CVE-2025-50065

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-50065
Vulnerability in the Oracle GraalVM for JDK product of Oracle Java SE (component: Native Image). The supported version that is affected is Oracle GraalVM for JDK: 24.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM for JDK. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GraalVM for JDK. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

3.7 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://www.oracle.com/security-alerts/cpujul2025.html Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:oracle:graalvm_for_jdk:24.0.1:*:*:*:*:*:*:*
History

04 Aug 2025, 21:17

Type Values Removed Values Added
References () https://www.oracle.com/security-alerts/cpujul2025.html - () https://www.oracle.com/security-alerts/cpujul2025.html - Vendor Advisory
CPE cpe:2.3:a:oracle:graalvm_for_jdk:24.0.1:*:*:*:*:*:*:*
First Time Oracle graalvm For Jdk
Oracle

16 Jul 2025, 16:15

Type Values Removed Values Added
CWE CWE-269

16 Jul 2025, 14:59

Type Values Removed Values Added
Summary
  • (es) Vulnerabilidad en Oracle GraalVM para JDK de Oracle Java SE (componente: Imagen Nativa). La versión compatible afectada es Oracle GraalVM para JDK: 24.0.1. Esta vulnerabilidad, difícil de explotar, permite a un atacante no autenticado con acceso a la red vía HTTP comprometer Oracle GraalVM para JDK. Los ataques con éxito de esta vulnerabilidad pueden permitir que personas no autorizadas causen una denegación de servicio parcial (DOS parcial) de Oracle GraalVM para JDK. Puntuación base de CVSS 3.1: 3.7 (Afecta a la disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

15 Jul 2025, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-15 20:15

Updated : 2025-08-04 21:17

NVD link : CVE-2025-50065

Mitre link : CVE-2025-50065

CVE.ORG link : CVE-2025-50065

JSON object : View

Products Affected

oracle

  • graalvm_for_jdk
CWE
CWE-269

Improper Privilege Management