BIT-java-2026-46968

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/java/BIT-java-2026-46968.json

JSON Data

https://api.osv.dev/v1/vulns/BIT-java-2026-46968

Aliases

Published

2026-08-17T05:48:05.429Z

Modified

2026-08-17T08:11:07.887857477Z

Summary

[none]

Details

Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).

Database specific

{
    "severity": "Medium",
    "cpes": [
        "cpe:2.3:a:bellsoft:libericajdk:*:*:*:*:*:*:*:*"
    ]
}

References

Affected packages

Bitnami / java

Package

Name: java
Purl: pkg:bitnami/java

Severity

5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.0

Introduced

1.9.0

Fixed

8.0.501

Introduced

9.0.0

Fixed

11.0.32

Introduced

12.0.0

Fixed

17.0.20

Introduced

18.0.0

Fixed

21.0.12

Introduced

22.0.0

Fixed

25.0.4

Introduced

26.0.0

Fixed

26.0.2

Database specific

source

"https://github.com/bitnami/vulndb/tree/main/data/java/BIT-java-2026-46968.json"