CVE-2022-21624

🗓️ 18 Oct 2022 00:00:00Reported by oracleType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 428 Views

Vulnerability in Oracle Java SE, Oracle GraalVM Enterprise Edition (JNDI component). Allows unauthenticated attacker to compromise data. CVSS 3.1 Base Score 3.7 (Integrity impacts)

Reporter	Title	Published	Views	Family All 427
IBM Security Bulletins	Security Bulletin: IBM SDK, Java Technology Edition, Security Update February 2023	10 Mar 202315:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition	20 Apr 202313:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation for Multiplatforms Oct 2022 CPU (CVE-2022-21628, CVE-2022-21626, CVE-2022-21624, CVE-2022-21619)	7 Feb 202314:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM License Metric Tool v9.	15 Dec 202209:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Partner Engagement Manager vulnerable to multiple issues due to IBM Java SE	6 Jun 202306:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Command Center is affected by multiple vulnerabilities	4 May 202320:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Semeru Runtime affect z/Transaction Processing Facility	24 Feb 202315:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Services is vulnerable to multiple vulnerabilities due to IBM Java	15 Feb 202306:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affects Liberty for Java for IBM Cloud due to the October 2022 CPU plus CVE-2022-3676	10 Jan 202318:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect Rational Service Tester	16 Jun 202319:00	–	ibm

NVD

Vulners

Node

oracle graalvmMatch20.3.7enterprise

oracle graalvmMatch21.3.3enterprise

oracle graalvmMatch22.2.0enterprise

oracle jdkMatch1.8.0update341

oracle jdkMatch1.8.0update345enterprise_performance_pack

oracle jdkMatch11.0.16.1

oracle jdkMatch17.0.4.1

oracle jdkMatch19

oracle jreMatch1.8.0update341

oracle jreMatch1.8.0update345enterprise_performance_pack

oracle jreMatch11.0.16.1

oracle jreMatch17.0.4.1

oracle jreMatch19

Node

fedoraproject fedoraMatch35

fedoraproject fedoraMatch36

Node

netapp 7-mode_transition_toolMatch-

netapp cloud_insights_acquisition_unitMatch-

netapp cloud_secure_agentMatch-

netapp e-series_santricity_os_controllerRange11.0–11.70.2

netapp e-series_santricity_storage_managerMatch-

netapp e-series_santricity_unified_managerMatch-

netapp oncommand_insightMatch-

netapp oncommand_workflow_automationMatch-

netapp santricity_storage_pluginMatch-vcenter

netapp santricity_web_services_proxyMatch-

Node

azul zuluMatch6.49

azul zuluMatch7.56

azul zuluMatch8.64

azul zuluMatch11.58

azul zuluMatch13.50

azul zuluMatch15.42

azul zuluMatch17.36

azul zuluMatch19.28

[
  {
    "vendor": "Oracle Corporation",
    "product": "Java SE JDK and JRE",
    "versions": [
      {
        "version": "Oracle Java SE:8u341",
        "status": "affected"
      },
      {
        "version": "Oracle Java SE:8u345-perf",
        "status": "affected"
      },
      {
        "version": "Oracle Java SE:11.0.16.1",
        "status": "affected"
      },
      {
        "version": "Oracle Java SE:17.0.4.1",
        "status": "affected"
      },
      {
        "version": "Oracle Java SE:19",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM Enterprise Edition:20.3.7",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM Enterprise Edition:21.3.3",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM Enterprise Edition:22.2.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3ARF4QF4N3X5GSFHXUBWARGLISGKJ33R/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/37QDWJBGEPP65X43NXQTXQ7KASLUHON6/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QLQ7OD33W6LT3HWI7VYDFFJLV75Y73K/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PB3CIGOFG7CENUVVE4FFZT2HI5FO77XU/
security	www.security.netapp.com/advisory/ntap-20221028-0012/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXSBV3W6EP6B7XJ63Z2FPVBH6HAPGJ5T/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HNGMDNIHAA73BEX6XPA2IMXJSGOKKYE6/
oracle	www.oracle.com/security-alerts/cpuoct2022.html
security	www.security.gentoo.org/glsa/202401-25