CVE-2023-22051

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-22051

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-22051.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-22051

Published

2023-07-18T20:18:33.486Z

Modified

2026-07-15T02:07:57.402652089Z

Severity

3.7 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

[none]

Details

Vulnerability in the Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: GraalVM Compiler). Supported versions that are affected are Oracle GraalVM Enterprise Edition: 21.3.6, 22.3.2; Oracle GraalVM for JDK: 17.0.7 and 20.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/22xxx/CVE-2023-22051.json",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "Oracle GraalVM Enterprise Edition:21.3.6"
                },
                {
                    "last_affected": "Oracle GraalVM Enterprise Edition:21.3.6"
                },
                {
                    "introduced": "Oracle GraalVM Enterprise Edition:22.3.2"
                },
                {
                    "last_affected": "Oracle GraalVM Enterprise Edition:22.3.2"
                },
                {
                    "introduced": "Oracle GraalVM for JDK:17.0.7"
                },
                {
                    "last_affected": "Oracle GraalVM for JDK:17.0.7"
                },
                {
                    "introduced": "Oracle GraalVM for JDK:20.0.1"
                },
                {
                    "last_affected": "Oracle GraalVM for JDK:20.0.1"
                }
            ]
        }
    ],
    "cna_assigner": "oracle"
}

References

Affected packages

Git / github.com/graalvm/graalvm-ce-builds

Affected ranges

Type

GIT

Repo

https://github.com/graalvm/graalvm-ce-builds

Events

Introduced

78e9d6d2d69753957b76d4dca05cac497221ff85

Last affected

78e9d6d2d69753957b76d4dca05cac497221ff85

Database specific

{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:oracle:graalvm:22.3.2:*:*:*:enterprise:*:*:*",
    "extracted_events": [
        {
            "introduced": "22.3.2"
        },
        {
            "last_affected": "22.3.2"
        }
    ]
}

Affected versions

22.*

22.3.2

vm-21.*

vm-21.3.3.1

vm-22.*

vm-22.2.0

vm-22.3.0

vm-22.3.1

vm-22.3.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-22051.json"