CVE-2024-20925 is a low-severity vulnerability in the JavaFX component of Oracle Java SE and Oracle GraalVM Enterprise Edition. It affects certain versions of these products, allowing an unauthenticated attacker with network access and requiring user interaction to potentially perform unauthorized update, insert, or delete operations on accessible data. This vulnerability primarily impacts Java deployments running sandboxed Java Web Start applications or applets that load untrusted code. It does not affect server-side deployments running only trusted code. The vulnerability has a CVSS 3.1 base score of 3.1, indicating low impact on integrity without confidentiality or availability impact. Oracle has released patches to address this issue.