CVE-2023-30441
IBM Java information disclosure
7.5 High
IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations. IBM X-Force ID: 253188.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
0.60%Up 0.6 points since Apr 30, 2023
What each source reports
CVE List Score used
IBM Java information disclosure
IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations. IBM X-Force ID: 253188.
- Record
CVE-2023-30441- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-327
- Updated
- 2026-11-02
EUVDEUVD-2023-34859
IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations. IBM X-Force ID: 253188.
- Record
EUVD-2023-34859- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2v8w-cv2x-fj9v
IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11...
IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations. IBM X-Force ID: 253188.
- Record
GHSA-2v8w-cv2x-fj9v- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-327
- Updated
- 2026-11-02
NVD
IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations. IBM X-Force ID: 253188.
- Record
CVE-2023-30441- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-327
- Updated
- 2026-11-02
OSVRHSA-2022:6735
Red Hat Security Advisory: java-1.8.0-ibm security update
- Record
RHSA-2022:6735- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2022:6756
Red Hat Security Advisory: java-1.8.0-ibm security update
- Record
RHSA-2022:6756- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVSUSE-SU-2023:2476-1 No score
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues:
- CVE-2023-21930: Fixed possible compromise from unauthenticated attacker with network access via TLS (bsc#1210628).
- CVE-2023-21937: Fixed vulnerability inside the networking component (bsc#1210631).
- CVE-2023-21938: Fixed vulnerability inside the library component (bsc#1210632).
- CVE-2023-21939: Fixed vulnerability inside the swing component (bsc#1210634).
- CVE-2023-21968: Fixed vulnerability inside the library component (bsc#1210637).
- CVE-2023-2597: Fixed buffer overflow in shared cache implementation (bsc#1211615).
- CVE-2023-21967: Fixed vulnerability inside the JSSE component (bsc#1210636).
- CVE-2023-21954: Fixed vulnerability inside the hotspot component (bsc#1210635).
Additional reference fixed already in 8.0.7.15:
- CVE-2023-30441: Fixed components that could have exposed sensitive information using a combination of flaws and configurations (bsc#1210711).
- Record
SUSE-SU-2023:2476-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:2491-1 No score
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues:
- CVE-2023-21930: Fixed possible compromise from unauthenticated attacker with network access via TLS (bsc#1210628).
- CVE-2023-21937: Fixed vulnerability inside the networking component (bsc#1210631).
- CVE-2023-21938: Fixed vulnerability inside the library component (bsc#1210632).
- CVE-2023-21939: Fixed vulnerability inside the swing component (bsc#1210634).
- CVE-2023-21968: Fixed vulnerability inside the library component (bsc#1210637).
- CVE-2023-2597: Fixed buffer overflow in shared cache implementation (bsc#1211615).
- CVE-2023-21967: Fixed vulnerability inside the JSSE component (bsc#1210636).
- CVE-2023-21954: Fixed vulnerability inside the hotspot component (bsc#1210635).
Additional reference fixed already in 8.0.7.15:
- CVE-2023-30441: Fixed components that could have exposed sensitive information using a combination of flaws and configurations (bsc#1210711).
- Record
SUSE-SU-2023:2491-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.8.0-ibmRed Hat:enterprise_linux:8::supplementary From an advisory covering 2 CVEs |
before 1:1.8.0.7.15-1.el8_6 | 1:1.8.0.7.15-1.el8_6 |
java-1.8.0-ibm-demoRed Hat:enterprise_linux:8::supplementary From an advisory covering 2 CVEs |
before 1:1.8.0.7.15-1.el8_6 | 1:1.8.0.7.15-1.el8_6 |
java-1.8.0-ibm-develRed Hat:enterprise_linux:8::supplementary From an advisory covering 2 CVEs |
before 1:1.8.0.7.15-1.el8_6 | 1:1.8.0.7.15-1.el8_6 |
java-1.8.0-ibm-headlessRed Hat:enterprise_linux:8::supplementary From an advisory covering 2 CVEs |
before 1:1.8.0.7.15-1.el8_6 | 1:1.8.0.7.15-1.el8_6 |
java-1.8.0-ibm-jdbcRed Hat:enterprise_linux:8::supplementary From an advisory covering 2 CVEs |
before 1:1.8.0.7.15-1.el8_6 | 1:1.8.0.7.15-1.el8_6 |
java-1.8.0-ibm-pluginRed Hat:enterprise_linux:8::supplementary From an advisory covering 2 CVEs |
before 1:1.8.0.7.15-1.el8_6 | 1:1.8.0.7.15-1.el8_6 |
java-1.8.0-ibm-srcRed Hat:enterprise_linux:8::supplementary From an advisory covering 2 CVEs |
before 1:1.8.0.7.15-1.el8_6 | 1:1.8.0.7.15-1.el8_6 |
java-1.8.0-ibm-webstartRed Hat:enterprise_linux:8::supplementary From an advisory covering 2 CVEs |
before 1:1.8.0.7.15-1.el8_6 | 1:1.8.0.7.15-1.el8_6 |
java-1.8.0-ibmRed Hat:rhel_extras:7 From an advisory covering 2 CVEs |
before 1:1.8.0.7.15-1jpp.1.el7 | 1:1.8.0.7.15-1jpp.1.el7 |
java-1.8.0-ibm-demoRed Hat:rhel_extras:7 From an advisory covering 2 CVEs |
before 1:1.8.0.7.15-1jpp.1.el7 | 1:1.8.0.7.15-1jpp.1.el7 |
Show 27 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.8.0-ibm-develRed Hat:rhel_extras:7 From an advisory covering 2 CVEs |
before 1:1.8.0.7.15-1jpp.1.el7 | 1:1.8.0.7.15-1jpp.1.el7 |
java-1.8.0-ibm-jdbcRed Hat:rhel_extras:7 From an advisory covering 2 CVEs |
before 1:1.8.0.7.15-1jpp.1.el7 | 1:1.8.0.7.15-1jpp.1.el7 |
java-1.8.0-ibm-pluginRed Hat:rhel_extras:7 From an advisory covering 2 CVEs |
before 1:1.8.0.7.15-1jpp.1.el7 | 1:1.8.0.7.15-1jpp.1.el7 |
java-1.8.0-ibm-srcRed Hat:rhel_extras:7 From an advisory covering 2 CVEs |
before 1:1.8.0.7.15-1jpp.1.el7 | 1:1.8.0.7.15-1jpp.1.el7 |
java-1_8_0-ibmSUSE:OpenStack Cloud 9 From an advisory covering 9 CVEs |
before 1.8.0_sr8.5-30.108.1 | 1.8.0_sr8.5-30.108.1 |
java-1_8_0-ibmSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 9 CVEs |
before 1.8.0_sr8.5-30.108.1 | 1.8.0_sr8.5-30.108.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 9 CVEs |
before 1.8.0_sr8.5-30.108.1 | 1.8.0_sr8.5-30.108.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 9 CVEs |
before 1.8.0_sr8.5-30.108.1 | 1.8.0_sr8.5-30.108.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 9 CVEs |
before 1.8.0_sr8.5-30.108.1 | 1.8.0_sr8.5-30.108.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server 12 SP4-ESPOS From an advisory covering 9 CVEs |
before 1.8.0_sr8.5-30.108.1 | 1.8.0_sr8.5-30.108.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 9 CVEs |
before 1.8.0_sr8.5-30.108.1 | 1.8.0_sr8.5-30.108.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 9 CVEs |
before 1.8.0_sr8.5-30.108.1 | 1.8.0_sr8.5-30.108.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 9 CVEs |
before 1.8.0_sr8.5-30.108.1 | 1.8.0_sr8.5-30.108.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Module for Legacy 15 SP4 From an advisory covering 9 CVEs |
before 1.8.0_sr8.5-150000.3.74.1 | 1.8.0_sr8.5-150000.3.74.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Module for Legacy 15 SP5 From an advisory covering 9 CVEs |
before 1.8.0_sr8.5-150000.3.74.1 | 1.8.0_sr8.5-150000.3.74.1 |
java-1_8_0-ibmSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS From an advisory covering 9 CVEs |
before 1.8.0_sr8.5-150000.3.74.1 | 1.8.0_sr8.5-150000.3.74.1 |
java-1_8_0-ibmSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 9 CVEs |
before 1.8.0_sr8.5-150000.3.74.1 | 1.8.0_sr8.5-150000.3.74.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 9 CVEs |
before 1.8.0_sr8.5-150000.3.74.1 | 1.8.0_sr8.5-150000.3.74.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 9 CVEs |
before 1.8.0_sr8.5-150000.3.74.1 | 1.8.0_sr8.5-150000.3.74.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 9 CVEs |
before 1.8.0_sr8.5-150000.3.74.1 | 1.8.0_sr8.5-150000.3.74.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 9 CVEs |
before 1.8.0_sr8.5-150000.3.74.1 | 1.8.0_sr8.5-150000.3.74.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 9 CVEs |
before 1.8.0_sr8.5-150000.3.74.1 | 1.8.0_sr8.5-150000.3.74.1 |
java-1_8_0-ibmSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 9 CVEs |
before 1.8.0_sr8.5-150000.3.74.1 | 1.8.0_sr8.5-150000.3.74.1 |
java-1_8_0-ibmSUSE:Enterprise Storage 7 From an advisory covering 9 CVEs |
before 1.8.0_sr8.5-150000.3.74.1 | 1.8.0_sr8.5-150000.3.74.1 |
java-1_8_0-ibmSUSE:Enterprise Storage 7.1 From an advisory covering 9 CVEs |
before 1.8.0_sr8.5-150000.3.74.1 | 1.8.0_sr8.5-150000.3.74.1 |
java-1_8_0-ibmopenSUSE:Leap 15.4 From an advisory covering 9 CVEs |
before 1.8.0_sr8.5-150000.3.74.1 | 1.8.0_sr8.5-150000.3.74.1 |
java-1_8_0-ibmopenSUSE:Leap 15.5 From an advisory covering 9 CVEs |
before 1.8.0_sr8.5-150000.3.74.1 | 1.8.0_sr8.5-150000.3.74.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases, products, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-30441 is a high vulnerability (CVSS 7.5) in Ibm Java, published April 29, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.60%, the 49th percentile. No source names a fixed version.
References
ibm.com/support/pages/node/6985011
exchange.xforce.ibmcloud.com/vulnerabilities/253188
nvd.nist.gov/vuln/detail/CVE-2023-30441
Show 34 moreShow less
github.com/advisories/GHSA-2v8w-cv2x-fj9v
access.redhat.com/errata/RHSA-2022:6735
bugzilla.redhat.com/show_bug.cgi?id=1951217
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6735.json
cve.org/CVERecord?id=CVE-2021-2163
suse.com/support/update/announcement/2023/suse-su-20232476-1
bugzilla.suse.com/1210628