CVE-2024-20919

🗓️ 17 Feb 2024 01:50:10Reported by oracleType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 405 Views

Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition allows unauthenticated attacker to compromise. CVSS 3.1 Base Score 5.

Reporter	Title	Published	Views	Family All 441
IBM Security Bulletins	Security Bulletin: Vulnerabilities in IBM Java affect IBM SAN Volume Controller, IBM Storwize, IBM Storage Virtualize and IBM FlashSystem products	19 Jun 202415:28	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability with OpenJDK, commons-compress and spring-web-5.3.27/spring-web-5.3.32 affect IBM Cloud Object Storage Systems (April 2024v1)	1 Apr 202416:26	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of IBM SDK, Java Technology Edition, IBM Tivoli Application Dependency Discovery Manager is vulnerable to multiple vulnerabilities.	16 Aug 202412:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java, OpenSSL, and libcurl may affect IBM Storage Protect for Virtual Environments: Data Protection for Microsoft Hyper-V	4 Apr 202418:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Secure Proxy is vulnerable to multiple issues	4 Feb 202520:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance has multiple vulnerabilities	10 Jul 202416:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	27 Jun 202422:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation Application Manager (CVE-2024-20952, CVE-2024-20918, CVE-2024-20921, CVE-2024-20919, CVE-2024-20926, CVE-2024-20945, CVE-2023-33850)	19 Mar 202408:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana using third-party Kubernetes Operators is affected by Multiple Security Vulnerabilities	15 Mar 202413:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java may affect IBM Storage Protect for Space Management	21 Jun 202407:32	–	ibm

NVD

Vulners

Node

oracle graalvmMatch20.3.12enterprise

oracle graalvmMatch21.3.8enterprise

oracle graalvmMatch22.3.4enterprise

oracle graalvm_for_jdkMatch17.0.9

oracle graalvm_for_jdkMatch21.0.1

oracle jdkMatch1.8.0update391-

oracle jdkMatch1.8.0update391enterprise_performance_pack

oracle jdkMatch11.0.21

oracle jdkMatch17.0.9

oracle jdkMatch21.0.1

oracle jreMatch1.8.0update391-

oracle jreMatch1.8.0update391enterprise_performance_pack

oracle jreMatch11.0.21

oracle jreMatch17.0.9

oracle jreMatch21.0.1

[
  {
    "vendor": "Oracle Corporation",
    "product": "Java SE JDK and JRE",
    "versions": [
      {
        "version": "Oracle Java SE:8u391",
        "status": "affected"
      },
      {
        "version": "Oracle Java SE:8u391-perf",
        "status": "affected"
      },
      {
        "version": "Oracle Java SE:11.0.21",
        "status": "affected"
      },
      {
        "version": "Oracle Java SE:17.0.9",
        "status": "affected"
      },
      {
        "version": "Oracle Java SE:21.0.1",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM for JDK:17.0.9",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM for JDK:21.0.1",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM Enterprise Edition:20.3.12",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM Enterprise Edition:21.3.8",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM Enterprise Edition:22.3.4",
        "status": "affected"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/security-alerts/cpujan2024.html
security	www.security.netapp.com/advisory/ntap-20240201-0002/
security	www.security.netapp.com/advisory/ntap-20241108-0002/

04 Nov 2025 19:16Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.15.9

EPSS0.00156

SSVC