{"Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition Vulnerability"}

CVE-2024-21147

Summary

A network-based security vulnerability affects Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition, allowing unauthenticated attackers with network access to potentially compromise these products. The vulnerability enables unauthorized creation, deletion, or modification of critical data and grants unauthorized access to all accessible data within the affected environments. Successful exploitation may occur through APIs in affected components, particularly in Java deployments utilizing sandboxed applications. This vulnerability poses significant risks to organizations leveraging these Oracle products, especially within environments that depend on the Java security model.

References