CVE-2024-20926
CVSS 3.1 Score 5.9 of 10 (medium)
Details
Summary
CVE-2024-20926 is a vulnerability affecting various versions of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. This issue, located in the Scripting component, can be exploited by unauthenticated attackers via multiple networking protocols. Successful exploitation may grant the attacker unauthorized access to sensitive data or complete control over the affected systems. The vulnerability is considered difficult to exploit and can be triggered by using APIs in the affected component. It poses a significant risk to Java deployments that run untrusted code and rely on the Java sandbox for security. The CVSS Base Score is 5.9, indicating a medium risk for confidentiality impacts.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Java Runtime Environment
- Oracle Java Development Kit
- Debian
Affected Vendors
- Debian
- BonqDAO
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions