CVE-2024-20954
CVSS 3.1 Score 3.7 of 10 (low)
Details
Summary
CVE-2024-20954 is a vulnerability affecting the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition components of Oracle Java SE. Affected versions include 17.0.10, 21.0.2, 22 for Oracle GraalVM for JDK, and 20.3.13, 21.3.9 for Oracle GraalVM Enterprise Edition. This issue is classified as difficult to exploit and allows unauthenticated attackers with network access to compromise the systems. Successful exploitation can result in unauthorized read access to a subset of data in these products. The vulnerability has a CVSS 3.1 Base Score of 3.7, focusing on confidentiality impacts.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.