7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
7.9 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
47.5%
04/19/2022
High
Multiple vulnerabilities were found in Oracle Java SE and GraalVM. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, gain privileges.
Public exploits exist for this vulnerability.
Oracle GraalVM Enterprise Edition 20.3.5, 21.3.1, 22.0.0.2
Oracle Java SE 7u331, 8u321, 11.0.14, 17.02, 18
Update to the latest version
Download Java
Oracle Critical Patch Update Advisory – April 2022
ACE
CVE-2022-214965.3High
CVE-2022-214265.3High
CVE-2022-214767.5Critical
CVE-2022-214433.7Warning
CVE-2022-214497.5Critical
CVE-2022-214345.3High
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21426
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21434
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21443
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21449
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21476
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21496
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/class/Exploit/
threats.kaspersky.com/en/product/Oracle-Java-JRE-1.7.x/
threats.kaspersky.com/en/product/Oracle-Java-JRE-1.8.x/
www.oracle.com/java/
www.oracle.com/security-alerts/cpuapr2022.html#AppendixJAVA
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
7.9 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
47.5%