Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA12331
HistorySep 28, 2021 - 12:00 a.m.

KLA12331 Multiple vulnerabilities in Oracle Java SE

2021-09-2800:00:00
Kaspersky Lab
threats.kaspersky.com
375

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

85.2%

JSON

Detect date:

09/28/2021

Severity:

Warning

Description:

Multiple vulnerabilities were found in Oracle Java SE. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information, cause denial of service, gain privileges, execute arbitrary code.

Affected products:

Java SE: 7u311, 8u301, 11.0.12, 17;

Solution:

Update to the latest version
Download Java

Original advisories:

Oracle Critical Patch Update Advisory – October 2021

Impacts:

ACE

Related products:

Oracle Java JRE 1.7.x

CVE-IDS:

CVE-2021-356033.7Warning
CVE-2021-35178.6Critical
CVE-2021-355785.3High
CVE-2021-355645.3High
CVE-2021-355883.1Warning
CVE-2021-355615.3High
CVE-2021-355595.3High
CVE-2021-355505.9High
CVE-2021-355865.3High
CVE-2021-355565.3High
CVE-2021-355676.8High
CVE-2021-35225.5High
CVE-2021-355655.3High
CVE-2021-355607.5Critical

References

Related

nessus 56
amazon 3
oraclelinux 5
suse 6
openvas 33
redhat 17
centos 2
debian 4
osv 11
mageia 1
almalinux 3
rocky 3
fedora 9
rosalinux 1
altlinux 1
ibm 39
ubuntu 1
f5 3
aix 1
nessus
nessus
Oracle Java SE 1.7.0_321 / 1.8.0_311 / 1.11.0_13 / 1.17.0_1 Multiple Vulnerabilities (Unix October 2021 CPU)
2021-10-22 00:00:00
Amazon Linux 2 : java-11-amazon-corretto (ALAS-2021-1718)
2021-11-05 00:00:00
Oracle Java SE 1.7.0_321 / 1.8.0_311 / 1.11.0_13 / 1.17.0_1 Multiple Vulnerabilities (October 2021 CPU)
2021-10-22 00:00:00
amazon
amazon
Important: java-11-amazon-corretto
2021-10-28 23:20:00
Important: java-1.8.0-openjdk
2022-01-18 20:14:00
Important: java-1.8.0-openjdk
2021-12-08 02:23:00
oraclelinux
oraclelinux
java-1.8.0-openjdk security and bug fix update
2021-10-20 00:00:00
java-1.8.0-openjdk security and bug fix update
2021-10-20 00:00:00
java-11-openjdk security and bug fix update
2021-10-21 00:00:00
suse
suse
Security update for java-1_8_0-openjdk (important)
2021-11-24 00:00:00
Security update for java-1_8_0-openjdk (important)
2021-11-23 00:00:00
Security update for java-11-openjdk (important)
2021-11-17 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:3771-1)
2021-11-24 00:00:00
Fedora: Security Advisory for java-1.8.0-openjdk (FEDORA-2021-7701833090)
2021-10-30 00:00:00
Fedora: Security Advisory for java-1.8.0-openjdk (FEDORA-2021-107c8c5063)
2021-10-30 00:00:00
redhat
redhat
(RHSA-2021:3893) Important: java-1.8.0-openjdk security and bug fix update
2021-10-20 12:38:15
(RHSA-2021:3889) Important: java-1.8.0-openjdk security and bug fix update
2021-10-20 12:40:28
(RHSA-2021:3961) Important: OpenJDK 8u312 Windows Builds release and security update
2021-10-25 11:51:36
centos
centos
java security update
2021-11-17 15:06:26
java security update
2021-11-17 15:04:57
debian
debian
[SECURITY] [DLA 2814-1] openjdk-8 security update
2021-11-09 18:53:12
[SECURITY] [DSA 5000-2] openjdk-11 security update
2021-12-22 19:03:51
[SECURITY] [DSA 5000-1] openjdk-11 security update
2021-11-01 19:44:34
osv
osv
openjdk-8 - security update
2021-11-09 00:00:00
Important: java-1.8.0-openjdk security and bug fix update
2021-10-20 12:38:15
Important: java-1.8.0-openjdk security and bug fix update
2021-10-20 12:38:15
mageia
mageia
Updated java openjdk packages fix security vulnerability
2021-12-08 23:04:18
almalinux
almalinux
Important: java-1.8.0-openjdk security and bug fix update
2021-10-20 12:38:15
Important: java-11-openjdk security update
2021-10-20 12:41:00
Important: java-17-openjdk security update
2021-11-09 19:26:37
rocky
rocky
java-1.8.0-openjdk security and bug fix update
2021-10-20 12:38:15
java-11-openjdk security update
2021-10-20 12:41:00
java-17-openjdk security update
2021-11-09 19:26:37
fedora
fedora
[SECURITY] Fedora 33 Update: java-1.8.0-openjdk-1.8.0.312.b07-1.fc33
2021-10-28 19:31:36
[SECURITY] Fedora 35 Update: java-1.8.0-openjdk-1.8.0.312.b07-1.fc35
2021-10-29 23:29:25
[SECURITY] Fedora 34 Update: java-1.8.0-openjdk-1.8.0.312.b07-1.fc34
2021-10-28 19:32:25
rosalinux
rosalinux
Advisory ROSA-SA-2023-2134
2023-03-21 12:45:26
altlinux
altlinux
Security fix for the ALT Linux 10 package java-11-openjdk version 0:11.0.13.8-alt1_1jpp11
2021-11-08 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in Java impact IBM Cloud Application Business Insights (CVE-2021-35550, CVE-2021-35561, CVE-2021-35603, and CVE-2021-41035)
2022-12-30 15:09:22
Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition
2021-12-02 16:45:48
Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Oct 2021 - Includes Oracle October 2021 CPU (minus CVE-2021-35550/35561/35603) plus CVE-2021-41035 affects IBM Tivoli Composite Application Manager for Transactions-Robotic Response Time
2022-02-21 09:00:07
ubuntu
ubuntu
OpenJDK vulnerabilities
2021-12-17 00:00:00
f5
f5
K63415246 : Multiple Java vulnerabilities CVE-2021-35560, CVE-2021-35561, CVE-2021-35564, CVE-2021-35567, CVE-2021-35586
2022-09-06 00:00:00
K03179547 : Multiple Java vulnerabilities CVE-2021-3517, CVE-2021-3522, CVE-2021-35550, CVE-2021-35556, CVE-2021-35559
2022-09-06 00:00:00
K73464925 : Multiple Java vulnerabilities CVE-2021-35588, CVE-2021-35603, CVE-2021-35565, CVE-2021-35578
2022-09-06 00:00:00
aix
aix
Multiple vulnerabilities in IBM Java SDK affect AIX
2022-02-23 08:12:23

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

85.2%

JSON
Related for KLA12331
nessus56amazon3oraclelinux5suse6openvas33redhat17centos2debian4osv11mageia1almalinux3rocky3fedora9rosalinux1altlinux1ibm39ubuntu1f53aix1