Oracle Java SE JSSE vulnerabilities

Vulnerability in the JSSE component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. It is easily exploitable by an unauthenticated attacker with network access, leading to unauthorized creation, deletion, or modification of critical data as well as unauthorized access to critical data. The vulnerability also applies to Java deployments that load and run untrusted code in a sandbox (e.g., Java Web Start applications or applets).

A vulnerability in the JSSE component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition allows an unauthenticated attacker with network access to compromise confidentiality and integrity. It can be exploited through APIs in the component, such as a web service supplying data to the APIs.

Vulnerability in the JSSE component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. An unauthenticated attacker with network access via HTTPS can cause a partial denial of service (partial DoS). Affects multiple versions including Java SE 8u481, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26, and GraalVM.