PT-2025-29604 · Oracle · Oracle Java Se+2

Published 2025-07-15 · Updated 2026-05-08 · CVE-2025-30752

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 24.0.1 Oracle GraalVM for JDK version 24.0.1

Description A difficult-to-exploit vulnerability exists in Oracle Java SE and Oracle GraalVM for JDK (component: Compiler). An unauthenticated attacker with network access via multiple protocols can compromise the software, potentially resulting in a partial denial of service (partial DOS). This vulnerability applies to Java deployments that load and run untrusted code, such as sandboxed Java Web Start applications or sandboxed Java applets. It does not apply to deployments that load and run only trusted code.

Recommendations For Oracle Java SE version 24.0.1, ensure Java deployments only load and run trusted code. For Oracle GraalVM for JDK version 24.0.1, ensure Java deployments only load and run trusted code.

Fix

DoS

RCE

Resource Exhaustion

Weakness Enumeration

CWE-20

CWE-400

Related Identifiers

BDU:2025-09722

BIT-JAVA-2025-30752

BIT-JAVA-MIN-2025-30752

BIT-JRE-2025-30752

CVE-2025-30752

Affected Products

Java Platform

Oracle Graalvm For Jdk

Oracle Java Se

References · 14

• https://osv.dev/vulnerability/BIT-jre-2025-30752 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-30752 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-30752 · Security Note
• https://osv.dev/vulnerability/CVE-2025-30752 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-30752 · Vendor Advisory
• https://oracle.com/security-alerts/cpujul2025.html · Vendor Advisory
• https://osv.dev/vulnerability/BIT-java-2025-30752 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09722 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-30752 · Security Note
• https://osv.dev/vulnerability/BIT-java-min-2025-30752 · Vendor Advisory
• https://cybersecurity-help.cz/vdb/SB2025071686 · Note
• https://twitter.com/dailycve/status/1952510506708742533 · Twitter Post
• https://twitter.com/CVEnew/status/1945207876827410657 · Twitter Post
• https://oracle.com/security-alerts/cpujul2025verbose.html · Note