Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-22008

Опубликовано: 21 апр. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 3.7

Описание

Vulnerability in Oracle Java SE (component: Libraries). The supported version that is affected is Oracle Java SE: 25.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).

РелизСтатусПримечание
devel

DNE

esm-apps/focal

ignored

superseded by openjdk-17
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/focal

ignored

superseded by openjdk-17
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

25+ only
esm-apps/bionic

not-affected

25+ only
esm-apps/focal

not-affected

25+ only
esm-apps/jammy

not-affected

25+ only
esm-apps/resolute

not-affected

25+ only
jammy

not-affected

25+ only
noble

not-affected

25+ only
questing

not-affected

25+ only
resolute

not-affected

25+ only
upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

25+ only
esm-apps/resolute

not-affected

25+ only
jammy

DNE

noble

DNE

questing

not-affected

25+ only
resolute

not-affected

25+ only
upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by openjdk-19
noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

25+ only
esm-apps/focal

not-affected

25+ only
esm-apps/jammy

not-affected

25+ only
esm-apps/resolute

not-affected

25+ only
jammy

not-affected

25+ only
noble

not-affected

25+ only
questing

not-affected

25+ only
resolute

not-affected

25+ only
upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

25+ only
esm-apps/resolute

not-affected

25+ only
jammy

DNE

noble

DNE

questing

not-affected

25+ only
resolute

not-affected

25+ only
upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

25.0.3+9-2
jammy

released

25.0.3+9-2~22.04.2
noble

released

25.0.3+9-2~24.04.2
questing

released

25.0.3+9-2~25.10.2
resolute

released

25.0.3+9-2~26.04.2
upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

25.0.3+9-0ubuntu1
esm-apps/resolute

released

25.0.3+9-0ubuntu1~26.04.1
jammy

DNE

noble

DNE

questing

released

25.0.3+9-0ubuntu1~25.10.1
resolute

released

25.0.3+9-0ubuntu1~26.04.1
upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

26.0.1+8-2
jammy

DNE

noble

DNE

questing

released

26.0.1+8-2~25.10.2
resolute

released

26.0.1+8-2~26.04.2
upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

25+ only
esm-apps/bionic

not-affected

25+ only
esm-apps/focal

not-affected

25+ only
esm-apps/jammy

not-affected

25+ only
esm-apps/noble

not-affected

25+ only
esm-apps/resolute

not-affected

25+ only
esm-infra-legacy/xenial

not-affected

25+ only
esm-infra/xenial

ignored

end of ESM support, was needs-triage
jammy

not-affected

25+ only
noble

not-affected

25+ only

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps-legacy/xenial

ignored

no longer supported by upstream
esm-apps/xenial

ignored

end of ESM support, was ignored [no longer supported by upstream]
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

25+ only
esm-apps/noble

not-affected

25+ only
esm-apps/resolute

not-affected

25+ only
esm-infra/bionic

not-affected

25+ only
esm-infra/focal

not-affected

25+ only
jammy

not-affected

25+ only
noble

not-affected

25+ only
questing

not-affected

25+ only
resolute

not-affected

25+ only
upstream

needs-triage

Показывать по

Ссылки на источники

EPSS

Процентиль: 11%
0.00206
Низкий

3.7 Low

CVSS3

Связанные уязвимости

redhat логотип

CVE-2026-22008

CVSS3: 3.7
redhat
3 месяца назад

Vulnerability in Oracle Java SE (component: Libraries). The supported version that is affected is Oracle Java SE: 25.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).

nvd логотип

CVE-2026-22008

CVSS3: 3.7
nvd
3 месяца назад

Vulnerability in Oracle Java SE (component: Libraries). The supported version that is affected is Oracle Java SE: 25.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).

debian логотип

CVE-2026-22008

CVSS3: 3.7
debian
3 месяца назад

Vulnerability in Oracle Java SE (component: Libraries). The supporte ...

github логотип

GHSA-ffgj-wmrh-m8fr

CVSS3: 3.7
github
3 месяца назад

Vulnerability in Oracle Java SE (component: Libraries). The supported version that is affected is Oracle Java SE: 25.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).

fstec логотип

BDU:2026-06609

CVSS3: 3.7
fstec
3 месяца назад

Уязвимость компонента Libraries программной платформы Oracle Java SE, позволяющая нарушителю нарушителю выполнить произвольный код

EPSS

Процентиль: 11%
0.00206
Низкий

3.7 Low

CVSS3