CVE-2026-47010
LOW
3.7
CVSS 3.1
Metadata
Severity & Metrics
3.7
LOW CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products (3)
| Vendor | Product | Platform | Versions |
|---|---|---|---|
| Oracle Corporation | Oracle GraalVM Enterprise Edition | — | 21.3.18 |
| Oracle Corporation | Oracle GraalVM for JDK | — | 17.0.19, 21.0.11 |
| Oracle Corporation | Oracle Java SE | — | 8u491, 8u491-perf, 11.0.31, 17.0.19 … |
Weakness (CWE)
| CWE | Source | Description |
|---|---|---|
| — | cna | Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. |
CVSS scores (1)
| Score | Severity | Version | Source | Vector |
|---|---|---|---|---|
| 3.7 | LOW | 3.1 | cna | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N |
References (1)
- Oracle Advisory https://www.oracle.com/security-alerts/cpujul2026.html