onyx

onyx --cves cve-2023-21938

CVE-2023-21938

LOWOpenJDK
score
<0.1
cvss
3.7
epss
1.2%
published
2023-04-18
kev added
—
first seen

Oracle Java SE (8u361, 11.0.18, 17.0.6, 20) and Oracle GraalVM Enterprise Edition (20.3.8, 21.3.4, 22.3.0) contain a vulnerability caused by insecure handling of untrusted code in sandboxed environments, letting unauthenticated network attackers perform unauthorized data modifications, exploit requires loading untrusted code in sandboxed Java Web Start or applets.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2023-04-18 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 1.2%2026-09-23: epss 1.2%2026-09-24: epss 1.2%2026-09-25: epss 1.2%2026-09-26: epss 1.2%2026-09-27: epss 1.2%2026-09-28: epss 1.2%2026-09-29: epss 1.2%2026-09-30: epss 1.2%2026-10-01: epss 1.2%2026-10-02: epss 1.2%2026-10-03: epss 1.2%2026-10-04: epss 1.2%2026-10-05: epss 1.2%2026-10-06: epss 1.2%2026-10-07: epss 1.2%2026-10-08: epss 1.2%2026-10-09: epss 1.2%2026-10-10: epss 1.2%2026-10-11: epss 1.2%2026-10-12: epss 1.2%2026-10-13: epss 1.2%2026-10-14: epss 1.2%2026-10-15: epss 1.2%2026-10-16: epss 1.2%2026-10-18: epss 1.2%2026-10-19: epss 1.2%2026-10-20: epss 1.2%2026-10-21: epss 1.2%1.2%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

NVD-CWE-noinfo

References 7