Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaScript). Supported versions that are affected are Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GraalVM Enterprise Edition accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://www.oracle.com/security-alerts/cpuoct2022.html |
History
Tue, 24 Sep 2024 20:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: oracle
Published: 2022-10-18T00:00:00
Updated: 2024-09-24T19:36:07.996Z
Reserved: 2021-11-15T00:00:00
Link: CVE-2022-21597
Vulnrichment
Updated: 2024-08-03T02:46:38.585Z
NVD
Status : Modified
Published: 2022-10-18T21:15:11.583
Modified: 2024-11-21T06:45:02.260
Link: CVE-2022-21597
Redhat
No data.