CVE-2024-21098
published 2024-04-16CVE-2024-21098: Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler). Supported versions that are…
PriorityP413low3.7CVSS 3.1
AVNACHPRNUINSUCNINAL
EPSS
0.56%
42.9th percentile
Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | graalvm | — | — |
| oracle | graalvm | — | — |
| oracle | graalvm_for_jdk | — | — |
| oracle | graalvm_for_jdk | — | — |
| oracle | graalvm_for_jdk | — | — |
| oracle_corporation | graalvm | — | — |
| oracle_corporation | graalvm | — | — |
| oracle_corporation | graalvm | — | — |
| oracle_corporation | graalvm | — | — |
| oracle_corporation | graalvm | — | — |
CVSS provenance
nvdv3.13.7LOWCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
osv3.7LOW
vendor_oracle4.3LOW
vendor_redhat3.7LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-v6p9-97jc-949f: Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler)
ghsa_unreviewed·2024-04-17
CVE-2024-21098 [LOW] GHSA-v6p9-97jc-949f: Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler)
Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
OSV
CVE-2024-21098: Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler)
osv·2024-04-16·CVSS 3.7
CVE-2024-21098 [LOW] CVE-2024-21098: Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler)
Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
Oracle
Oracle Oracle Database Server Risk Matrix: Multilingual Engine — CVE-2024-21098
vendor_oracle·2024-07-15·CVSS 4.3
CVE-2024-21098 [LOW] Oracle Oracle Database Server Risk Matrix: Multilingual Engine — CVE-2024-21098
Oracle Oracle Database Server Risk Matrix: Multilingual Engine vulnerability
CVE: CVE-2024-21098
CVSS: 4.3
Protocol: Oracle Net
Remote exploit: No
Affected versions: Network
Advisory: cpujul2024 (JUL 2024)
Red Hat
graalvm: unauthorized ability to cause a partial denial of service
vendor_redhat·2024-04-16·CVSS 3.7
CVE-2024-21098 [LOW] CWE-285 graalvm: unauthorized ability to cause a partial denial of service
graalvm: unauthorized ability to cause a partial denial of service
Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/
Oracle
Oracle Oracle Java SE Risk Matrix: Compiler — CVE-2024-21098
vendor_oracle·2024-04-15·CVSS 3.7
CVE-2024-21098 [LOW] Oracle Oracle Java SE Risk Matrix: Compiler — CVE-2024-21098
Oracle Oracle Java SE Risk Matrix: Compiler vulnerability
CVE: CVE-2024-21098
CVSS: 3.7
Protocol: Multiple
Remote exploit: Yes
Affected versions: Network
Advisory: cpuapr2024 (APR 2024)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-04-16
Published