{"schemaVersion":3,"id":"CVE-2025-50059","aliases":["UBUNTU-CVE-2025-50059","DEBIAN-CVE-2025-50059","CGA-3xgw-rm6m-9rcw","CGA-7hpg-6m88-9c8w","CGA-7jj5-3fqr-5pxh","CGA-7r73-7c4p-cf96","CGA-8j77-64q7-vfw4","CGA-c3j6-489r-8rp3","CGA-gc7m-49wr-x25f","CGA-gm7r-w2rp-h2g2","CGA-h6cf-992x-gfj6","CGA-j53m-cgcg-g96c","CGA-mwrc-j679-q5hv","CGA-p7v6-8xp6-mrrj","CGA-pc6p-xv63-rxvx","CGA-rvp3-w6q5-gq5q","CGA-w2c7-6jcc-mpgg","CGA-w5c9-j873-g25j","CGA-2v33-3gwq-f8c9","CGA-3467-4qf7-4cwr","CGA-64ch-7v99-q3wh","CGA-hwg4-gfq3-2fgg"],"status":"published","duplicateOf":null,"title":null,"description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and  24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).","dates":{"published":"2025-07-15T19:27:33.672Z","modified":"2025-11-03T20:05:31.134Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.6,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8.6,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":8.6,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","exploitability":10,"impact":6.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":8.6,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","exploitability":10,"impact":6.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":8.6,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","exploitability":10,"impact":6.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":8.6,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","exploitability":10,"impact":6.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":8.6,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00615,"percentile":0.48493,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.07499999999999998,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.0054},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00573,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00573,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00573,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00573,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00573,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00573,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00573,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00573,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00573,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00573,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00573,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00615,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00615,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00615,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00615,"percentile":0.48493}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0054,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00573,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00573,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00573,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00573,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00573,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00573,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00573,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00573,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00573,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00573,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00573,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00615,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00615,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00615,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00615,"percentile":0.48493}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-284","name":"Improper Access Control","description":"The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","type":"weakness","status":"Incomplete","abstraction":"Pillar","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/284.html"}],"affected":[{"vendor":"chainguard","product":"openjdk-10-jre","name":"openjdk-10-jre","label":"openjdk-10-jre","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-10-jre","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-13-jre","name":"openjdk-13-jre","label":"openjdk-13-jre","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-13-jre","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-14-jre","name":"openjdk-14-jre","label":"openjdk-14-jre","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-14-jre","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-15-jre","name":"openjdk-15-jre","label":"openjdk-15-jre","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-15-jre","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-16-jre","name":"openjdk-16-jre","label":"openjdk-16-jre","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-16-jre","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-19-jre","name":"openjdk-19-jre","label":"openjdk-19-jre","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-19-jre","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-21","name":"openjdk-21","label":"openjdk-21","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-21","purlType":"apk","versions":[{"text":"< 21.0.8-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 21.0.8-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-9-jre","name":"openjdk-9-jre","label":"openjdk-9-jre","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-9-jre","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-crac-17-jre","name":"openjdk-crac-17-jre","label":"openjdk-crac-17-jre","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-crac-17-jre","purlType":"apk","versions":[{"text":"< 17.0.16.8-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 17.0.16.8-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-crac-21-jre","name":"openjdk-crac-21-jre","label":"openjdk-crac-21-jre","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-crac-21-jre","purlType":"apk","versions":[{"text":"< 21.0.8.9-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 21.0.8.9-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"openjdk-10-jre","name":"openjdk-10-jre","label":"openjdk-10-jre","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/openjdk-10-jre","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"openjdk-13-jre","name":"openjdk-13-jre","label":"openjdk-13-jre","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/openjdk-13-jre","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"openjdk-14-jre","name":"openjdk-14-jre","label":"openjdk-14-jre","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/openjdk-14-jre","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"openjdk-15-jre","name":"openjdk-15-jre","label":"openjdk-15-jre","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/openjdk-15-jre","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"openjdk-16-jre","name":"openjdk-16-jre","label":"openjdk-16-jre","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/openjdk-16-jre","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"openjdk-19-jre","name":"openjdk-19-jre","label":"openjdk-19-jre","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/openjdk-19-jre","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"openjdk-21","name":"openjdk-21","label":"openjdk-21","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/openjdk-21","purlType":"apk","versions":[{"text":"< 21.0.8-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 21.0.8-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"openjdk-9-jre","name":"openjdk-9-jre","label":"openjdk-9-jre","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/openjdk-9-jre","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"openjdk-17","name":"openjdk-17","label":"openjdk-17","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/openjdk-17","purlType":"deb","versions":[{"text":"< 17.0.16+8-1~deb12u1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 17.0.16+8-1~deb12u1","eol":null,"hubHref":null},{"vendor":"debian","product":"openjdk-21","name":"openjdk-21","label":"openjdk-21","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/openjdk-21","purlType":"deb","versions":[{"text":"< 21.0.8+9-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 21.0.8+9-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"openjdk-13","name":"openjdk-13","label":"openjdk-13","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/openjdk-13","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"openjdk-16","name":"openjdk-16","label":"openjdk-16","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/openjdk-16","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"openjdk-17","name":"openjdk-17","label":"openjdk-17","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/openjdk-17","purlType":"deb","versions":[{"text":"< 17.0.16+8~us1-0ubuntu1~18.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 17.0.16+8~us1-0ubuntu1~20.04.6","noFixRecorded":false,"fixedIn":null},{"text":"< 17.0.16+8~us1-0ubuntu1~22.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 17.0.16+8~us1-0ubuntu1~24.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 17.0.16+8-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 17.0.16+8~us1-0ubuntu1~18.04.1 | < 17.0.16+8~us1-0ubuntu1~20.04.6 | < 17.0.16+8~us1-0ubuntu1~22.04.1 | < 17.0.16+8~us1-0ubuntu1~24.04.1 | < 17.0.16+8-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"openjdk-17-crac","name":"openjdk-17-crac","label":"openjdk-17-crac","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/openjdk-17-crac","purlType":"deb","versions":[{"text":"< 17.0.16+8-0ubuntu1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 17.0.16+8-0ubuntu1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"openjdk-18","name":"openjdk-18","label":"openjdk-18","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/openjdk-18","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"openjdk-21","name":"openjdk-21","label":"openjdk-21","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/openjdk-21","purlType":"deb","versions":[{"text":"< 21.0.8+9~us1-0ubuntu1~22.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 21.0.8+9~us1-0ubuntu1~24.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 21.0.8+9-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 21.0.8+9~us1-0ubuntu1~22.04.1 | < 21.0.8+9~us1-0ubuntu1~24.04.1 | < 21.0.8+9-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"openjdk-21-crac","name":"openjdk-21-crac","label":"openjdk-21-crac","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/openjdk-21-crac","purlType":"deb","versions":[{"text":"< 21.0.8+9-0ubuntu1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 21.0.8+9-0ubuntu1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"openjdk-9","name":"openjdk-9","label":"openjdk-9","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/openjdk-9","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"openjdk-lts","name":"openjdk-lts","label":"openjdk-lts","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/openjdk-lts","purlType":"deb","versions":[{"text":"< 11.0.28+6-1ubuntu1~18.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 11.0.28+6-1ubuntu1~20.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 11.0.28+6-1ubuntu1~22.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 11.0.28+6-1ubuntu1~24.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 11.0.28+6-1ubuntu1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.28+6-1ubuntu1~18.04.1 | < 11.0.28+6-1ubuntu1~20.04.1 | < 11.0.28+6-1ubuntu1~22.04.1 | < 11.0.28+6-1ubuntu1~24.04.1 | < 11.0.28+6-1ubuntu1","eol":null,"hubHref":null},{"vendor":"oracle corporation","product":"oracle graalvm enterprise edition","name":"Oracle GraalVM Enterprise Edition","label":"oracle graalvm enterprise edition","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"21.3.14","noFixRecorded":false,"fixedIn":null}],"versionsText":"21.3.14","eol":null,"hubHref":"/vendor/oracle_corporation/oracle_graalvm_enterprise_edition"},{"vendor":"oracle corporation","product":"oracle graalvm for jdk","name":"Oracle GraalVM for JDK","label":"oracle graalvm for jdk","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"17.0.15","noFixRecorded":false,"fixedIn":null},{"text":"21.0.7","noFixRecorded":false,"fixedIn":null},{"text":"24.0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"17.0.15 | 21.0.7 | 24.0.1","eol":null,"hubHref":"/vendor/oracle_corporation/oracle_graalvm_for_jdk"},{"vendor":"oracle corporation","product":"oracle java se","name":"Oracle Java SE","label":"oracle java se","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"8u451-perf","noFixRecorded":false,"fixedIn":null},{"text":"11.0.27","noFixRecorded":false,"fixedIn":null},{"text":"17.0.15","noFixRecorded":false,"fixedIn":null},{"text":"21.0.7","noFixRecorded":false,"fixedIn":null},{"text":"24.0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"8u451-perf | 11.0.27 | 17.0.15 | 21.0.7 | 24.0.1","eol":null,"hubHref":"/vendor/oracle_corporation/oracle_java_se"},{"vendor":"oracle","product":"graalvm","name":"graalvm","label":"graalvm","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"21.3.14","noFixRecorded":false,"fixedIn":null}],"versionsText":"21.3.14","eol":{"isEol":true,"eolDate":"2024-03-19T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"21","label":"21","eolFrom":"2024-03-19T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"21.0.2"},"product":{"name":"graalvm-ce","label":"GraalVM Community Edition","category":"lang"}},"hubHref":"/vendor/oracle/graalvm"},{"vendor":"oracle","product":"graalvm_for_jdk","name":"graalvm for jdk","label":"graalvm_for_jdk","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"17.0.15","noFixRecorded":false,"fixedIn":null},{"text":"21.0.7","noFixRecorded":false,"fixedIn":null},{"text":"24.0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"17.0.15 | 21.0.7 | 24.0.1","eol":null,"hubHref":"/vendor/oracle/graalvm_for_jdk"},{"vendor":"oracle","product":"jdk","name":"jdk","label":"jdk","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.8.0:update451","noFixRecorded":false,"fixedIn":null},{"text":"11.0.27","noFixRecorded":false,"fixedIn":null},{"text":"17.0.15","noFixRecorded":false,"fixedIn":null},{"text":"21.0.7","noFixRecorded":false,"fixedIn":null},{"text":"24.0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.8.0:update451 | 11.0.27 | 17.0.15 | 21.0.7 | 24.0.1","eol":{"isEol":true,"eolDate":"2023-09-30T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"11","label":"11 (LTS)","eolFrom":"2023-09-30T00:00:00.000Z","isLts":true,"isMaintained":true,"latestVersion":"11.0.32.1"},"product":{"name":"oracle-jdk","label":"Oracle JDK","category":"lang"}},"hubHref":"/vendor/oracle/jdk"},{"vendor":"oracle","product":"jre","name":"jre","label":"jre","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.8.0:update451","noFixRecorded":false,"fixedIn":null},{"text":"11.0.27","noFixRecorded":false,"fixedIn":null},{"text":"17.0.15","noFixRecorded":false,"fixedIn":null},{"text":"21.0.7","noFixRecorded":false,"fixedIn":null},{"text":"24.0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.8.0:update451 | 11.0.27 | 17.0.15 | 21.0.7 | 24.0.1","eol":{"isEol":true,"eolDate":"2023-09-30T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"11","label":"11 (LTS)","eolFrom":"2023-09-30T00:00:00.000Z","isLts":true,"isMaintained":true,"latestVersion":"11.0.32.1"},"product":{"name":"oracle-jdk","label":"Oracle JDK","category":"lang"}},"hubHref":"/vendor/oracle/jre"}],"affectedCount":36,"eol":{"hasEol":true,"count":3},"references":[{"url":"https://www.oracle.com/security-alerts/cpujul2025.html","label":"www.oracle.com/security-alerts/cpujul2025.html","hostname":"www.oracle.com","tags":["Vendor Advisory","REPORT","Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/08/msg00014.html","label":"lists.debian.org/debian-lts-announce/2025/08/msg00014.html","hostname":"lists.debian.org","tags":["WEB"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/07/msg00011.html","label":"lists.debian.org/debian-lts-announce/2025/07/msg00011.html","hostname":"lists.debian.org","tags":["WEB"]},{"url":"https://ubuntu.com/security/CVE-2025-50059","label":"ubuntu.com/security/CVE-2025-50059","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-50059","label":"www.cve.org/CVERecord?id=CVE-2025-50059","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-7669-1","label":"ubuntu.com/security/notices/USN-7669-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7668-1","label":"ubuntu.com/security/notices/USN-7668-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7672-1","label":"ubuntu.com/security/notices/USN-7672-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7673-1","label":"ubuntu.com/security/notices/USN-7673-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7674-1","label":"ubuntu.com/security/notices/USN-7674-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7690-1","label":"ubuntu.com/security/notices/USN-7690-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-50059","label":"security-tracker.debian.org/tracker/CVE-2025-50059","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DLA-4248-1","DLA-4275-1","DSA-5972-1","MGASA-2025-0233","OPENSUSE-SU-2025:15356-1","OPENSUSE-SU-2025:15357-1","OPENSUSE-SU-2025:15358-1","OPENSUSE-SU-2025:15362-1","OPENSUSE-SU-2025:15391-1","OPENSUSE-SU-2025:15393-1","OPENSUSE-SU-2026:20943-1","OPENSUSE-SU-2026:20947-1","RHSA-2025:10865","RHSA-2025:10867","RHSA-2025:10873","RHSA-2025:13656","SUSE-SU-2025:02545-1","SUSE-SU-2025:02563-1","SUSE-SU-2025:02657-1","SUSE-SU-2025:02666-1","SUSE-SU-2025:02667-1","SUSE-SU-2025:03236-1","SUSE-SU-2025:03262-1","USN-7668-1","USN-7669-1","USN-7672-1","USN-7673-1","USN-7674-1","USN-7690-1"],"duplicates":[],"related":["CGA-343V-F47W-J9JR","CGA-556P-55PV-67V6","CGA-Q8GQ-CC2G-3MHC","CGA-VV92-RF7V-M33X","OPENSUSE-SU-2025:15356-1","OPENSUSE-SU-2025:15357-1","OPENSUSE-SU-2025:15358-1","OPENSUSE-SU-2025:15362-1","OPENSUSE-SU-2025:15391-1","OPENSUSE-SU-2025:15393-1","OPENSUSE-SU-2026:20943-1","OPENSUSE-SU-2026:20947-1","SUSE-SU-2025:02545-1","SUSE-SU-2025:02563-1","SUSE-SU-2025:02657-1","SUSE-SU-2025:02666-1","SUSE-SU-2025:02667-1","SUSE-SU-2025:03236-1","SUSE-SU-2025:03262-1","USN-7668-1","USN-7669-1","USN-7672-1","USN-7673-1","USN-7674-1","USN-7690-1"]},"timeline":[{"kind":"published","date":"2025-07-15T19:27:33.672Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-11-03T20:05:31.134Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":35,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T16:43:41.357Z","stale":false,"partial":false}}