CVE-2023-22051
First published: Tue Jul 18 2023(Updated: )
Vulnerability in the Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: GraalVM Compiler). Supported versions that are affected are Oracle GraalVM Enterprise Edition: 21.3.6, 22.3.2; Oracle GraalVM for JDK: 17.0.7 and 20.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).
Credit: secalert_us@oracle.com secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle GraalVM | =21.3.6 | |
| Oracle GraalVM | =22.3.2 | |
| Oracle GraalVM for JDK | =17.0.7 | |
| Oracle GraalVM for JDK | =20.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-22051?
CVE-2023-22051 is a vulnerability in the Oracle GraalVM Enterprise Edition and Oracle GraalVM for JDK.
Which software versions are affected by CVE-2023-22051?
The affected software versions are: Oracle GraalVM Enterprise Edition 21.3.6, 22.3.2; Oracle GraalVM for JDK 17.0.7 and 20.0.1.
What is the severity of CVE-2023-22051?
The severity of CVE-2023-22051 is low with a severity value of 3.7.
How can I exploit CVE-2023-22051?
Exploiting CVE-2023-22051 is considered difficult.
Where can I find more information about CVE-2023-22051?
More information about CVE-2023-22051 can be found at the following reference: [link](https://www.oracle.com/security-alerts/cpujul2023.html)
- collector/nvd-latest
- collector/nvd-index
- agent/author
- agent/type
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/nvd-api
- agent/software-canonical-lookup-request
- agent/severity
- agent/remedy
- agent/references
- agent/tags
- agent/description
- collector/mitre-cve
- source/MITRE
- vendor/oracle
- canonical/oracle graalvm
- version/oracle graalvm/21.3.6
- version/oracle graalvm/22.3.2
- canonical/oracle graalvm for jdk
- version/oracle graalvm for jdk/17.0.7
- version/oracle graalvm for jdk/20.0.1