CVE-2023-22051: Low severity oracle graalvm enterprise edition vulnerability

Published Jul 18, 2023

Updated

Vulnerability in the Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: GraalVM Compiler). Supported versions that are affected are Oracle GraalVM Enterprise Edition: 21.3.6, 22.3.2; Oracle GraalVM for JDK: 17.0.7 and 20.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

Affected Software

4 affected components

Oracle GraalVM=21.3.6

Oracle GraalVM=22.3.2

Oracle GraalVM for JDK=17.0.7

Oracle GraalVM for JDK=20.0.1

Remediation

Patch Available

https://www.oracle.com/security-alerts/cpujul2023.html

Event History

Jul 18, 2023

CVE Published

via MITRE·08:18 PM

Data Sourced

via MITRE·08:18 PM

DescriptionSeverity

Data Sourced

09:15 PM

DescriptionSeverity

Frequently Asked Questions

What is CVE-2023-22051?

CVE-2023-22051 is a vulnerability in the Oracle GraalVM Enterprise Edition and Oracle GraalVM for JDK.

Which software versions are affected by CVE-2023-22051?

The affected software versions are: Oracle GraalVM Enterprise Edition 21.3.6, 22.3.2; Oracle GraalVM for JDK 17.0.7 and 20.0.1.

What is the severity of CVE-2023-22051?

The severity of CVE-2023-22051 is low with a severity value of 3.7.

How can I exploit CVE-2023-22051?

Exploiting CVE-2023-22051 is considered difficult.

Where can I find more information about CVE-2023-22051?

More information about CVE-2023-22051 can be found at the following reference: [link](https://www.oracle.com/security-alerts/cpujul2023.html)