CVE-2023-22091

Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and  22.3.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.8 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
oracleCNA
4.8 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 43%
VendorProductVersion
oraclegraalvm_for_jdk
17.0.8
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openjdk-13
mantic
dne
lunar
dne
jammy
dne
focal
ignored
bionic
dne
xenial
dne
trusty
dne
openjdk-16
mantic
dne
lunar
dne
jammy
dne
focal
ignored
bionic
dne
xenial
dne
trusty
dne
openjdk-17
mantic
not-affected
lunar
not-affected
jammy
not-affected
focal
not-affected
bionic
not-affected
xenial
dne
trusty
dne
openjdk-18
mantic
dne
lunar
ignored
jammy
ignored
focal
dne
bionic
dne
xenial
dne
trusty
dne
openjdk-19
mantic
ignored
lunar
ignored
jammy
ignored
focal
dne
bionic
dne
xenial
dne
trusty
dne
openjdk-20
mantic
not-affected
lunar
not-affected
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
openjdk-21
mantic
not-affected
lunar
not-affected
jammy
not-affected
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
openjdk-22
mantic
not-affected
lunar
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
openjdk-8
mantic
not-affected
lunar
not-affected
jammy
not-affected
focal
not-affected
bionic
not-affected
xenial
not-affected
trusty
dne
openjdk-9
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
dne
xenial
ignored
trusty
dne
openjdk-lts
mantic
not-affected
lunar
not-affected
jammy
not-affected
focal
not-affected
bionic
not-affected
xenial
dne
trusty
dne