CVE-2020-2595

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: GraalVM Compiler). The supported version that is affected is 19.3.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM Enterprise Edition. While the vulnerability is in Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GraalVM Enterprise Edition accessible data. CVSS 3.0 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).

• https://www.oracle.com/security-alerts/cpujan2020.htmlPatch, Vendor Advisory
• https://www.oracle.com/security-alerts/cpujan2020.htmlPatch, Vendor Advisory

Published

Jan 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-25925Cross Site Scripting (XSS) in Webmail Calender in IceWarp We…6.1
• CVE-2020-25926The DNS client in InterNiche NicheStack TCP/IP 4.0.1 is affe…7.5
• CVE-2020-25927The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is aff…7.5
• CVE-2020-25928The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is aff…9.8
• CVE-2020-2593Vulnerability in the Java SE, Java SE Embedded product of Or…4.8
• CVE-2020-2594Vulnerability in the Primavera P6 Enterprise Project Portfol…6.5
• CVE-2020-25950Advanced Webhost Billing System 3.7.0 is affected by Cross S…4.3
• CVE-2020-25952SQL injection vulnerability in PHPGurukul User Registration …9.8
• CVE-2020-25955SourceCodester Student Management System Project in PHP vers…5.4
• CVE-2020-2596Vulnerability in the Oracle CRM Technical Foundation product…4.7
• CVE-2020-25966Sectona Spectra before 3.4.0 has a vulnerable SOAP API endpo…7.5
• CVE-2020-25967The member center function in fastadmin V1.0.0.20200506_beta…8.8