An unspecified vulnerability in Oracle Java SE and Oracle GraalVM Enterprise Edition related to the JAXP component could allow an unauthenticated attacker to cause a denial of service resulting in a low availability impact using unknown attack vectors.