Oracle Java SE Libraries Vulnerability Allowing Unauthorized Data Access

A vulnerability has been identified in Oracle Java SE version 25.0.1, specifically within the Libraries component. This vulnerability, which is difficult to exploit, allows an unauthenticated attacker with network access to compromise Java SE. Successful exploitation could lead to unauthorized update, insert, or delete access to some data accessible by Java SE. The issue arises in Java deployments that run untrusted code from the internet, such as sandboxed Java Web Start applications or applets, and rely on the Java sandbox for security. It does not affect server deployments that only run trusted code.

Impact

Exploitation of this vulnerability could result in unauthorized modifications or deletions of data accessible to Oracle Java SE.