CVE-2024-21138

🗓️ 16 Jul 2024 22:39:56Reported by oracleType

Vulnerability in Oracle Java SE and GraalVM allows unauthenticated attackers to cause partial denial of service (DOS) via specified API

Reporter	Title	Published	Views	Family All 383
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities of IBM Java SDK affect Linux KVM Agent from IBM Tivoli Monitoring for Virtual Environments	13 Feb 202510:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli Business Service Manager	17 Sep 202420:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Secure Proxy is vulnerable to multiple issues	15 Apr 202505:41	–	ibm
IBM Security Bulletins	Security Bulletin: multiple vulerability in IBM Spectrum Symphony with IBM JRE	23 Oct 202520:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities were discovered in IBM Verify Identity Governance	6 Feb 202506:16	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that affect CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition.	11 Oct 202411:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Services is affected by multiple IBM JRE vulnerabilities	12 Nov 202405:35	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in IBM Java SE affect BM Spectrum Control	9 Jan 202510:14	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of IBM SDK, Java Technology Edition, IBM Tivoli Application Dependency Discovery Manager is vulnerable to multiple vulnerabilities.	4 Dec 202406:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple security vulnerabilities	17 Mar 202510:56	–	ibm

NVD

Vulners

Node

netapp active_iq_unified_managerMatch-vmware_vsphere

netapp bluexpMatch-

netapp data_infrastructure_insights_storage_workload_security_agentMatch-

netapp oncommand_insightMatch-

netapp oncommand_workflow_automationMatch-

Node

oracle graalvmMatch20.3.14enterprise

oracle graalvmMatch21.3.10enterprise

oracle graalvm_for_jdkMatch17.0.11

oracle graalvm_for_jdkMatch21.0.3

oracle graalvm_for_jdkMatch22.0.1

oracle jdkMatch1.8.0update411

oracle jdkMatch1.8.0update411enterprise_performance_pack

oracle jdkMatch11.0.23

oracle jdkMatch17.0.11

oracle jdkMatch21.0.3

oracle jdkMatch22.0.1

oracle jreMatch1.8.0update411

oracle jreMatch1.8.0update411enterprise_performance_pack

oracle jreMatch11.0.23

oracle jreMatch17.0.11

oracle jreMatch21.0.3

oracle jreMatch22.0.1

[
  {
    "vendor": "Oracle Corporation",
    "product": "Java SE JDK and JRE",
    "versions": [
      {
        "version": "Oracle Java SE:8u411",
        "status": "affected"
      },
      {
        "version": "Oracle Java SE:8u411-perf",
        "status": "affected"
      },
      {
        "version": "Oracle Java SE:11.0.23",
        "status": "affected"
      },
      {
        "version": "Oracle Java SE:17.0.11",
        "status": "affected"
      },
      {
        "version": "Oracle Java SE:21.0.3",
        "status": "affected"
      },
      {
        "version": "Oracle Java SE:22.0.1",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM for JDK:17.0.11",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM for JDK:21.0.3",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM for JDK:22.0.1",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM Enterprise Edition:20.3.14",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM Enterprise Edition:21.3.10",
        "status": "affected"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/security-alerts/cpujul2024.html
security	www.security.netapp.com/advisory/ntap-20240719-0008/

05 Dec 2024 22:05Current

3.1Low risk

Vulners AI Score3.1

CVSS 3.13.7

EPSS0.00333

SSVC