Логотип exploitDog
bind:"BDU:2025-14036" OR bind:"CVE-2025-61748"
Консоль
Логотип exploitDog

exploitDog

bind:"BDU:2025-14036" OR bind:"CVE-2025-61748"

Количество 14

Количество 14

fstec логотип

BDU:2025-14036

3 месяца назад

Уязвимость компонента Libraries виртуальных машин Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK и программной платформы Oracle Java SE, позволяющая нарушителю оказать воздействие на целостность данных

CVSS3: 3.7
EPSS: Низкий
redos логотип

ROS-20251124-11

около 2 месяцев назад

Множественные уязвимости java-21-openjdk

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2025-61748

3 месяца назад

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 21.0.8 and 25; Oracle GraalVM for JDK: 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that loa...

CVSS3: 3.7
EPSS: Низкий
nvd логотип

CVE-2025-61748

3 месяца назад

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 21.0.8 and 25; Oracle GraalVM for JDK: 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load

CVSS3: 3.7
EPSS: Низкий
debian логотип

CVE-2025-61748

3 месяца назад

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...

CVSS3: 3.7
EPSS: Низкий
github логотип

GHSA-6ch4-24w6-v6jv

3 месяца назад

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 21.0.8 and 25; Oracle GraalVM for JDK: 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that lo...

CVSS3: 3.7
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2025:20123-1

около 2 месяцев назад

Security update for java-21-openjdk

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:4287-1

около 2 месяцев назад

Security update for java-25-openjdk

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:3965-1

2 месяца назад

Security update for java-1_8_0-ibm

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:3964-1

2 месяца назад

Security update for java-1_8_0-ibm

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:3859-1

3 месяца назад

Security update for java-21-openjdk

EPSS: Низкий
rocky логотип

RLSA-2025:21485

около 2 месяцев назад

Moderate: java-25-openjdk security update

EPSS: Низкий
oracle-oval логотип

ELSA-2025-21485

около 1 месяца назад

ELSA-2025-21485: java-25-openjdk security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-18824

3 месяца назад

ELSA-2025-18824: java-21-openjdk security update (MODERATE)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2025-14036

Уязвимость компонента Libraries виртуальных машин Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK и программной платформы Oracle Java SE, позволяющая нарушителю оказать воздействие на целостность данных

CVSS3: 3.7
0%
Низкий
3 месяца назад
redos логотип
ROS-20251124-11

Множественные уязвимости java-21-openjdk

CVSS3: 7.5
около 2 месяцев назад
ubuntu логотип
CVE-2025-61748

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 21.0.8 and 25; Oracle GraalVM for JDK: 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that loa...

CVSS3: 3.7
0%
Низкий
3 месяца назад
nvd логотип
CVE-2025-61748

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 21.0.8 and 25; Oracle GraalVM for JDK: 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load

CVSS3: 3.7
0%
Низкий
3 месяца назад
debian логотип
CVE-2025-61748

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...

CVSS3: 3.7
0%
Низкий
3 месяца назад
github логотип
GHSA-6ch4-24w6-v6jv

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 21.0.8 and 25; Oracle GraalVM for JDK: 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that lo...

CVSS3: 3.7
0%
Низкий
3 месяца назад
suse-cvrf логотип
openSUSE-SU-2025:20123-1

Security update for java-21-openjdk

около 2 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:4287-1

Security update for java-25-openjdk

около 2 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:3965-1

Security update for java-1_8_0-ibm

2 месяца назад
suse-cvrf логотип
SUSE-SU-2025:3964-1

Security update for java-1_8_0-ibm

2 месяца назад
suse-cvrf логотип
SUSE-SU-2025:3859-1

Security update for java-21-openjdk

3 месяца назад
rocky логотип
RLSA-2025:21485

Moderate: java-25-openjdk security update

около 2 месяцев назад
oracle-oval логотип
ELSA-2025-21485

ELSA-2025-21485: java-25-openjdk security update (MODERATE)

около 1 месяца назад
oracle-oval логотип
ELSA-2025-18824

ELSA-2025-18824: java-21-openjdk security update (MODERATE)

3 месяца назад

Уязвимостей на страницу