CVE-2024-21145

Summary

CVE-2024-21145 is a vulnerability affecting multiple versions of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. This issue, located in the 2D component, allows unauthenticated attackers with network access to compromise these products via various protocols. Consequences of successful exploitation include unauthorized modification or deletion of some data, as well as unauthorized read access to a subset of accessible data. This vulnerability can be exploited by using APIs, and it poses a significant risk to Java deployments that load and run untrusted code. The CVSS Base Score is 4.8 for Confidentiality and Integrity impacts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.