CVE-2024-21003
CVSS 3.1 Score 3.1 of 10 (low)
Details
Summary
CVE-2024-21003 is a vulnerability affecting Oracle Java SE and Oracle GraalVM Enterprise Edition, specifically versions 8u401 of Java SE and 20.3.13, as well as 21.3.9 of GraalVM Enterprise Edition. This issue allows unauthenticated attackers, with network access, to exploit a difficult-to-exploit vulnerability in JavaFX, potentially compromising Oracle Java SE and Oracle GraalVM Enterprise Edition. The vulnerability results in unauthorized access to some data, requiring human interaction from the victim. CVSS Base Score is 3.1 for integrity impacts, and the attack vector is network access with high complexity and user interaction required. This vulnerability primarily affects Java deployments that load and run untrusted code and rely on the sandbox for security, typically in clients running sandboxed Java Web Start applications or applets. Servers that load and run only trusted code are not affected.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions