CVE-2024-21094
CVSS 3.1 Score 3.7 of 10 (low)
Details
Summary
CVE-2024-21094 is a newly disclosed vulnerability affecting multiple versions of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. This issue, located in the Hotspot component, is classified as difficult to exploit and allows unauthenticated attackers to compromise these Java products via various network protocols. Successful exploitation may result in unauthorized access to some data, enabling attackers to update, insert, or delete sensitive information. This vulnerability can be exploited using APIs in the affected components, and is particularly relevant to Java deployments relying on the sandbox for security, such as Java Web Start applications or applets that load and run untrusted code. The CVSS Base Score is 3.7 for integrity impacts.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions