PT-2021-7893

🗓️ 19 Oct 2021 00:00:00Reported by Positive TechnologiesType

Unauthenticated TLS attacker can read data via JSSE in Java SE and GraalVM; patch available.

Reporter	Title	Published	Views	Family All 843
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Java affects IBM Cloud Application Business Insights - Quaterly Java update, CVE-2021-35603 and CVE-2021-35550	30 Dec 202215:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - January 2019 through July 2022 affects AIX LPARs in IBM PureData System for Operational Analytics	4 Nov 202220:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Jan 2022 - Includes Oracle® January 2022 CPU affects IBM Tivoli Composite Application Manager for Transactions-Robotic Response Time	22 Jun 202202:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect Rational Business Developer	24 Jun 202213:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the IBM Java Runtime affect IBM Rational ClearQuest	26 Jul 202210:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in IBM SDK, Java Technology Edition shipped with IBM Robotic Process Automation	20 Jul 202218:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli Business Service Manager	22 Jun 202204:07	–	ibm
IBM Security Bulletins	Security Bulletin: Java SE as used by IBM Cloud Pak For Security is vulnerable to information disclosure and denial of service.	25 Jul 202214:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct FTP+ is vulnerable to unauthorized sensitive information access due to IBM Java vulnerability (CVE-2021-35603)	21 Jun 202220:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities found in open source code that is shipped with IBM Security Verify Governance, Identity Manager virtual appliance component	20 Jul 202215:54	–	ibm

Source	Link
suse	www.suse.com/security/cve/CVE-2021-2163
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-35556
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-35588
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-35567
bugzilla	www.bugzilla.suse.com/1188564
vulners	www.vulners.com/cve/CVE-2021-35586
osv	www.osv.dev/vulnerability/openSUSE-SU-2021:1480-1
suse	www.suse.com/security/cve/CVE-2021-35564
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.5
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-21282

18 Sep 2026 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 24.3 - 5

CVSS 3.13.7 - 5.3

EPSS0.08346

SSVC