PT-2025-29618
CVE-2025-50063
·
Published
2025-07-15
·
Updated
2026-05-08
Description by
CVSS 3.1
7.3
HighMetricsAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Oracle Java SE versions 8u451 and 8u451-perf
Description
An issue exists in the Oracle Java SE Install component that allows a low-privileged attacker with logon access to the infrastructure where Oracle Java SE executes to compromise the software. Successful attacks require human interaction from a person other than the attacker and can result in a takeover of Oracle Java SE. This applies to the installation process on client deployments of Java.
Recommendations
Update Oracle Java SE to a version newer than 8u451-perf.
Found an issue in the description? Have something to add? Feel free to write us 👾