Low severity3.7NVD Advisory· Published Oct 16, 2019· Updated Jun 17, 2026

CVE-2019-2894

Description

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

134

osv-coords106 versions
pkg:apk/chainguard/openjdk-11-demos pkg:apk/chainguard/openjdk-11-openj9-default-policy pkg:apk/chainguard/openjdk-12-jre-base pkg:apk/chainguard/openjdk-17-openj9-default-policy pkg:apk/chainguard/openjdk-21-openj9-default-policy pkg:apk/chainguard/openjdk-25-openj9-jmods pkg:apk/chainguard/openjdk-26-openj9-jre pkg:apk/chainguard/openjdk-8-openj9-dbg pkg:apk/wolfi/openjdk-12-jre-base pkg:apk/chainguard/openjdk-11-openj9 pkg:apk/chainguard/openjdk-11-openj9-dbg pkg:apk/chainguard/openjdk-11-openj9-default-jdk pkg:apk/chainguard/openjdk-11-openj9-doc pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:apk/chainguard/openjdk-21-openj9-doc pkg:apk/chainguard/openjdk-21-openj9-jmods pkg:apk/chainguard/openjdk-21-openj9-jre pkg:apk/chainguard/openjdk-11-openj9-default-jvm pkg:apk/chainguard/openjdk-11-openj9-jmods pkg:apk/chainguard/openjdk-12-default-jdk pkg:apk/wolfi/openjdk-12-default-jdk pkg:apk/chainguard/openjdk-12-doc pkg:apk/chainguard/openjdk-12 pkg:apk/chainguard/openjdk-11 pkg:apk/chainguard/openjdk-11-dbg pkg:apk/chainguard/openjdk-11-default-jdk pkg:apk/chainguard/openjdk-11-default-jvm pkg:apk/chainguard/openjdk-11-doc pkg:apk/chainguard/openjdk-11-jmods pkg:apk/chainguard/openjdk-11-jre pkg:apk/chainguard/openjdk-11-jre-base pkg:apk/chainguard/openjdk-11-jre-doc pkg:apk/chainguard/openjdk-11-jre-headless pkg:apk/wolfi/openjdk-11 pkg:apk/wolfi/openjdk-11-dbg pkg:apk/wolfi/openjdk-11-default-jdk pkg:apk/wolfi/openjdk-11-default-jvm pkg:apk/wolfi/openjdk-11-doc pkg:apk/wolfi/openjdk-11-jmods pkg:apk/wolfi/openjdk-11-jre pkg:apk/wolfi/openjdk-11-jre-base pkg:apk/wolfi/openjdk-11-jre-doc pkg:apk/wolfi/openjdk-11-jre-headless pkg:apk/chainguard/openjdk-11-openj9-jre pkg:apk/wolfi/openjdk-12-doc pkg:apk/chainguard/openjdk-12-jmods pkg:apk/wolfi/openjdk-12-jmods pkg:apk/chainguard/openjdk-12-jre pkg:apk/chainguard/openjdk-8-openj9 pkg:apk/wolfi/openjdk-11-demos pkg:apk/wolfi/openjdk-12 pkg:apk/chainguard/openjdk-12-default-jvm pkg:apk/wolfi/openjdk-12-default-jvm pkg:apk/chainguard/openjdk-12-demos pkg:apk/wolfi/openjdk-12-demos pkg:apk/wolfi/openjdk-12-jre pkg:apk/chainguard/openjdk-21-openj9 pkg:apk/chainguard/openjdk-21-openj9-dbg pkg:apk/chainguard/openjdk-21-openj9-default-jvm pkg:apk/chainguard/openjdk-21-openj9-default-jdk pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:apk/chainguard/openjdk-17-openj9 pkg:apk/chainguard/openjdk-17-openj9-dbg pkg:apk/chainguard/openjdk-17-openj9-default-jdk pkg:apk/chainguard/openjdk-17-openj9-default-jvm pkg:apk/chainguard/openjdk-17-openj9-doc pkg:apk/chainguard/openjdk-17-openj9-jmods pkg:apk/chainguard/openjdk-17-openj9-jre pkg:apk/chainguard/openjdk-8-openj9-default-jdk pkg:apk/chainguard/openjdk-8-openj9-default-jvm pkg:apk/chainguard/openjdk-8-openj9-doc pkg:apk/chainguard/openjdk-8-openj9-jre pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015 pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1 pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/java-1_7_0-openjdk&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4 pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Enterprise%20Storage%205 pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015 pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015 pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4 pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSS pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4 pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4 pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20OpenStack%20Cloud%207 pkg:rpm/opensuse/java-13-openjdk&distro=openSUSE%20Tumbleweed pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP1 pkg:rpm/opensuse/java-1_8_0-openjdk&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/java-11-openjdk&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/java-11-openjdk&distro=openSUSE%20Leap%2015.0 pkg:rpm/opensuse/java-11-openjdk&distro=openSUSE%20Leap%2015.1 pkg:rpm/opensuse/java-1_8_0-openjdk&distro=openSUSE%20Leap%2015.1
< 0+ 105 more
- (no CPE)range: < 0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 12.0.2.10-r10
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.59.0-r1
- (no CPE)range: < 0.59.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 12.0.2.10-r10
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 11.0.5.0-3.3.3
- (no CPE)range: < 1.8.0.232-27.38.1
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 12.0.2.10-r10
- (no CPE)range: < 12.0.2.10-r10
- (no CPE)range: < 12.0.2.10-r10
- (no CPE)range: < 12.0.2.10-r10
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 12.0.2.10-r10
- (no CPE)range: < 12.0.2.10-r10
- (no CPE)range: < 12.0.2.10-r10
- (no CPE)range: < 12.0.2.10-r10
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0
- (no CPE)range: < 12.0.2.10-r10
- (no CPE)range: < 12.0.2.10-r10
- (no CPE)range: < 12.0.2.10-r10
- (no CPE)range: < 12.0.2.10-r10
- (no CPE)range: < 12.0.2.10-r10
- (no CPE)range: < 12.0.2.10-r10
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 1.7.0.241-43.30.1
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 1.8.0.232-27.38.1
- (no CPE)range: < 11.0.5.0-3.36.1
- (no CPE)range: < 11.0.5.0-3.36.1
- (no CPE)range: < 11.0.5.0-3.3.3
- (no CPE)range: < 1.7.0.241-43.30.1
- (no CPE)range: < 1.7.0.241-43.30.1
- (no CPE)range: < 1.7.0.241-43.30.1
- (no CPE)range: < 1.7.0.241-43.30.1
- (no CPE)range: < 1.7.0.241-43.30.1
- (no CPE)range: < 1.7.0.241-43.30.1
- (no CPE)range: < 1.8.0.232-3.27.1
- (no CPE)range: < 1.8.0.232-3.27.1
- (no CPE)range: < 1.7.0.241-43.30.1
- (no CPE)range: < 1.7.0.241-43.30.1
- (no CPE)range: < 1.7.0.241-43.30.1
- (no CPE)range: < 1.7.0.241-43.30.1
- (no CPE)range: < 1.7.0.241-43.30.1
- (no CPE)range: < 1.7.0.241-43.30.1
- (no CPE)range: < 1.7.0.241-43.30.1
- (no CPE)range: < 1.7.0.241-43.30.1
- (no CPE)range: < 1.7.0.241-43.30.1
- (no CPE)range: < 1.7.0.241-43.30.1
- (no CPE)range: < 1.8.0.232-27.38.1
- (no CPE)range: < 1.8.0.232-27.38.1
- (no CPE)range: < 1.8.0.232-27.38.1
- (no CPE)range: < 1.7.0.241-43.30.1
- (no CPE)range: < 13.0.8.0-3.1
- (no CPE)range: < 1.8.0.232-3.27.1
- (no CPE)range: < 1.8.0.302-2.2
- (no CPE)range: < 11.0.12.0-3.1
- (no CPE)range: < 11.0.5.0-lp150.2.28.1
- (no CPE)range: < 11.0.5.0-lp151.3.9.2
- (no CPE)range: < 1.8.0.232-lp151.2.6.1
Oracle Corporation/Java Secpe-rescue2 versions
Java SE: 7u231, 8u221, 11.0.4, 13+ 1 more
- (no CPE)range: Java SE: 7u231, 8u221, 11.0.4, 13
- (no CPE)range: 7u231, 8u221, 11.0.4, 13
Oracle Corporation/Java SE Embeddedllm-fuzzy
Range: 8u221
Oracle Corporation/Jdk4 versions
cpe:2.3:a:oracle:jdk:1.7.0:update231:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:oracle:jdk:1.7.0:update231:*:*:*:*:*:*
- cpe:2.3:a:oracle:jdk:1.8.0:update221:*:*:*:*:*:*
- cpe:2.3:a:oracle:jdk:11.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:jdk:13.0.0:*:*:*:*:*:*:*
Oracle Corporation/Jre4 versions
cpe:2.3:a:oracle:jre:1.7.0:update231:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:oracle:jre:1.7.0:update231:*:*:*:*:*:*
- cpe:2.3:a:oracle:jre:1.8.0:update221:*:*:*:*:*:*
- cpe:2.3:a:oracle:jre:11.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:jre:13.0.0:*:*:*:*:*:*:*
Debian/linux2 versions
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
OpenSUSE/Leap2 versions
cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
- cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
McAfee/Epolicy Orchestrator9 versions
cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0:*:*:*:*:*:*:*
- cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.1:*:*:*:*:*:*:*
- cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*
- cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*
- cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*
- cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*
- cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_4:*:*:*:*:*:*
- cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_5:*:*:*:*:*:*
- cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_6:*:*:*:*:*:*
Canonical/Ubuntu Linux4 versions
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*+ 3 more
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.htmlnvdPatchVendor Advisory
lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.htmlnvdMailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2019/10/02/2nvdMailing ListThird Party Advisory
kc.mcafee.com/corporate/indexnvdThird Party Advisory
lists.debian.org/debian-lts-announce/2019/12/msg00005.htmlnvdMailing ListThird Party Advisory
minerva.crocs.fi.muni.cznvdThird Party Advisory
seclists.org/bugtraq/2019/Oct/27nvdMailing ListThird Party Advisory
seclists.org/bugtraq/2019/Oct/31nvdMailing ListThird Party Advisory
security.netapp.com/advisory/ntap-20191017-0001/nvdThird Party Advisory
usn.ubuntu.com/4223-1/nvdThird Party Advisory
www.debian.org/security/2019/dsa-4546nvdThird Party Advisory
www.debian.org/security/2019/dsa-4548nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.240
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000