5.9

CVE-2021-2161

Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. It can also be exploited by supplying untrusted data to APIs in the specified Component. CVSS 3.1 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).

Data is provided by the National Vulnerability Database (NVD)
OracleJdk Version1.7.0 Updateupdate291
OracleJdk Version1.8.0 Updateupdate281
OracleJdk Version11.0.10
OracleJdk Version16.0.0
OracleJre Version1.8.0 Updateupdate281
DebianDebian Linux Version9.0
DebianDebian Linux Version10.0
FedoraprojectFedora Version32
FedoraprojectFedora Version33
FedoraprojectFedora Version34
OracleGraalvm Version19.3.5 SwEditionenterprise
OracleGraalvm Version20.3.1.2 SwEditionenterprise
OracleGraalvm Version21.0.0.2 SwEditionenterprise
OracleOpenjdk Version >= 11 <= 11.0.10
OracleOpenjdk Version >= 13 <= 13.0.6
OracleOpenjdk Version >= 15 <= 15.0.2
OracleOpenjdk Version7 Update-
OracleOpenjdk Version7 Updateupdate1
OracleOpenjdk Version7 Updateupdate10
OracleOpenjdk Version7 Updateupdate101
OracleOpenjdk Version7 Updateupdate11
OracleOpenjdk Version7 Updateupdate111
OracleOpenjdk Version7 Updateupdate121
OracleOpenjdk Version7 Updateupdate13
OracleOpenjdk Version7 Updateupdate131
OracleOpenjdk Version7 Updateupdate141
OracleOpenjdk Version7 Updateupdate15
OracleOpenjdk Version7 Updateupdate151
OracleOpenjdk Version7 Updateupdate161
OracleOpenjdk Version7 Updateupdate17
OracleOpenjdk Version7 Updateupdate171
OracleOpenjdk Version7 Updateupdate181
OracleOpenjdk Version7 Updateupdate191
OracleOpenjdk Version7 Updateupdate2
OracleOpenjdk Version7 Updateupdate201
OracleOpenjdk Version7 Updateupdate21
OracleOpenjdk Version7 Updateupdate211
OracleOpenjdk Version7 Updateupdate221
OracleOpenjdk Version7 Updateupdate231
OracleOpenjdk Version7 Updateupdate241
OracleOpenjdk Version7 Updateupdate25
OracleOpenjdk Version7 Updateupdate251
OracleOpenjdk Version7 Updateupdate261
OracleOpenjdk Version7 Updateupdate271
OracleOpenjdk Version7 Updateupdate281
OracleOpenjdk Version7 Updateupdate291
OracleOpenjdk Version7 Updateupdate3
OracleOpenjdk Version7 Updateupdate4
OracleOpenjdk Version7 Updateupdate40
OracleOpenjdk Version7 Updateupdate45
OracleOpenjdk Version7 Updateupdate5
OracleOpenjdk Version7 Updateupdate51
OracleOpenjdk Version7 Updateupdate55
OracleOpenjdk Version7 Updateupdate6
OracleOpenjdk Version7 Updateupdate60
OracleOpenjdk Version7 Updateupdate65
OracleOpenjdk Version7 Updateupdate67
OracleOpenjdk Version7 Updateupdate7
OracleOpenjdk Version7 Updateupdate72
OracleOpenjdk Version7 Updateupdate76
OracleOpenjdk Version7 Updateupdate80
OracleOpenjdk Version7 Updateupdate85
OracleOpenjdk Version7 Updateupdate9
OracleOpenjdk Version7 Updateupdate91
OracleOpenjdk Version7 Updateupdate95
OracleOpenjdk Version7 Updateupdate97
OracleOpenjdk Version7 Updateupdate99
OracleOpenjdk Version8 Update-
OracleOpenjdk Version8 Updatemilestone1
OracleOpenjdk Version8 Updatemilestone2
OracleOpenjdk Version8 Updatemilestone3
OracleOpenjdk Version8 Updatemilestone4
OracleOpenjdk Version8 Updatemilestone5
OracleOpenjdk Version8 Updatemilestone6
OracleOpenjdk Version8 Updatemilestone7
OracleOpenjdk Version8 Updatemilestone8
OracleOpenjdk Version8 Updatemilestone9
OracleOpenjdk Version8 Updateupdate101
OracleOpenjdk Version8 Updateupdate102
OracleOpenjdk Version8 Updateupdate11
OracleOpenjdk Version8 Updateupdate111
OracleOpenjdk Version8 Updateupdate112
OracleOpenjdk Version8 Updateupdate121
OracleOpenjdk Version8 Updateupdate131
OracleOpenjdk Version8 Updateupdate141
OracleOpenjdk Version8 Updateupdate151
OracleOpenjdk Version8 Updateupdate152
OracleOpenjdk Version8 Updateupdate161
OracleOpenjdk Version8 Updateupdate162
OracleOpenjdk Version8 Updateupdate171
OracleOpenjdk Version8 Updateupdate172
OracleOpenjdk Version8 Updateupdate181
OracleOpenjdk Version8 Updateupdate191
OracleOpenjdk Version8 Updateupdate192
OracleOpenjdk Version8 Updateupdate20
OracleOpenjdk Version8 Updateupdate201
OracleOpenjdk Version8 Updateupdate202
OracleOpenjdk Version8 Updateupdate211
OracleOpenjdk Version8 Updateupdate212
OracleOpenjdk Version8 Updateupdate221
OracleOpenjdk Version8 Updateupdate222
OracleOpenjdk Version8 Updateupdate231
OracleOpenjdk Version8 Updateupdate232
OracleOpenjdk Version8 Updateupdate241
OracleOpenjdk Version8 Updateupdate242
OracleOpenjdk Version8 Updateupdate25
OracleOpenjdk Version8 Updateupdate252
OracleOpenjdk Version8 Updateupdate262
OracleOpenjdk Version8 Updateupdate271
OracleOpenjdk Version8 Updateupdate281
OracleOpenjdk Version8 Updateupdate282
OracleOpenjdk Version8 Updateupdate31
OracleOpenjdk Version8 Updateupdate40
OracleOpenjdk Version8 Updateupdate45
OracleOpenjdk Version8 Updateupdate5
OracleOpenjdk Version8 Updateupdate51
OracleOpenjdk Version8 Updateupdate60
OracleOpenjdk Version8 Updateupdate65
OracleOpenjdk Version8 Updateupdate66
OracleOpenjdk Version8 Updateupdate71
OracleOpenjdk Version8 Updateupdate72
OracleOpenjdk Version8 Updateupdate73
OracleOpenjdk Version8 Updateupdate74
OracleOpenjdk Version8 Updateupdate77
OracleOpenjdk Version8 Updateupdate91
OracleOpenjdk Version8 Updateupdate92
OracleOpenjdk Version16
NetappActive Iq Unified Manager Version- SwPlatformvmware_vsphere
NetappActive Iq Unified Manager Version- SwPlatformwindows
NetappSolidfire Version-
NetappHci Compute Node Version-
NetappHci Storage Node Version-
McafeeEpolicy Orchestrator Version < 5.10.0
McafeeEpolicy Orchestrator Version5.10.0 Update-
McafeeEpolicy Orchestrator Version5.10.0 Updateupdate_1
McafeeEpolicy Orchestrator Version5.10.0 Updateupdate_10
McafeeEpolicy Orchestrator Version5.10.0 Updateupdate_2
McafeeEpolicy Orchestrator Version5.10.0 Updateupdate_3
McafeeEpolicy Orchestrator Version5.10.0 Updateupdate_4
McafeeEpolicy Orchestrator Version5.10.0 Updateupdate_5
McafeeEpolicy Orchestrator Version5.10.0 Updateupdate_6
McafeeEpolicy Orchestrator Version5.10.0 Updateupdate_7
McafeeEpolicy Orchestrator Version5.10.0 Updateupdate_8
McafeeEpolicy Orchestrator Version5.10.0 Updateupdate_9
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.27% 0.503
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
secalert_us@oracle.com 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N