5.3

CVE-2023-21830

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).  Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf; Oracle GraalVM Enterprise Edition: 20.3.8 and  21.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Communications Unified Assurance Version >= 5.5.0 <= 5.5.17
Oracle ≫ Communications Unified Assurance Version >= 6.0.0 <= 6.0.2
Oracle ≫ Graalvm Version 20.3.8 SwEdition enterprise
Oracle ≫ Graalvm Version 21.3.4 SwEdition enterprise
Oracle ≫ Graalvm Version 22.3.0 SwEdition enterprise
Oracle ≫ Jdk Version 1.8.0 Update update351
Oracle ≫ Jdk Version 11.0.17
Oracle ≫ Jdk Version 17.0.5
Oracle ≫ Jdk Version 19.0.1
Oracle ≫ Jre Version 1.8.0 Update update351
Oracle ≫ Jre Version 11.0.17
Oracle ≫ Jre Version 17.0.5
Oracle ≫ Jre Version 19.0.1
Azul ≫ Zulu Version 6.51
Azul ≫ Zulu Version 7.57
Azul ≫ Zulu Version 8.66
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.06% 0.6
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Oracle 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://www.oracle.com/security-alerts/cpujan2023.html
Patch
Vendor Advisory
https://security.gentoo.org/glsa/202401-25
https://www.oracle.com/security-alerts/cpujul2023.html
Patch
Vendor Advisory