7.4

CVE-2023-21930

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and  22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Graalvm Version 20.3.9 SwEdition enterprise
Oracle ≫ Graalvm Version 21.3.5 SwEdition enterprise
Oracle ≫ Graalvm Version 22.3.1 SwEdition enterprise
Oracle ≫ Jdk Version 1.8.0 Update update361
Oracle ≫ Jdk Version 11.0.18
Oracle ≫ Jdk Version 17.0.6
Oracle ≫ Jdk Version 20
Oracle ≫ Jre Version 1.8.0 Update update361
Oracle ≫ Jre Version 11.0.18
Oracle ≫ Jre Version 17.0.6
Oracle ≫ Jre Version 20
Netapp ≫ Oncommand Insight Version -
Debian ≫ Debian Linux Version 10.0
Debian ≫ Debian Linux Version 11.0
Debian ≫ Debian Linux Version 12.0
Oracle ≫ Openjdk Version < 8
Oracle ≫ Openjdk Version >= 11 <= 11.0.18
Oracle ≫ Openjdk Version >= 17 <= 17.0.6
Oracle ≫ Openjdk Version 8 Update -
Oracle ≫ Openjdk Version 8 Update milestone1
Oracle ≫ Openjdk Version 8 Update milestone2
Oracle ≫ Openjdk Version 8 Update milestone3
Oracle ≫ Openjdk Version 8 Update milestone4
Oracle ≫ Openjdk Version 8 Update milestone5
Oracle ≫ Openjdk Version 8 Update milestone6
Oracle ≫ Openjdk Version 8 Update milestone7
Oracle ≫ Openjdk Version 8 Update milestone8
Oracle ≫ Openjdk Version 8 Update milestone9
Oracle ≫ Openjdk Version 8 Update update101
Oracle ≫ Openjdk Version 8 Update update102
Oracle ≫ Openjdk Version 8 Update update11
Oracle ≫ Openjdk Version 8 Update update111
Oracle ≫ Openjdk Version 8 Update update112
Oracle ≫ Openjdk Version 8 Update update121
Oracle ≫ Openjdk Version 8 Update update131
Oracle ≫ Openjdk Version 8 Update update141
Oracle ≫ Openjdk Version 8 Update update151
Oracle ≫ Openjdk Version 8 Update update152
Oracle ≫ Openjdk Version 8 Update update161
Oracle ≫ Openjdk Version 8 Update update162
Oracle ≫ Openjdk Version 8 Update update171
Oracle ≫ Openjdk Version 8 Update update172
Oracle ≫ Openjdk Version 8 Update update181
Oracle ≫ Openjdk Version 8 Update update191
Oracle ≫ Openjdk Version 8 Update update192
Oracle ≫ Openjdk Version 8 Update update20
Oracle ≫ Openjdk Version 8 Update update201
Oracle ≫ Openjdk Version 8 Update update202
Oracle ≫ Openjdk Version 8 Update update211
Oracle ≫ Openjdk Version 8 Update update212
Oracle ≫ Openjdk Version 8 Update update221
Oracle ≫ Openjdk Version 8 Update update222
Oracle ≫ Openjdk Version 8 Update update231
Oracle ≫ Openjdk Version 8 Update update232
Oracle ≫ Openjdk Version 8 Update update241
Oracle ≫ Openjdk Version 8 Update update242
Oracle ≫ Openjdk Version 8 Update update25
Oracle ≫ Openjdk Version 8 Update update252
Oracle ≫ Openjdk Version 8 Update update262
Oracle ≫ Openjdk Version 8 Update update271
Oracle ≫ Openjdk Version 8 Update update281
Oracle ≫ Openjdk Version 8 Update update282
Oracle ≫ Openjdk Version 8 Update update291
Oracle ≫ Openjdk Version 8 Update update301
Oracle ≫ Openjdk Version 8 Update update302
Oracle ≫ Openjdk Version 8 Update update31
Oracle ≫ Openjdk Version 8 Update update312
Oracle ≫ Openjdk Version 8 Update update322
Oracle ≫ Openjdk Version 8 Update update332
Oracle ≫ Openjdk Version 8 Update update342
Oracle ≫ Openjdk Version 8 Update update352
Oracle ≫ Openjdk Version 8 Update update362
Oracle ≫ Openjdk Version 8 Update update40
Oracle ≫ Openjdk Version 8 Update update45
Oracle ≫ Openjdk Version 8 Update update5
Oracle ≫ Openjdk Version 8 Update update51
Oracle ≫ Openjdk Version 8 Update update60
Oracle ≫ Openjdk Version 8 Update update65
Oracle ≫ Openjdk Version 8 Update update66
Oracle ≫ Openjdk Version 8 Update update71
Oracle ≫ Openjdk Version 8 Update update72
Oracle ≫ Openjdk Version 8 Update update73
Oracle ≫ Openjdk Version 8 Update update74
Oracle ≫ Openjdk Version 8 Update update77
Oracle ≫ Openjdk Version 8 Update update91
Oracle ≫ Openjdk Version 8 Update update92
Oracle ≫ Openjdk Version 20
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.3% 0.666
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Oracle 7.4 2.2 5.2
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://security.netapp.com/advisory/ntap-20240621-0006/
https://www.couchbase.com/alerts/
Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2023.html
Patch
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/09/msg00018.html
Third Party Advisory
Mailing List
https://security.netapp.com/advisory/ntap-20230427-0008/
Third Party Advisory
https://www.debian.org/security/2023/dsa-5430
Third Party Advisory
https://www.debian.org/security/2023/dsa-5478
Third Party Advisory