Vulnerabilities fixed in Oracle Java SE and GraalVM

🗓️ 20 Oct 2021 00:00:00Reported by NCSCType

Oracle fixed vulnerabilities in Java SE and GraalVM Enterprise Edition enabling DoS, remote code execution, and data access; updates available.

Reporter	Title	Published	Views	Family All 2944
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is vulnerable to various attacks due to Eclipse jetty	21 Jun 202318:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Java affects IBM Cloud Application Business Insights - Quaterly Java update, CVE-2021-35603 and CVE-2021-35550	30 Dec 202215:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL may affect IBM Workload Scheduler	8 Sep 202109:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is impacted by a vulnerabilities in Node.js (CVE-2021-22884, CVE-2021-22883)	1 Nov 202120:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in IBM Java SDK affect IBM Tivoli Business Service Manager	22 Jun 202204:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities of Apache HttpClient have affected IBM Jazz Reporting Service	4 Oct 202310:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - January 2019 through July 2022 affects AIX LPARs in IBM PureData System for Operational Analytics	4 Nov 202220:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in dependent libraries affect IBM® Db2® leading to denial of service or privilege escalation.	23 Jun 202118:01	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache HttpClient and Eclipse Jetty Affect IBM Control Center (CVE-2020-13956, CVE-2020-27218)	14 May 202121:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® SDK for Node.js™ in IBM Cloud	11 Mar 202117:48	–	ibm

20 Oct 2021 00:00Current

9.3High risk

Vulners AI Score9.3

CVSS 27.5

CVSS 3.17.5 - 8.6

EPSS0.32362

SSVC