CVE-2023-22091

EUVD-2023-26256
Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and  22.3.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.8 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
oracleCNA
4.8 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 42%
Affected Products (NVD)
VendorProductVersion
oraclegraalvm_for_jdk
17.0.8
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openjdk-13
bionic
dne
focal
ignored
jammy
dne
lunar
dne
mantic
dne
trusty
dne
xenial
dne
openjdk-16
bionic
dne
focal
ignored
jammy
dne
lunar
dne
mantic
dne
trusty
dne
xenial
dne
openjdk-17
bionic
not-affected
focal
not-affected
jammy
not-affected
lunar
not-affected
mantic
not-affected
trusty
dne
xenial
dne
openjdk-18
bionic
dne
focal
dne
jammy
ignored
lunar
ignored
mantic
dne
trusty
dne
xenial
dne
openjdk-19
bionic
dne
focal
dne
jammy
ignored
lunar
ignored
mantic
ignored
trusty
dne
xenial
dne
openjdk-20
bionic
dne
focal
dne
jammy
dne
lunar
not-affected
mantic
not-affected
trusty
dne
xenial
dne
openjdk-21
bionic
dne
focal
not-affected
jammy
not-affected
lunar
not-affected
mantic
not-affected
trusty
dne
xenial
dne
openjdk-22
bionic
dne
focal
dne
jammy
dne
lunar
dne
mantic
not-affected
trusty
dne
xenial
dne
openjdk-8
bionic
not-affected
focal
not-affected
jammy
not-affected
lunar
not-affected
mantic
not-affected
trusty
dne
xenial
not-affected
openjdk-9
bionic
dne
focal
dne
jammy
dne
lunar
dne
mantic
dne
trusty
dne
xenial
ignored
openjdk-lts
bionic
not-affected
focal
not-affected
jammy
not-affected
lunar
not-affected
mantic
not-affected
trusty
dne
xenial
dne