CVE-2023-22044

CVSS 3.1 Score 3.7 of 10 (low)

Details

Published Jul 18, 2023
Updated: Jul 27, 2023

Summary

CVE-2023-22044 is a vulnerability affecting multiple versions of Oracle Java SE, Oracle GraalVM Enterprise Edition, and Oracle GraalVM for JDK. This issue lies within the Hotspot component and can be exploited by unauthenticated attackers via various network protocols. Successful attacks may lead to unauthorized read access to a subset of data in these Java products. The CVSS Base Score is 3.7 for Confidentiality impacts. This vulnerability can be exploited through APIs and poses a significant risk to Java deployments that run untrusted code and rely on the Java sandbox for security.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Java Runtime Environment
  • Oracle Java Development Kit
  • Debian

Affected Vendors

  • Debian
  • BonqDAO