CVE-2026-47059
LOW
3.7
CVSS 3.1
Metadata
Severity & Metrics
3.7
LOW CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products (3)
| Vendor | Product | Platform | Versions |
|---|---|---|---|
| Oracle Corporation | Oracle GraalVM Enterprise Edition | — | 21.3.18 |
| Oracle Corporation | Oracle GraalVM for JDK | — | 17.0.19, 21.0.11 |
| Oracle Corporation | Oracle Java SE | — | 8u491, 8u491-perf, 11.0.31, 17.0.19 … |
Weakness (CWE)
| CWE | Source | Description |
|---|---|---|
| — | cna | Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. |
CVSS scores (1)
| Score | Severity | Version | Source | Vector |
|---|---|---|---|---|
| 3.7 | LOW | 3.1 | cna | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L |
References (1)
- Oracle Advisory https://www.oracle.com/security-alerts/cpujul2026.html