CVE-2025-30691

CWE-284 — Improper Access ControlCWE-120 — Classic Buffer Overflow21 documents8 sources
Severity
4.8MEDIUM
EPSS
0.4%
top 41.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Oracle Corporation Oracle Java SEOracle Graalvm FOR JDKOracle JDK+1 more
Timeline
PublishedApr 15
Latest updateMay 26

Description

Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.6, 24; Oracle GraalVM for JDK: 21.0.6 and 24. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as unauthorized read access to a subset of Orac…

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:NExploitability: 2.2 | Impact: 2.5

Affected Packages14 packages

▶CVEListV5oracle_corporation/oracle_java_se21.0.6, 24+1
▶NVDoracle/graalvm21.0.6, 24+1
▶NVDoracle/jdk21.0.6, 24+1
▶NVDoracle/jre21.0.6, 24+1
▶Ubuntuopenjdk-8< 8u452-ga~us1-0ubuntu1~20.04+4

🔴Vulnerability Details

10
OSV
openjdk-21-crac vulnerabilities↗2025-05-26
▶
OSV
openjdk-17-crac vulnerabilities↗2025-05-26
▶
OSV
openjdk-17 vulnerabilities↗2025-05-06
▶
OSV
openjdk-lts vulnerabilities↗2025-05-06
▶
OSV
openjdk-8 vulnerabilities↗2025-05-06
▶

📋Vendor Advisories

10
Ubuntu
CRaC JDK 21 vulnerabilities↗2025-05-26
▶
Ubuntu
CRaC JDK 17 vulnerabilities↗2025-05-26
▶
Ubuntu
OpenJDK 24 vulnerabilities↗2025-05-06
▶
Ubuntu
OpenJDK 21 vulnerabilities↗2025-05-06
▶
Ubuntu
OpenJDK 8 vulnerabilities↗2025-05-06
▶
CVE-2025-30691 (MEDIUM CVSS 4.8) | Vulnerability in Oracle Java SE (co | cvebase.io