CVE-2023-22044
CVSS 3.1 Score 3.7 of 10 (low)
Details
Summary
CVE-2023-22044 is a vulnerability affecting multiple versions of Oracle Java SE, Oracle GraalVM Enterprise Edition, and Oracle GraalVM for JDK. This issue lies within the Hotspot component and can be exploited by unauthenticated attackers via various network protocols. Successful attacks may lead to unauthorized read access to a subset of data in these Java products. The CVSS Base Score is 3.7 for Confidentiality impacts. This vulnerability can be exploited through APIs and poses a significant risk to Java deployments that run untrusted code and rely on the Java sandbox for security.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Java Runtime Environment
- Oracle Java Development Kit
- Debian
Affected Vendors
- Debian
- BonqDAO