# Oracle Java SE vulnerabilities July 2023 update

Published: 2023-07-18 · Severity: routine · Sectors: government-national, technology
Canonical: https://vorant.io/reports/3b94e9f0-a125-56d5-8851-f242fbabb972/oracle-java-se-vulnerabilities-july-2023-update

> Oracle Java SE contains critical vulnerabilities; apply updates urgently as impacts are significant.

The Japanese Information-technology Promotion Agency (IPA) issued a security advisory on 19 July 2023 regarding multiple vulnerabilities in Oracle Java SE, including CVE-2023-22043 and others. Oracle has announced these are high-impact vulnerabilities when exploited, and immediate patching is strongly recommended. Affected supported Oracle products should be updated to the latest versions provided by Oracle. The advisory emphasizes the urgency of applying fixes as soon as possible due to the severity of potential impacts from successful attacks. Defenders are directed to use MyJVN Version Checker to verify they are running the latest software versions. The advisory also notes licensing changes in Oracle Java releases after 16 April 2019, particularly affecting organizations with commercial deployments, requiring review of support and licensing terms with Oracle.

## Mentioned in this report

- Vulnerabilities: CVE-2023-22043

Source reporting: https://www.ipa.go.jp/archive/security/security-alert/2023/0719-jre.html

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/3b94e9f0-a125-56d5-8851-f242fbabb972/oracle-java-se-vulnerabilities-july-2023-update.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup