CVE-2023-22049

Summary

CVE-2023-22049 is a vulnerability affecting multiple versions of Oracle Java SE and Oracle GraalVM, specifically the Libraries component. This issue allows unauthenticated attackers to potentially compromise Oracle Java SE, Oracle GraalVM Enterprise Edition, and Oracle GraalVM for JDK through network access, using APIs in the affected components. Successful exploitation could lead to unauthorized data manipulation, specifically insert, update, or delete access. The Base Score is 3.7 (Integrity impacts) according to the Common Vulnerability Scoring System (CVSS), with an attack vector of Network (N), high attack complexity (H), and no user interaction (N). This vulnerability poses a risk for Java deployments, particularly those with sandboxed Java Web Start applications or applets that run untrusted code.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.