CVE-2026-97400

Published: Ott 20, 2026 Last Modified: Ott 20, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 6,8
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: none
User Interaction: active
Confidentiality: N/A
Integrity: N/A
Availability: N/A

Description

AI Translation Available

In Eclipse OpenJ9 versions up to 0.63, opening a supplied diagnostic dump bundle with the jdmpview tool, or equivalent DTFJ code, may cause the analyst's machine to read an arbitrary local file named inside the bundle and send its contents to an arbitrary remote host.

611

Improper Restriction of XML External Entity Reference

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality Integrity Availability
Potential Impacts:
Read Application Data Read Files Or Directories Bypass Protection Mechanism Dos: Resource Consumption (Cpu) Dos: Resource Consumption (Memory)
Applicable Platforms
Languages: Not Language-Specific, XML
Technologies: Not Technology-Specific, Web Based
View CWE Details
618

Exposed Unsafe ActiveX Method

Incomplete
Abstraction: Variant Structure: Simple
Common Consequences
Security Scopes Affected:
Other
Potential Impacts:
Other
Applicable Platforms
Technologies: Web Based
View CWE Details
https://github.com/eclipse-openj9/openj9/pull/25003
https://github.com/eclipse-openj9/openj9/pull/25003
https://gitlab.eclipse.org/security/cve-assignment/-/work_i…
https://gitlab.eclipse.org/security/cve-assignment/-/work_items/324
https://gitlab.eclipse.org/security/vulnerability-reports/-…
https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/949