CVE-2025-50059

CWE-284 — Improper Access ControlCWE-201CWE-416 — Use After Free21 documents9 sources
Severity
8.6HIGH
EPSS
0.1%
top 67.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
7
Oracle Corporation Oracle Graalvm Enterprise EditionOracle Corporation Oracle Graalvm FOR JDKOracle Corporation Oracle Java SE+4 more
Timeline
PublishedJul 15
Latest updateJan 15

Description

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM fo…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:NExploitability: 3.9 | Impact: 4.0

Affected Packages9 packages

▶CVEListV5oracle_corporation/oracle_java_se5 versions+4
▶NVDoracle/graalvm4 versions+3
▶CVEListV5oracle_corporation/oracle_graalvm_for_jdk17.0.15, 21.0.7, 24.0.1+2
▶NVDoracle/jdk5 versions+4

🔴Vulnerability Details

9
OSV
openjdk-17 vulnerabilities↗2025-08-11
▶
OSV
openjdk-17-crac vulnerabilities↗2025-07-28
▶
OSV
openjdk-21-crac vulnerabilities↗2025-07-28
▶
OSV
openjdk-lts vulnerabilities↗2025-07-28
▶
OSV
openjdk-24 vulnerabilities↗2025-07-24
▶

📋Vendor Advisories

11
Oracle
Oracle Oracle Commerce Risk Matrix: Content Acquisition System, Workbench, Endeca Application Controller (Oracle Java SE) — CVE-2025-50059↗2026-01-15
▶
Ubuntu
OpenJDK 17 vulnerabilities↗2025-08-11
▶
Ubuntu
OpenJDK 11 vulnerabilities↗2025-07-28
▶
Ubuntu
CRaC JDK 17 vulnerabilities↗2025-07-28
▶
Ubuntu
CRaC JDK 21 vulnerabilities↗2025-07-28
▶
CVE-2025-50059 (HIGH CVSS 8.6) | Vulnerability in the Oracle Java SE | cvebase.io