CVE-2024-20918

Summary

CVE-2024-20918 is a vulnerability affecting multiple versions of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. This issue, located in the Hotspot component, allows unauthenticated attackers to compromise these systems via network access through various protocols. Successful exploitation can result in unauthorized modification, deletion, or creation of critical data, as well as complete access to all accessible data. The vulnerability can be exploited using APIs and is particularly relevant to Java deployments that load and run untrusted code. The CVSS Base Score is 7.4, with high impacts on confidentiality and integrity.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.