CVE-2023-22025

Summary

CVE-2023-22025 is a vulnerability affecting multiple versions of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. This issue, located in the Hotspot component, is classified as difficult to exploit and allows unauthenticated attackers to compromise these products via network access through various protocols. Successful exploitation may result in unauthorized data manipulation, including the ability to update, insert, or delete information. This vulnerability can be exploited by malicious APIs and is particularly relevant to Java deployments that run untrusted code and rely on the Java sandbox for security. According to the Common Vulnerability Scoring System (CVSS), this vulnerability has a base score of 3.7 for integrity impacts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.