Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2021-35550

🗓️ 20 Oct 2021 10:49:59Reported by oracleType 
cve
 cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 426 Views

Vulnerability in Java SE and Oracle GraalVM EE allows unauthorized network access compromising data

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: Vulnerabilities in Java affects IBM Cloud Application Business Insights - Quaterly Java update, CVE-2021-35603 and CVE-2021-35550
30 Dec 202215:09
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerability in IBM Java SDK affect IBM Tivoli Business Service Manager
22 Jun 202204:09
–ibm
IBM Security Bulletins		Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - January 2019 through July 2022 affects AIX LPARs in IBM PureData System for Operational Analytics
4 Nov 202220:17
–ibm
IBM Security Bulletins		Security Bulletin: A vulnerability in IBM® SDK, Java™ may affect Rational Asset Analyzer (CVE-2021-35550)
5 May 202216:58
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in the IBM Java Runtime affect IBM Rational ClearQuest
26 Jul 202210:49
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities have been identified in IBM SDK, Java Technology Edition shipped with IBM Robotic Process Automation
20 Jul 202218:20
–ibm
IBM Security Bulletins		Security Bulletin: Java SE as used by IBM Cloud Pak For Security is vulnerable to information disclosure and denial of service.
25 Jul 202214:08
–ibm
IBM Security Bulletins		Security Bulletin: Multiple security vulnerabilities found in open source code that is shipped with IBM Security Verify Governance, Identity Manager virtual appliance component
20 Jul 202215:54
–ibm
IBM Security Bulletins		Security Bulletin: IBM MQ is vulnerable to multiple issues within IBM® Runtime Environment Java™ Technology Edition, Versions 7 and 8 (CVE-2021-35603, CVE-2022-21305, CVE-2022-21291, CVE-2021-35550)
16 Nov 202211:30
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in IBM Java included with IBM Tivoli Monitoring
30 Dec 202217:31
–ibm
Rows per page
NVD
Vulners
Node
oraclegraalvmMatch20.3.3enterprise
OR
oraclegraalvmMatch21.2.0enterprise
OR
oracleopenjdkMatch7update311
OR
oracleopenjdkMatch8update301
OR
oracleopenjdkMatch11.0.12
Node
netappactive_iq_unified_managerMatch-vmware_vsphere
OR
netappactive_iq_unified_managerMatch-windows
OR
netappe-series_santricity_os_controllerRange11.0.0–11.50.2
OR
netappe-series_santricity_storage_managerMatch-
OR
netappe-series_santricity_web_servicesMatch-web_services_proxy
OR
netapphci_management_nodeMatch-
OR
netapponcommand_insightMatch-
OR
netappsantricity_unified_managerMatch-
OR
netappsnapmanagerMatch-oracle
OR
netappsnapmanagerMatch-sap
OR
netappsolidfireMatch-
Node
fedoraprojectfedoraMatch33
OR
fedoraprojectfedoraMatch34
OR
fedoraprojectfedoraMatch35
Node
debiandebian_linuxMatch9.0
OR
debiandebian_linuxMatch10.0
OR
debiandebian_linuxMatch11.0
[
  {
    "vendor": "Oracle Corporation",
    "product": "Java SE JDK and JRE",
    "versions": [
      {
        "version": "Java SE:7u311",
        "status": "affected"
      },
      {
        "version": "Java SE:8u301",
        "status": "affected"
      },
      {
        "version": "Java SE:11.0.12",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM Enterprise Edition:20.3.3",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM Enterprise Edition:21.2.0",
        "status": "affected"
      }
    ]
  }
]
SourceLink
securitywww.security.gentoo.org/glsa/202209-05
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT/
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/
debianwww.debian.org/security/2021/dsa-5000
listswww.lists.debian.org/debian-lts-announce/2021/11/msg00008.html
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V362B2BWTH5IJDL45QPQGMBKIQOG7JX5/
securitywww.security.netapp.com/advisory/ntap-20240621-0006/
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O/
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/
securitywww.security.netapp.com/advisory/ntap-20211022-0004/
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
21 Nov 2024 06:12Current
5.8Medium risk
Vulners AI Score5.8
CVSS 3.15.9
CVSS 27.1
EPSS0.00091
SSVC
cve-2021-35550java seoracle graalvm eevulnerabilityunauthorized accessnetwork securitycve
426