CVE-2025-30761

CWE-502 — Deserialization of Untrusted Data10 documents8 sources
Severity
5.9MEDIUM
EPSS
0.2%
top 59.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Oracle Corporation Oracle Graalvm Enterprise EditionOracle Corporation Oracle Java SEOracle Graalvm+2 more
Timeline
PublishedJul 15
Latest updateJul 28

Description

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf and 11.0.27; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized crea…

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages6 packages

▶CVEListV5oracle_corporation/oracle_java_se11.0.27, 8u451, 8u451-perf+2
▶NVDoracle/graalvm21.3.14
▶NVDoracle/jdk1.8.0, 11.0.27+1
▶NVDoracle/jre1.8.0, 11.0.27+1

🔴Vulnerability Details

4
OSV
openjdk-8 vulnerabilities↗2025-07-24
▶
CVEList
CVE-2025-30761: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting)↗2025-07-15
▶
OSV
CVE-2025-30761: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting)↗2025-07-15
▶
GHSA
GHSA-4qjg-x4v4-w4j9: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting)↗2025-07-15
▶

📋Vendor Advisories

5
Ubuntu
OpenJDK 11 vulnerabilities↗2025-07-28
▶
Ubuntu
OpenJDK 8 vulnerabilities↗2025-07-24
▶
Red Hat
openjdk: Improve scripting supports (Oracle CPU 2025-07)↗2025-07-15
▶
Oracle
Oracle Oracle Java SE Risk Matrix: Scripting — CVE-2025-30761↗2025-07-15
▶
Debian
CVE-2025-30761: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product o...↗2025
▶
CVE-2025-30761 (MEDIUM CVSS 5.9) | Vulnerability in the Oracle Java SE | cvebase.io