CVE-2023-22043 — Corporation Java SE JDK AND JRE vulnerability

8 documents7 sources

Severity

5.9MEDIUMNVD

EPSS

0.2%

top 51.73%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Corporation Java SE JDK AND JRE Oracle JDK Oracle JRE

Timeline

PublishedJul 18

Latest updateOct 15

Description

Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u371. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients r…

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5oracle_corporation/java_se_jdk_and_jreOracle Java SE:8u371

▶NVDoracle/jdk1.8.0

▶NVDoracle/jre1.8.0

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

CVEList

CVE-2023-22043: Vulnerability in Oracle Java SE (component: JavaFX)↗2023-07-18

▶

GHSA

GHSA-grjf-4ggg-f6cm: Vulnerability in Oracle Java SE (component: JavaFX)↗2023-07-18

▶

OSV

CVE-2023-22043: Vulnerability in Oracle Java SE (component: JavaFX)↗2023-07-18

▶

📋Vendor Advisories

Oracle

Oracle Oracle Commerce Risk Matrix: Content Acquisition System (Oracle Java SE) — CVE-2023-22043↗2023-10-15

▶

Red Hat

JavaFX: unauthorized creation, deletion or modification access to critical data via multiple protocols↗2023-07-18

▶

Oracle

Oracle Oracle Java SE Risk Matrix: JavaFX — CVE-2023-22043↗2023-07-15

▶

Debian

CVE-2023-22043: openjfx - Vulnerability in Oracle Java SE (component: JavaFX). The supported version tha...↗2023

▶