Lucene search

[email protected]NVD:CVE-2021-2163

HistoryApr 22, 2021 - 10:15 p.m.

CVE-2021-2163

2021-04-2222:15:13

[email protected]

web.nvd.nist.gov

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

0.002 Low

EPSS

Percentile

60.9%

JSON

Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N).

Affected configurations

NVD

Node

oraclejdkMatch1.7.0update291

oraclejdkMatch1.8.0update281

oraclejdkMatch11.0.10

oraclejdkMatch16.0.0

oraclejreMatch1.8.0update281

Node

debiandebian_linuxMatch9.0

debiandebian_linuxMatch10.0

Node

fedoraprojectfedoraMatch32

fedoraprojectfedoraMatch33

fedoraprojectfedoraMatch34

Node

oraclegraalvmMatch19.3.5enterprise

oraclegraalvmMatch20.3.1.2enterprise

oraclegraalvmMatch21.0.0.2enterprise

Node

oracleopenjdkRange11–11.0.10

oracleopenjdkRange13–13.0.6

oracleopenjdkRange15–15.0.2

oracleopenjdkMatch7-

oracleopenjdkMatch7update1

oracleopenjdkMatch7update10

oracleopenjdkMatch7update101

oracleopenjdkMatch7update11

oracleopenjdkMatch7update111

oracleopenjdkMatch7update121

oracleopenjdkMatch7update13

oracleopenjdkMatch7update131

oracleopenjdkMatch7update141

oracleopenjdkMatch7update15

oracleopenjdkMatch7update151

oracleopenjdkMatch7update161

oracleopenjdkMatch7update17

oracleopenjdkMatch7update171

oracleopenjdkMatch7update181

oracleopenjdkMatch7update191

oracleopenjdkMatch7update2

oracleopenjdkMatch7update201

oracleopenjdkMatch7update21

oracleopenjdkMatch7update211

oracleopenjdkMatch7update221

oracleopenjdkMatch7update231

oracleopenjdkMatch7update241

oracleopenjdkMatch7update25

oracleopenjdkMatch7update251

oracleopenjdkMatch7update261

oracleopenjdkMatch7update271

oracleopenjdkMatch7update281

oracleopenjdkMatch7update291

oracleopenjdkMatch7update3

oracleopenjdkMatch7update4

oracleopenjdkMatch7update40

oracleopenjdkMatch7update45

oracleopenjdkMatch7update5

oracleopenjdkMatch7update51

oracleopenjdkMatch7update55

oracleopenjdkMatch7update6

oracleopenjdkMatch7update60

oracleopenjdkMatch7update65

oracleopenjdkMatch7update67

oracleopenjdkMatch7update7

oracleopenjdkMatch7update72

oracleopenjdkMatch7update76

oracleopenjdkMatch7update80

oracleopenjdkMatch7update85

oracleopenjdkMatch7update9

oracleopenjdkMatch7update91

oracleopenjdkMatch7update95

oracleopenjdkMatch7update97

oracleopenjdkMatch7update99

oracleopenjdkMatch8-

oracleopenjdkMatch8milestone1

oracleopenjdkMatch8milestone2

oracleopenjdkMatch8milestone3

oracleopenjdkMatch8milestone4

oracleopenjdkMatch8milestone5

oracleopenjdkMatch8milestone6

oracleopenjdkMatch8milestone7

oracleopenjdkMatch8milestone8

oracleopenjdkMatch8milestone9

oracleopenjdkMatch8update101

oracleopenjdkMatch8update102

oracleopenjdkMatch8update11

oracleopenjdkMatch8update111

oracleopenjdkMatch8update112

oracleopenjdkMatch8update121

oracleopenjdkMatch8update131

oracleopenjdkMatch8update141

oracleopenjdkMatch8update151

oracleopenjdkMatch8update152

oracleopenjdkMatch8update161

oracleopenjdkMatch8update162

oracleopenjdkMatch8update171

oracleopenjdkMatch8update172

oracleopenjdkMatch8update181

oracleopenjdkMatch8update191

oracleopenjdkMatch8update192

oracleopenjdkMatch8update20

oracleopenjdkMatch8update201

oracleopenjdkMatch8update202

oracleopenjdkMatch8update211

oracleopenjdkMatch8update212

oracleopenjdkMatch8update221

oracleopenjdkMatch8update222

oracleopenjdkMatch8update231

oracleopenjdkMatch8update232

oracleopenjdkMatch8update241

oracleopenjdkMatch8update242

oracleopenjdkMatch8update25

oracleopenjdkMatch8update252

oracleopenjdkMatch8update262

oracleopenjdkMatch8update271

oracleopenjdkMatch8update281

oracleopenjdkMatch8update282

oracleopenjdkMatch8update31

oracleopenjdkMatch8update40

oracleopenjdkMatch8update45

oracleopenjdkMatch8update5

oracleopenjdkMatch8update51

oracleopenjdkMatch8update60

oracleopenjdkMatch8update65

oracleopenjdkMatch8update66

oracleopenjdkMatch8update71

oracleopenjdkMatch8update72

oracleopenjdkMatch8update73

oracleopenjdkMatch8update74

oracleopenjdkMatch8update77

oracleopenjdkMatch8update91

oracleopenjdkMatch8update92

oracleopenjdkMatch16

Node

netappactive_iq_unified_managerMatch-vmware_vsphere

netappactive_iq_unified_managerMatch-windows

netapphci_management_nodeMatch-

netappsolidfireMatch-

netapphci_compute_nodeMatch-

netapphci_storage_nodeMatch-

References

lists.debian.org/debian-lts-announce/2021/04/msg00021.html

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5ACX4JEVYH6H4PSMGMYWTGABPOFPH3TS/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CFXOKM2233JVGYDOWW77BN54X3GZTIBK/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CG7EWXSO6JUCVHP7R3SOZQ7WPNBOISJH/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAULPCQFLAMBJIS27YLNNX6IHRFJMVP4/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MVDY4T5XMSYDQT6RRKPMRCV4MVGS7KXF/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UD3JEP4HPLK7MNZHVUMKIJPBP74M3A2V/

security.gentoo.org/glsa/202209-05

security.netapp.com/advisory/ntap-20210513-0001/

www.debian.org/security/2021/dsa-4899

www.oracle.com/security-alerts/cpuapr2021.html

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

0.002 Low

EPSS

Percentile

60.9%

JSON

Related for NVD:CVE-2021-2163

ibm59 osv4 openvas31 redhat16 nessus52 centos2 oraclelinux4 redhatcve1 debiancve1 veracode1 almalinux2 ubuntucve1 amazon1 cvelist1 prion1 cve1 ubuntu1 f51 alpinelinux1 fedora6 suse7 mageia1 debian1 kaspersky1 rosalinux1 aix1