PT-2025-29618

CVE-2025-50063

·

Published

2025-07-15

·

Updated

2026-05-08

Description by

CVSS 3.1
7.3
High
MetricsAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u451 and 8u451-perf
Description An issue exists in the Oracle Java SE Install component that allows a low-privileged attacker with logon access to the infrastructure where Oracle Java SE executes to compromise the software. Successful attacks require human interaction from a person other than the attacker and can result in a takeover of Oracle Java SE. This applies to the installation process on client deployments of Java.
Recommendations Update Oracle Java SE to a version newer than 8u451-perf.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
BIT-JAVA-2025-50063
BIT-JAVA-MIN-2025-50063
BIT-JRE-2025-50063
Found an issue in the description? Have something to add? Feel free to write us 👾