Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Oracle · Java SE JDK and JRE
Date added (CISA)
2022-03-03
Remediation due
2022-03-24
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
An access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.