulnerability in Oracle GraalVM Compiler Affecting Oracle GraalVM Enterprise Edition

CVE-2020-2799

What is CVE-2020-2799?

A vulnerability exists in the GraalVM Compiler of Oracle GraalVM Enterprise Edition, affecting versions 19.3.1 and 20.0.0. This vulnerability allows a low-privileged attacker with network access to exploit the system through multiple protocols. While the primary target is the Oracle GraalVM Enterprise Edition, the ramifications of successful attacks can significantly affect other connected systems. This vulnerability may enable unauthorized creation, deletion, or modification of critical data, leading to severe integrity impacts on all accessible data within the affected product.

References