5.9

CVE-2026-46968

Vulnerability in Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and  21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Jre Version 1.8.0 Update update491 SwEdition -
Oracle ≫ Jre Version 1.8.0 Update update491 SwEdition enterprise_performance_pack
Oracle ≫ Jre Version 11.0.31
Oracle ≫ Jre Version 17.0.19
Oracle ≫ Jre Version 21.0.11
Oracle ≫ Jre Version 25.0.3
Oracle ≫ Jre Version 26.0.1
Oracle ≫ Jdk Version 1.8.0 Update update491 SwEdition -
Oracle ≫ Jdk Version 1.8.0 Update update491 SwEdition enterprise_performance_pack
Oracle ≫ Jdk Version 11.0.31
Oracle ≫ Jdk Version 17.0.19
Oracle ≫ Jdk Version 21.0.11
Oracle ≫ Jdk Version 25.0.3
Oracle ≫ Jdk Version 26.0.1
Oracle ≫ Graalvm Version 21.3.18 SwEdition enterprise
Oracle ≫ Graalvm For Jdk Version 17.0.19
Oracle ≫ Graalvm For Jdk Version 21.0.11
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.28% 0.202
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Oracle 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://www.oracle.com/security-alerts/cpujul2026.html
Vendor Advisory