KLA63108 Multiple vulnerabilities in Oracle Java SE and GraalVM

🗓️ 16 Jan 2024 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 75 Views

Multiple vulnerabilities in Oracle Java SE and GraalVM. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, execute arbitrary code. Public exploits exist for this vulnerability. Affected products include Oracle GraalVM for JDK 17.0.9, 21.0.1, Oracle GraalVM Enterprise Edition 20.3.12, 21.3.8, 22.3.4, and Oracle Java SE 11.0.21, 17.0.9, 21.0.1, 8u391, 8u391-perf. Update to the latest version. ACE impact

Reporter	Title	Published	Views	Family All 3634
RedhatCVE	CVE-2023-39325	11 Oct 202317:12	–	redhatcve
RedhatCVE	CVE-2023-44487	10 Oct 202321:13	–	redhatcve
RedhatCVE	CVE-2023-45802	19 Oct 202319:44	–	redhatcve
RedhatCVE	CVE-2023-5072	26 Oct 202318:27	–	redhatcve
RedhatCVE	CVE-2023-6596	17 Jan 202419:30	–	redhatcve
RedhatCVE	CVE-2024-12698	16 Dec 202422:50	–	redhatcve
RedhatCVE	CVE-2024-20918	17 Jan 202409:12	–	redhatcve
RedhatCVE	CVE-2024-20919	17 Jan 202409:13	–	redhatcve
RedhatCVE	CVE-2024-20921	17 Jan 202409:12	–	redhatcve
RedhatCVE	CVE-2024-20922	23 May 202507:50	–	redhatcve

Source	Link
oracle	www.oracle.com/security-alerts/cpujan2024.html
threats	www.threats.kaspersky.com/en/class/Exploit/
threats	www.threats.kaspersky.com/en/product/Oracle-Java-JRE-1.8.x/
statistics	www.statistics.securelist.com/

26 Mar 2025 00:00Current

9.7High risk

Vulners AI Score9.7

CVSS 3.17.5

EPSS0.99999

SSVC