CVE-2025-21587

Summary

CVE-2025-21587 is a vulnerability affecting multiple versions of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. This issue, located in the JSSE component, is classified as difficult to exploit and allows unauthenticated attackers to compromise these products via multiple protocols. Successful attacks may result in unauthorized access to critical data or complete access to all data for affected systems. The vulnerability can be exploited through APIs in the specified components, making Java deployments, especially those running sandboxed Java Web Start applications or applets, particularly susceptible. The CVSS Base Score is 7.4, indicating high confidentiality and integrity risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.