# Oracle Java SE vulnerabilities require immediate patching

Published: 2023-01-17 · Severity: routine
Canonical: https://vorant.io/reports/99eba8d3-6cba-5415-ac5a-4839143c409b/oracle-java-se-vulnerabilities-require-immediate-patching

> Oracle Java SE contains critical vulnerabilities; apply latest patches immediately to mitigate significant attack impact.

Japan's Information-technology Promotion Agency (IPA) issued a security alert on 18 January 2023 regarding multiple vulnerabilities in Oracle Java SE, including CVE-2023-21835. Oracle announced these flaws pose significant risk if exploited, warranting urgent remediation across affected deployments.

Defenders must update to the latest Oracle Java SE version available through Oracle's official distribution channels. The alert notes that Java licensing terms changed as of 16 April 2019; organizations using Java commercially should verify their licensing compliance and engage Oracle's paid support if required. IPA recommends using MyJVN version checker to verify software currency.

## Mentioned in this report

- Vulnerabilities: CVE-2023-21835

Source reporting: https://www.ipa.go.jp/archive/security/security-alert/2022/0118-jre.html

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/99eba8d3-6cba-5415-ac5a-4839143c409b/oracle-java-se-vulnerabilities-require-immediate-patching.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup