Vulnerability in Oracle Java SE and Oracle GraalVM Enterprise Edition Could Allow Unauthorized Access to Data

CVE-2024-20925

Summary

A vulnerability exists in Oracle Java SE and Oracle GraalVM Enterprise Edition that could be exploited by an unauthenticated attacker with network access through multiple protocols. This flaw primarily impacts users running sandboxed Java Web Start applications or sandboxed Java applets that execute untrusted code. Successful exploitation of this vulnerability necessitates human interaction from a third party. If successfully attacked, the consequence may involve unauthorized operations such as updates, inserts, or deletions of data accessible within Oracle Java SE and GraalVM. It is important to note that this vulnerability is not applicable to server deployments where only trusted code is executed.

References