CVE-2022-21496

🗓️ 19 Apr 2022 20:38:50Reported by oracleType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 362 Views

Vulnerability in Oracle Java SE & Oracle GraalVM Enterprise Edition (CVE-2022-21496

Reporter	Title	Published	Views	Family All 391
IBM Security Bulletins	Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - January 2019 through July 2022 affects AIX LPARs in IBM PureData System for Operational Analytics	4 Nov 202220:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities may affect IBM® Semeru Runtime	25 May 202209:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in IBM SDK, Java Technology Edition shipped with IBM Robotic Process Automation	20 Jul 202218:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections	29 Sep 202213:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	6 Oct 202204:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in SANNav Software used by IBM b-type SAN directors and switches.	18 Jan 202318:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Apr 2022and Jul 2022	26 Oct 202214:25	–	ibm
IBM Security Bulletins	Security Bulletin: TXSeries for Multiplatforms is vulnerable to several no confidentiality exposures due to IBM SDK, Java Technology Edition	28 Sep 202209:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the IBM Java Runtime affect IBM Rational ClearQuest (CVE-2021-35561, CVE-2022-21299, CVE-2022-21496)	26 Jul 202211:27	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On (CVE-2022-21496 and CVE-2022-21299)	2 Sep 202205:22	–	ibm

NVD

Vulners

Node

oracle graalvmMatch20.3.5enterprise

oracle graalvmMatch21.3.1enterprise

oracle graalvmMatch22.0.0.2enterprise

oracle java_seMatch7u331

oracle java_seMatch8u321

oracle java_seMatch11.0.14

oracle java_seMatch17.0.2

oracle java_seMatch18

Node

netapp active_iq_unified_managerMatch-vmware_vsphere

netapp active_iq_unified_managerMatch-windows

netapp cloud_insights_acquisition_unitMatch-

netapp cloud_secure_agentMatch-

netapp e-series_santricity_os_controllerRange11.0.0–11.70.1

netapp e-series_santricity_storage_managerMatch-

netapp e-series_santricity_web_servicesMatch-web_services_proxy

netapp element_softwareMatch-

netapp hci_management_nodeMatch-

netapp oncommand_insightMatch-

netapp santricity_unified_managerMatch-

netapp solidfireMatch-

Node

netapp bootstrap_osMatch-

AND

netapp hci_compute_nodeMatch-

Node

debian debian_linuxMatch9.0

Node

azul zuluMatch6.45

azul zuluMatch7.52

azul zuluMatch8.60

azul zuluMatch11.54

azul zuluMatch13.46

azul zuluMatch15.38

azul zuluMatch17.32

azul zuluMatch18.28

[
  {
    "vendor": "Oracle Corporation",
    "product": "Java SE JDK and JRE",
    "versions": [
      {
        "version": "Oracle Java SE:7u331",
        "status": "affected"
      },
      {
        "version": "Oracle Java SE:8u321",
        "status": "affected"
      },
      {
        "version": "Oracle Java SE:11.0.14",
        "status": "affected"
      },
      {
        "version": "Oracle Java SE:17.0.2",
        "status": "affected"
      },
      {
        "version": "Oracle Java SE:18",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM Enterprise Edition:20.3.5",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM Enterprise Edition:21.3.1",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM Enterprise Edition:22.0.0.2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2022/05/msg00017.html
security	www.security.netapp.com/advisory/ntap-20220429-0006/
debian	www.debian.org/security/2022/dsa-5131
debian	www.debian.org/security/2022/dsa-5128
security	www.security.netapp.com/advisory/ntap-20240621-0006/
oracle	www.oracle.com/security-alerts/cpuapr2022.html

21 Nov 2024 06:44Current

5.3Medium risk

Vulners AI Score5.3

CVSS 25

CVSS 3.15.3

EPSS0.00109

SSVC