CVE-2025-61755
BaseFortify
Publication date: 2025-10-21
Last updated on: 2025-10-27
Assigner: Oracle
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| oracle | graalvm_for_jdk | 17.0.16 |
| oracle | graalvm_for_jdk | 21.0.8 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-862 | The product does not perform an authorization check when an actor attempts to access a resource or perform an action. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the Oracle GraalVM for JDK product, specifically in the Compiler component. It affects versions 17.0.16 and 21.0.8. The vulnerability is difficult to exploit but allows an unauthenticated attacker with network access through multiple protocols to compromise the system. Successful exploitation can lead to unauthorized read access to some data accessible by Oracle GraalVM for JDK.
How can this vulnerability impact me? :
The impact of this vulnerability is unauthorized read access to a subset of data within Oracle GraalVM for JDK. This means sensitive or confidential information could be exposed to attackers without proper authorization. However, the vulnerability does not allow modification or disruption of data or services.