Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2024-20952

🗓️ 16 Jan 2024 21:41:20Reported by oracleType 
cve
 cve🔗 web.nvd.nist.gov👁 415 Views

Vulnerability in Oracle Java SE, GraalVM for JDK, and GraalVM Enterprise Edition allows unauthorized access to critical dat

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data
30 Sep 202416:56
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in IBM Java affect IBM SAN Volume Controller, IBM Storwize, IBM Storage Virtualize and IBM FlashSystem products
19 Jun 202415:28
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerability with OpenJDK, commons-compress and spring-web-5.3.27/spring-web-5.3.32 affect IBM Cloud Object Storage Systems (April 2024v1)
1 Apr 202416:26
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Installation Manager and IBM Packaging Utility
7 Mar 202418:55
–ibm
IBM Security Bulletins		Security Bulletin: Due to use of IBM SDK, Java Technology Edition, IBM Tivoli Application Dependency Discovery Manager is vulnerable to multiple vulnerabilities.
16 Aug 202412:06
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in IBM Java, OpenSSL, and libcurl may affect IBM Storage Protect for Virtual Environments: Data Protection for Microsoft Hyper-V
4 Apr 202418:41
–ibm
IBM Security Bulletins		Security Bulletin: IBM Sterling Secure Proxy is vulnerable to multiple issues
4 Feb 202520:56
–ibm
IBM Security Bulletins		Security Bulletin: IBM Security Verify Governance has multiple vulnerabilities
10 Jul 202416:31
–ibm
IBM Security Bulletins		Security Bulletin: Db2 Query Management Facility is vulnerable to IBM Semeru Runtime Quarterly CPU - Jan 2024 - Includes OpenJDK Jan 2024 CPU plus CVE-2024-22361
15 Jan 202522:53
–ibm
IBM Security Bulletins		Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities
27 Jun 202422:37
–ibm
Rows per page
NVD
Vulners
Node
oracleopenjdkRange11–11.0.24
OR
oracleopenjdkRange17–17.0.10
OR
oracleopenjdkRange21–21.0.2
OR
oracleopenjdkMatch8-
OR
oracleopenjdkMatch8milestone1
OR
oracleopenjdkMatch8milestone2
OR
oracleopenjdkMatch8milestone3
OR
oracleopenjdkMatch8milestone4
OR
oracleopenjdkMatch8milestone5
OR
oracleopenjdkMatch8milestone6
OR
oracleopenjdkMatch8milestone7
OR
oracleopenjdkMatch8milestone8
OR
oracleopenjdkMatch8milestone9
OR
oracleopenjdkMatch8update101
OR
oracleopenjdkMatch8update102
OR
oracleopenjdkMatch8update11
OR
oracleopenjdkMatch8update111
OR
oracleopenjdkMatch8update112
OR
oracleopenjdkMatch8update121
OR
oracleopenjdkMatch8update131
OR
oracleopenjdkMatch8update141
OR
oracleopenjdkMatch8update151
OR
oracleopenjdkMatch8update152
OR
oracleopenjdkMatch8update161
OR
oracleopenjdkMatch8update162
OR
oracleopenjdkMatch8update171
OR
oracleopenjdkMatch8update172
OR
oracleopenjdkMatch8update181
OR
oracleopenjdkMatch8update191
OR
oracleopenjdkMatch8update192
OR
oracleopenjdkMatch8update20
OR
oracleopenjdkMatch8update201
OR
oracleopenjdkMatch8update202
OR
oracleopenjdkMatch8update211
OR
oracleopenjdkMatch8update212
OR
oracleopenjdkMatch8update221
OR
oracleopenjdkMatch8update222
OR
oracleopenjdkMatch8update231
OR
oracleopenjdkMatch8update232
OR
oracleopenjdkMatch8update241
OR
oracleopenjdkMatch8update242
OR
oracleopenjdkMatch8update25
OR
oracleopenjdkMatch8update252
OR
oracleopenjdkMatch8update262
OR
oracleopenjdkMatch8update271
OR
oracleopenjdkMatch8update281
OR
oracleopenjdkMatch8update282
OR
oracleopenjdkMatch8update291
OR
oracleopenjdkMatch8update301
OR
oracleopenjdkMatch8update302
OR
oracleopenjdkMatch8update31
OR
oracleopenjdkMatch8update312
OR
oracleopenjdkMatch8update322
OR
oracleopenjdkMatch8update332
OR
oracleopenjdkMatch8update342
OR
oracleopenjdkMatch8update352
OR
oracleopenjdkMatch8update362
OR
oracleopenjdkMatch8update372
OR
oracleopenjdkMatch8update382
OR
oracleopenjdkMatch8update392
OR
oracleopenjdkMatch8update40
OR
oracleopenjdkMatch8update402-b00
OR
oracleopenjdkMatch8update402-b01
OR
oracleopenjdkMatch8update402-b02
OR
oracleopenjdkMatch8update402-b03
OR
oracleopenjdkMatch8update402-b04
OR
oracleopenjdkMatch8update402-b05
OR
oracleopenjdkMatch8update45
OR
oracleopenjdkMatch8update5
OR
oracleopenjdkMatch8update51
OR
oracleopenjdkMatch8update60
OR
oracleopenjdkMatch8update65
OR
oracleopenjdkMatch8update66
OR
oracleopenjdkMatch8update71
OR
oracleopenjdkMatch8update72
OR
oracleopenjdkMatch8update73
OR
oracleopenjdkMatch8update74
OR
oracleopenjdkMatch8update77
OR
oracleopenjdkMatch8update91
OR
oracleopenjdkMatch8update92
Node
oraclegraalvmMatch20.3.12enterprise
OR
oraclegraalvmMatch21.3.8enterprise
OR
oraclegraalvmMatch22.3.4enterprise
OR
oraclegraalvm_for_jdkMatch17.0.9
OR
oraclegraalvm_for_jdkMatch21.0.1
OR
oraclejdkMatch1.8.0update391-
OR
oraclejdkMatch1.8.0update391enterprise_performance_pack
OR
oraclejdkMatch11.0.21
OR
oraclejdkMatch17.0.9
OR
oraclejdkMatch21.0.1
OR
oraclejreMatch1.8.0update391-
OR
oraclejreMatch1.8.0update391enterprise_performance_pack
OR
oraclejreMatch11.0.21
OR
oraclejreMatch17.0.9
OR
oraclejreMatch21.0.1
Node
netappcloud_insights_acquisition_unitMatch-
OR
netappcloud_insights_storage_workload_security_agentMatch-
OR
netapponcommand_insightMatch-
Node
debiandebian_linuxMatch10.0
[
  {
    "vendor": "Oracle Corporation",
    "product": "Java SE JDK and JRE",
    "versions": [
      {
        "version": "Oracle Java SE:8u391",
        "status": "affected"
      },
      {
        "version": "Oracle Java SE:8u391-perf",
        "status": "affected"
      },
      {
        "version": "Oracle Java SE:11.0.21",
        "status": "affected"
      },
      {
        "version": "Oracle Java SE:17.0.9",
        "status": "affected"
      },
      {
        "version": "Oracle Java SE:21.0.1",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM for JDK:17.0.9",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM for JDK:21.0.1",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM Enterprise Edition:20.3.12",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM Enterprise Edition:21.3.8",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM Enterprise Edition:22.3.4",
        "status": "affected"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
03 Nov 2025 22:16Current
7.1High risk
Vulners AI Score7.1
CVSS 3.17.4
EPSS0.00319
SSVC
CWE-416CWE-284
cve-2024-20952oraclejavaseoracle graalvmgraalvm for jdkgraalvm enterprise editionvulnerabilityunauthorized accesscritical datasecuritynvdexploit
415