Cyber Resilience

CVE-2025-50063

Oracle Jdk 1.8.0

Published
15 July 2025
Modified
17 June 2026
Patch / advisory
CVSS Score v3.1 7.3
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS Score 0.0025 17th percentile
Risk Priority 52 floored blend · peak EPSS

Summary

CVE-2025-50063 is a high-severity an unspecified weakness vulnerability in Oracle Jdk. Its CVSS base score is 7.3 (High).

Operationally, ranked at the 17th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

Vulnerability in Oracle Java SE (component: Install). The supported version that is affected is Oracle Java SE: 8u451. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE.…

more

Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Java SE. Note: Applies to installation process on client deployment of Java. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H).

CWE(s)

Related Threats

CVEs Like This One

CVE-2026-21947Same product: Oracle Jdk
CVE-2026-47057Same product: Oracle Jdk
CVE-2026-47058Same product: Oracle Jdk
CVE-2026-22008Same product: Oracle Jdk
CVE-2024-21210Same product: Oracle Jdk
CVE-2026-47035Same product: Oracle Jdk
CVE-2026-60526Same product: Oracle Jdk
CVE-2026-47030Same product: Oracle Jdk
CVE-2023-22043Same product: Oracle Jdk
CVE-2026-47034Same product: Oracle Jdk

Affected Assets

oracle
jdk
1.8.0
oracle
jre
1.8.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References