CVE-2022-21291

🗓️ 19 Jan 2022 11:23:29Reported by oracleType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 343 Views

Vulnerability in Oracle Java SE, Oracle GraalVM Enterprise Edition allowing unauthorized access to data

Reporter	Title	Published	Views	Family All 257
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Java affects IBM Cloud Application Business Insights - Quaterly Java update, CVE-2021-35603 and CVE-2021-35550	30 Dec 202215:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Jan 2022 - Includes Oracle® January 2022 CPU affects IBM Tivoli Composite Application Manager for Transactions-Robotic Response Time	22 Jun 202202:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect Rational Business Developer	24 Jun 202213:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in IBM SDK, Java Technology Edition shipped with IBM Robotic Process Automation	20 Jul 202218:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli Business Service Manager	22 Jun 202204:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Internet Pass-Thru is vulnerable to an issue within IBM® Runtime Environment Java™ Technology Edition, Version 7. (CVE-2022-21305, CVE-2022-21291)	21 Jun 202216:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ is vulnerable to multiple issues within IBM® Runtime Environment Java™ Technology Edition, Versions 7 and 8 (CVE-2021-35603, CVE-2022-21305, CVE-2022-21291, CVE-2021-35550)	16 Nov 202211:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in IBM Java included with IBM Tivoli Monitoring	30 Dec 202217:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Java SE affect IBM CICS TX Advanced	14 Feb 202321:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities exist in the IBM® SDK, Java™ Technology Edition affecting IBM Tivoli Network Manager	24 May 202210:09	–	ibm

NVD

Vulners

Node

oracle graalvmMatch20.3.4enterprise

oracle graalvmMatch21.3.0enterprise

oracle jdkMatch1.7.0update321

oracle jdkMatch1.8.0update311

oracle jdkMatch11.0.13

oracle jdkMatch17.0.1

oracle jreMatch1.7.0update321

oracle jreMatch1.8.0update311

oracle jreMatch11.0.13

oracle jreMatch17.0.1

Node

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

Node

netapp 7-mode_transition_toolMatch-

netapp active_iq_unified_managerMatch-vmware_vsphere

netapp active_iq_unified_managerMatch-windows

netapp cloud_insights_acquisition_unitMatch-

netapp cloud_secure_agentMatch-

netapp e-series_santricity_os_controllerRange11.0.0–11.70.1

netapp e-series_santricity_storage_managerMatch-

netapp e-series_santricity_web_servicesMatch-web_services_proxy

netapp hci_management_nodeMatch-

netapp oncommand_insightMatch-

netapp oncommand_workflow_automationMatch-

netapp santricity_storage_pluginMatch-vcenter

netapp santricity_unified_managerMatch-

netapp snapmanagerMatch-oracle

netapp snapmanagerMatch-sap

netapp solidfireMatch-

Node

oracle openjdkRange11–11.0.13

oracle openjdkRange13–13.0.9

oracle openjdkRange15–15.0.5

oracle openjdkMatch17

oracle openjdkMatch17.0.1

Node

fedoraproject fedoraMatch34

[
  {
    "product": "Java SE JDK and JRE",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Oracle Java SE:7u321"
      },
      {
        "status": "affected",
        "version": "Oracle Java SE:8u311"
      },
      {
        "status": "affected",
        "version": "Oracle Java SE:11.0.13"
      },
      {
        "status": "affected",
        "version": "Oracle Java SE:17.0.1"
      },
      {
        "status": "affected",
        "version": "Oracle GraalVM Enterprise Edition:20.3.4"
      },
      {
        "status": "affected",
        "version": "Oracle GraalVM Enterprise Edition:21.3.0"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/security-alerts/cpujan2022.html
security	www.security.netapp.com/advisory/ntap-20220121-0007/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DIN3L6L3SVZK75CKW2GPSU4HIGZR7XG/
debian	www.debian.org/security/2022/dsa-5058
debian	www.debian.org/security/2022/dsa-5057
security	www.security.gentoo.org/glsa/202209-05

27 May 2026 15:16Current

4.7Medium risk

Vulners AI Score4.7

CVSS 25

CVSS 3.15.3

EPSS0.00111

SSVC

CWE-284

oracle java se graalvm enterprise vulnerability unauthorized access cve-2022-21291 nvd network access security integrity exploit