CVE-2025-50063

highPriorität · verfolgen · 0EPSS 0.003 · 21. PerzentilDEEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.29% (21st) EPSS

CVSS 7.3 · high

Is it mine?

139 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · bewertet 2026-10-27

Vulnerability in Oracle Java SE (component: Install). The supported version that is affected is Oracle Java SE: 8u451. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Java SE. Note: Applies to installation process on client deployment of Java. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H).

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.3

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.7–7.3

v3.17.3highAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.17.3highCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.17.3highCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:Hsecondary · secalert_us@oracle.com USAusnutzbarkeit 1.3 · Auswirkung 5.9

v3.16.7mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-20US

betroffene Produkte (139)

Betroffene Produkte und Versionsbereiche.

Absolute Secure Access Insights <4.30alle Versionencert_bundDE
Absolute Secure Access Server <14.10alle Versionencert_bundDE
Amazon Corretto <11.0.28.6.1alle Versionencert_bundDE
Amazon Corretto <8.462.08.1alle Versionencert_bundDE
Amazon Linux 2alle Versionencert_bundDEcpe:/o:amazon:linux_2:-
Azul Zulualle Versionencert_bundDEcpe:/a:azul:zulu:-
Debian Linuxalle Versionencert_bundDEcpe:/o:debian:debian_linux:-
Dell Avamaralle Versionencert_bundDEcpe:/a:dell:avamar:-
Dell Data Protection Advisoralle Versionencert_bundDEcpe:/a:dell:data_protection_advisor:-
Dell ECS 3.8.1.0-3.8.1.7alle Versionencert_bundDEcpe:/h:dell:ecs:3.8.1.0_-_3.8.1.7
Dell NetWorker NRE <17.0.4alle Versionencert_bundDE
Dell NetWorker NRE <8.0.28alle Versionencert_bundDE
Dell NetWorker Virtual Editionalle Versionencert_bundDEcpe:/a:dell:networker:virtual_edition
HCL BigFix Inventoryalle Versionencert_bundDEcpe:/a:hcltech:bigfix:inventory
Hitachi Command Suitealle Versionencert_bundDEcpe:/a:hitachi:command_suite:-
Hitachi Configuration Manageralle Versionencert_bundDEcpe:/a:hitachi:configuration_manager:-
Hitachi Ops Centeralle Versionencert_bundDEcpe:/a:hitachi:ops_center:-
IBM App Connect Enterprisealle Versionencert_bundDEcpe:/a:ibm:app_connect_enterprise:-
IBM Business Automation Workflowalle Versionencert_bundDEcpe:/a:ibm:business_automation_workflow:-
IBM Business Automation Workflowalle Versionencert_bundDEcpe:/a:ibm:business_automation_workflow:containers

20 von 139 angezeigt

Advisories (4)

Hersteller- und Ökosystem-Meldungen dazu.

WID-SEC-W-2025-1569Oracle Java SE: Mehrere SchwachstellenDeutsch2025-07-15csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Java SE und anderen Java Editionen ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
BIT-java-2025-500632026-05-06vendor · osvUS
Vulnerability in Oracle Java SE (component: Install). The supported version that is affected is Oracle Java SE: 8u451. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Java SE. Note: Applies to installation process on client deployment of Java. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H).
BIT-java-min-2025-500632026-05-06vendor · osvUS
Vulnerability in Oracle Java SE (component: Install). The supported version that is affected is Oracle Java SE: 8u451. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Java SE. Note: Applies to installation process on client deployment of Java. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H).
BIT-jre-2025-500632026-05-08vendor · osvUS
Vulnerability in Oracle Java SE (component: Install). The supported version that is affected is Oracle Java SE: 8u451. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Java SE. Note: Applies to installation process on client deployment of Java. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H).

auch bekannt als (7)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu osv cert_bund NVD CVE.org MITRE

veröffentlicht 2025-07-15geändert 2026-06-17

Referenzen (4)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan