Exploit Vulnerability in Oracle Java SE and GraalVM Products
CVE-2025-30749

8.1HIGH

Key Information:

Vendor

Oracle
Status
Oracle Java Se
Oracle Graalvm For Jdk
Oracle Graalvm Enterprise Edition
Vendor
CVE Published:
15 July 2025

What is CVE-2025-30749?

A vulnerability exists in Oracle Java SE and GraalVM products, where unauthorized attackers can exploit the system via network access. This weakness is particularly concerning for Java deployments utilizing untrusted code from sandboxed Java Web Start applications or applets. If successfully exploited, this vulnerability may allow an attacker to compromise the affected products, leading to potential control over the affected systems. It is important to note that servers running only trusted code are not impacted. Organizations should review their Java deployments and apply necessary updates to safeguard their systems.

Affected Version(s)

Oracle GraalVM Enterprise Edition 21.3.14

Oracle GraalVM for JDK 17.0.15

Oracle GraalVM for JDK 21.0.7

References

https://www.oracle.com/security-alerts/cpujul2025.html
vendor-advisory

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-30749 : Exploit Vulnerability in Oracle Java SE and GraalVM Products