Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition Vulnerability

CVE-2024-21235

Summary

This vulnerability exists within Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition, specifically in the Hotspot component. It poses a risk as it allows unauthenticated attackers with network access to exploit it via multiple protocols. The consequences of successful exploitation may include unauthorized updates, insertion, or deletion of accessible data, along with unauthorized read access to a subset of data within these products. The exploitation can occur through APIs, particularly when data is supplied to these APIs, and can also impact Java deployments that utilize sandboxed applications. This represents a significant concern for security, especially for environments that depend on the Java sandbox for isolation and protection of untrusted code.

References