BIT-jre-2026-60589

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/jre/BIT-jre-2026-60589.json

JSON Data

https://api.osv.dev/v1/vulns/BIT-jre-2026-60589

Aliases

Downstream

MINI (2)

Published

2026-08-26T15:02:29Z

Modified

2026-09-18T10:45:03Z

Summary

[none]

Details

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

Database specific

{
    "cpes":  [
        "cpe:2.3:a:bellsoft:libericajre:*:*:*:*:*:*:*:*"
    ],
    "severity":  "Low"
}

References

Affected packages

Bitnami / jre

Package

Name: jre
Purl: pkg:bitnami/jre

Severity

3.7 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.8.0

Introduced

1.9.0

Fixed

8.0.503

Introduced

9.0.0

Fixed

11.0.32-1

Introduced

12.0.0

Fixed

17.0.20-1

Introduced

18.0.0

Fixed

21.0.12-1

Introduced

22.0.0

Fixed

25.0.4-1

Introduced

26.0.0

Fixed

26.0.2-1

Database specific

source

"https://github.com/bitnami/vulndb/tree/main/data/jre/BIT-jre-2026-60589.json"