Vulnerability in Oracle GraalVM Enterprise Edition Affects Data Integrity and Availability

CVE-2023-21986

Summary

An exploitable vulnerability exists in the Oracle GraalVM Enterprise Edition's Native Image component, allowing an unauthenticated attacker with logon access to the environment where GraalVM operates to manipulate data. The attacks can result in unauthorized updates, inserts, or deletions of accessible data and can lead to a partial denial of service. Given that this vulnerability affects the GraalVM Enterprise Edition, it may also impact other products, extending its scope of influence.

References