Oracle Java SE security vulnerabilities

Oracle Java SE 8u503, 8u503-perf, and 11.0.32.1 versions; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1 versions; as well as Oracle GraalVM Enterprise Edition 21.3.19.1.1 have security vulnerabilities. These vulnerabilities stem from issues with the Utility component. Unauthorized attackers may...

Oracle Java SE permission licensing and access control issues

In Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition products, there are vulnerabilities related to permission management and access control. These vulnerabilities exist in Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 versions;...

CVE-2026-61202

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. Supported versions that are affected are 11.3 and 11.4. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

CVE-2026-60833

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11.4. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successf...

CVE-2026-60834

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11.4. Difficult to exploit vulnerability allows low privileged attacker with network access via RAD to compromise Oracle Solaris. While the vulnerability is in Oracle Solari...

PT-2026-62811

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.4 Description A flaw in the Utility component allows a low-privileged attacker with local access to the infrastructure to compromise the system. Successful exploitation can lead to a full takeover of the operating...

EUVD-2024-18819

Malicious code in bioql PyPI...

Oracle Solaris Utility Unauthorized Access

The vulnerability of the Oracle Solaris operating system’s Utility component is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Oracle Solaris Utility Compromise

The vulnerability of the Oracle Solaris operating system’s Utility component is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the system...

CVE-2024-21105

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

PT-2024-4880 · Oracle · Oracle Solaris

Name of the Vulnerable Software and Affected Versions: Oracle Solaris version 11 Description: The issue is related to insufficient protection of sensitive data in the Utility component of Oracle Solaris. Exploitation of this issue can allow an attacker to gain unauthorized access to protected...

SUSE-SU-2023:3023-1 Security update for java-17-openjdk

This update for java-17-openjdk fixes the following issues: Updated to version jdk-17.0.8+7 July 2023 CPU: - CVE-2023-22006: Fixed vulnerability in the network component bsc1213473. - CVE-2023-22036: Fixed vulnerability in the utility component bsc1213474. - CVE-2023-22041: Fixed vulnerability in...

SUSE: Security Advisory (SUSE-SU-2023:2990-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:2990-1 Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: Updated to jdk-11.0.20+8 July 2023 CPU: - CVE-2023-22006: Fixed vulnerability in the network component bsc1213473. - CVE-2023-22036: Fixed vulnerability in the utility component bsc1213474. - CVE-2023-22041: Fixed vulnerability in the...

Oracle Solaris Utility Error

The vulnerability of the Oracle Solaris operating system’s Utility component is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Oracle Solaris Utility Arbitrary Action

The vulnerability of the Utility component in Oracle Solaris is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to perform arbitrary actions...

PT-2023-2542 · Oracle · Oracle Solaris

Name of the Vulnerable Software and Affected Versions: Oracle Solaris versions 10 and 11 Description: The issue is related to errors in processing input data in the Utility component of Oracle Solaris. Exploitation of this issue can allow an attacker to execute arbitrary code. Successful attacks...

Security Bulletin: IBM SDK, Java Technology Edition, Security Update July 2022

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, 8 that is used by Rational Application Developer®. These issues were disclosed as part of the IBM Java SDK updates up to July 2022. IBM 8 SR7 FP15 1.8.0341. Vulnerability Details CVEID:CVE-2022-21496 DESCRIPTION: An...

Security Bulletin: Enterprise Content Management System Monitor is affected by a vulnerability in Java SE related to the Utility component

Summary Vulnerability found in Java SE related to the Utility component used by Enterprise Content Management System Monitor. Enterprise Content Management System Monitor has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2021-35561 DESCRIPTION: An unspecified vulnerability in Java...

YUI Cross-site Scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML...