Vulnerability in Oracle Java SE and GraalVM Compiler
CVE-2025-30752

3.7LOW

Key Information:

Vendor

Oracle
Status
Oracle Java Se
Oracle Graalvm For Jdk
Vendor
CVE Published:
15 July 2025

What is CVE-2025-30752?

This vulnerability within Oracle Java SE and GraalVM for JDK allows an unauthenticated attacker with network access to exploit weaknesses in the Java environment, particularly in sandboxed applications. This could lead to a partial denial of service, mainly affecting clients that run untrusted code sourced from the internet. It is important to note that this issue does not impact Java configurations running only trusted code.

Affected Version(s)

Oracle GraalVM for JDK 24.0.1

Oracle Java SE 24.0.1

References

https://www.oracle.com/security-alerts/cpujul2025.html
vendor-advisory

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-30752 : Vulnerability in Oracle Java SE and GraalVM Compiler