CVE-2022-21277

🗓️ 19 Jan 2022 11:22:59Reported by oracleType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 269 Views

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (

Reporter	Title	Published	Views	Family All 195
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities may affect IBM® Semeru Runtime	28 Feb 202215:29	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.4 contains fixes for multiple security vulnerabilities.	14 Jun 202215:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to an unspecified vulnerability in Java SE ( CVE-2022-21277)	7 May 202222:26	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package java-11-openjdk version 0:11.0.14.1.1-alt1_1jpp11	24 Feb 202200:00	–	altlinux
ATTACKERKB	CVE-2022-21277	19 Jan 202212:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : java-latest-openjdk, java-latest-openjdk-demo, java-latest-openjdk-devel (ALAS2022-2022-037)	6 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : java-11-openjdk, java-11-openjdk-demo, java-11-openjdk-devel (ALAS2022-2022-047)	6 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : java-17-amazon-corretto (ALAS-2022-1752)	21 Feb 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : java-11-amazon-corretto (ALAS-2022-1753)	21 Feb 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : java-11-openjdk (ALASJAVA-OPENJDK11-2023-003)	23 Feb 202300:00	–	nessus

NVD

Vulners

Node

oracle graalvmMatch20.3.4enterprise

oracle graalvmMatch21.3.0enterprise

oracle jdkMatch11.0.13

oracle jdkMatch17.0.1

oracle jreMatch11.0.13

oracle jreMatch17.0.1

Node

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

Node

netapp 7-mode_transition_toolMatch-

netapp active_iq_unified_managerMatch-vmware_vsphere

netapp active_iq_unified_managerMatch-windows

netapp cloud_insights_acquisition_unitMatch-

netapp cloud_secure_agentMatch-

netapp e-series_santricity_os_controllerRange11.0.0–11.70.1

netapp e-series_santricity_storage_managerMatch-

netapp e-series_santricity_web_servicesMatch-web_services_proxy

netapp hci_management_nodeMatch-

netapp oncommand_insightMatch-

netapp oncommand_workflow_automationMatch-

netapp santricity_storage_pluginMatch-vcenter

netapp santricity_unified_managerMatch-

netapp snapmanagerMatch-oracle

netapp snapmanagerMatch-sap

netapp solidfireMatch-

Node

oracle openjdkRange11–11.0.13

oracle openjdkRange13–13.0.9

oracle openjdkRange15–15.0.5

oracle openjdkMatch17

oracle openjdkMatch17.0.1

[
  {
    "product": "Java SE JDK and JRE",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Oracle Java SE:11.0.13"
      },
      {
        "status": "affected",
        "version": "Oracle Java SE:17.0.1"
      },
      {
        "status": "affected",
        "version": "Oracle GraalVM Enterprise Edition:20.3.4"
      },
      {
        "status": "affected",
        "version": "Oracle GraalVM Enterprise Edition:21.3.0"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/security-alerts/cpujan2022.html
security	www.security.netapp.com/advisory/ntap-20220121-0007/
debian	www.debian.org/security/2022/dsa-5058
debian	www.debian.org/security/2022/dsa-5057
security	www.security.gentoo.org/glsa/202209-05

27 May 2026 15:16Current

4.7Medium risk

Vulners AI Score4.7

CVSS 25

CVSS 3.15.3

EPSS0.01201

SSVC

CWE-400