CVE-2025-30752
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-07-15

Last updated on: 2025-08-04

Assigner: Oracle

Description
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle Java SE: 24.0.1; Oracle GraalVM for JDK: 24.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-07-15
Last Modified
2025-08-04
Generated
2026-05-07
AI Q&A
2025-07-15
EPSS Evaluated
2026-05-05
NVD
CVE-2025-30752
EUVD
EUVD-2025-21527
Affected Vendors & Products
Showing 3 associated CPEs
Vendor Product Version / Range
oracle graalvm_for_jdk 24.0.1
oracle jdk 24.0.1
oracle jre 24.0.1
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-400 The product does not properly control the allocation and maintenance of a limited resource.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability exists in Oracle Java SE and Oracle GraalVM for JDK version 24.0.1, specifically in the Compiler component. It is difficult to exploit and allows an unauthenticated attacker with network access via multiple protocols to compromise these products. The vulnerability affects Java deployments that run untrusted code in sandboxed environments, such as Java Web Start applications or Java applets, relying on the Java sandbox for security. It does not affect server deployments that run only trusted code. Successful exploitation can cause a partial denial of service (partial DOS).


How can this vulnerability impact me? :

If exploited, this vulnerability can allow an attacker to cause a partial denial of service (partial DOS) on Oracle Java SE or Oracle GraalVM for JDK. This means that the availability of the affected Java applications could be disrupted, potentially impacting the functionality of client-side Java applications that run untrusted code.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart