5.3

CVE-2022-21293

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Data is provided by the National Vulnerability Database (NVD)
OracleGraalvm Version20.3.4 SwEditionenterprise
OracleGraalvm Version21.3.0 SwEditionenterprise
OracleJdk Version1.7.0 Updateupdate321
OracleJdk Version1.8.0 Updateupdate311
OracleJdk Version11.0.13
OracleJdk Version17.0.1
OracleJre Version1.7.0 Updateupdate321
OracleJre Version1.8.0 Updateupdate311
OracleJre Version11.0.13
OracleJre Version17.0.1
DebianDebian Linux Version9.0
DebianDebian Linux Version10.0
DebianDebian Linux Version11.0
FedoraprojectFedora Version34
NetappActive Iq Unified Manager Version- SwPlatformvmware_vsphere
NetappActive Iq Unified Manager Version- SwPlatformwindows
NetappCloud Secure Agent Version-
NetappE-series Santricity Os Controller Version >= 11.0.0 <= 11.70.1
NetappE-series Santricity Web Services Version- SwPlatformweb_services_proxy
NetappOncommand Insight Version-
NetappSantricity Storage Plugin Version- SwPlatformvcenter
NetappSnapmanager Version- SwPlatformoracle
NetappSnapmanager Version- SwPlatformsap
NetappSolidfire Version-
OracleOpenjdk Version >= 11 <= 11.0.13
OracleOpenjdk Version >= 13 <= 13.0.9
OracleOpenjdk Version >= 15 <= 15.0.5
OracleOpenjdk Version7 Update-
OracleOpenjdk Version7 Updateupdate1
OracleOpenjdk Version7 Updateupdate10
OracleOpenjdk Version7 Updateupdate101
OracleOpenjdk Version7 Updateupdate11
OracleOpenjdk Version7 Updateupdate111
OracleOpenjdk Version7 Updateupdate121
OracleOpenjdk Version7 Updateupdate13
OracleOpenjdk Version7 Updateupdate131
OracleOpenjdk Version7 Updateupdate141
OracleOpenjdk Version7 Updateupdate15
OracleOpenjdk Version7 Updateupdate151
OracleOpenjdk Version7 Updateupdate161
OracleOpenjdk Version7 Updateupdate17
OracleOpenjdk Version7 Updateupdate171
OracleOpenjdk Version7 Updateupdate181
OracleOpenjdk Version7 Updateupdate191
OracleOpenjdk Version7 Updateupdate2
OracleOpenjdk Version7 Updateupdate201
OracleOpenjdk Version7 Updateupdate21
OracleOpenjdk Version7 Updateupdate211
OracleOpenjdk Version7 Updateupdate221
OracleOpenjdk Version7 Updateupdate231
OracleOpenjdk Version7 Updateupdate241
OracleOpenjdk Version7 Updateupdate25
OracleOpenjdk Version7 Updateupdate251
OracleOpenjdk Version7 Updateupdate261
OracleOpenjdk Version7 Updateupdate271
OracleOpenjdk Version7 Updateupdate281
OracleOpenjdk Version7 Updateupdate291
OracleOpenjdk Version7 Updateupdate3
OracleOpenjdk Version7 Updateupdate301
OracleOpenjdk Version7 Updateupdate311
OracleOpenjdk Version7 Updateupdate321
OracleOpenjdk Version7 Updateupdate4
OracleOpenjdk Version7 Updateupdate40
OracleOpenjdk Version7 Updateupdate45
OracleOpenjdk Version7 Updateupdate5
OracleOpenjdk Version7 Updateupdate51
OracleOpenjdk Version7 Updateupdate55
OracleOpenjdk Version7 Updateupdate6
OracleOpenjdk Version7 Updateupdate60
OracleOpenjdk Version7 Updateupdate65
OracleOpenjdk Version7 Updateupdate67
OracleOpenjdk Version7 Updateupdate7
OracleOpenjdk Version7 Updateupdate72
OracleOpenjdk Version7 Updateupdate76
OracleOpenjdk Version7 Updateupdate80
OracleOpenjdk Version7 Updateupdate85
OracleOpenjdk Version7 Updateupdate9
OracleOpenjdk Version7 Updateupdate91
OracleOpenjdk Version7 Updateupdate95
OracleOpenjdk Version7 Updateupdate97
OracleOpenjdk Version7 Updateupdate99
OracleOpenjdk Version8 Update-
OracleOpenjdk Version8 Updatemilestone1
OracleOpenjdk Version8 Updatemilestone2
OracleOpenjdk Version8 Updatemilestone3
OracleOpenjdk Version8 Updatemilestone4
OracleOpenjdk Version8 Updatemilestone5
OracleOpenjdk Version8 Updatemilestone6
OracleOpenjdk Version8 Updatemilestone7
OracleOpenjdk Version8 Updatemilestone8
OracleOpenjdk Version8 Updatemilestone9
OracleOpenjdk Version8 Updateupdate101
OracleOpenjdk Version8 Updateupdate102
OracleOpenjdk Version8 Updateupdate11
OracleOpenjdk Version8 Updateupdate111
OracleOpenjdk Version8 Updateupdate112
OracleOpenjdk Version8 Updateupdate121
OracleOpenjdk Version8 Updateupdate131
OracleOpenjdk Version8 Updateupdate141
OracleOpenjdk Version8 Updateupdate151
OracleOpenjdk Version8 Updateupdate152
OracleOpenjdk Version8 Updateupdate161
OracleOpenjdk Version8 Updateupdate162
OracleOpenjdk Version8 Updateupdate171
OracleOpenjdk Version8 Updateupdate172
OracleOpenjdk Version8 Updateupdate181
OracleOpenjdk Version8 Updateupdate191
OracleOpenjdk Version8 Updateupdate192
OracleOpenjdk Version8 Updateupdate20
OracleOpenjdk Version8 Updateupdate201
OracleOpenjdk Version8 Updateupdate202
OracleOpenjdk Version8 Updateupdate211
OracleOpenjdk Version8 Updateupdate212
OracleOpenjdk Version8 Updateupdate221
OracleOpenjdk Version8 Updateupdate222
OracleOpenjdk Version8 Updateupdate231
OracleOpenjdk Version8 Updateupdate232
OracleOpenjdk Version8 Updateupdate241
OracleOpenjdk Version8 Updateupdate242
OracleOpenjdk Version8 Updateupdate25
OracleOpenjdk Version8 Updateupdate252
OracleOpenjdk Version8 Updateupdate262
OracleOpenjdk Version8 Updateupdate271
OracleOpenjdk Version8 Updateupdate281
OracleOpenjdk Version8 Updateupdate282
OracleOpenjdk Version8 Updateupdate291
OracleOpenjdk Version8 Updateupdate301
OracleOpenjdk Version8 Updateupdate302
OracleOpenjdk Version8 Updateupdate31
OracleOpenjdk Version8 Updateupdate312
OracleOpenjdk Version8 Updateupdate40
OracleOpenjdk Version8 Updateupdate45
OracleOpenjdk Version8 Updateupdate5
OracleOpenjdk Version8 Updateupdate51
OracleOpenjdk Version8 Updateupdate60
OracleOpenjdk Version8 Updateupdate65
OracleOpenjdk Version8 Updateupdate66
OracleOpenjdk Version8 Updateupdate71
OracleOpenjdk Version8 Updateupdate72
OracleOpenjdk Version8 Updateupdate73
OracleOpenjdk Version8 Updateupdate74
OracleOpenjdk Version8 Updateupdate77
OracleOpenjdk Version8 Updateupdate91
OracleOpenjdk Version8 Updateupdate92
OracleOpenjdk Version17
OracleOpenjdk Version17.0.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.18% 0.406
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
secalert_us@oracle.com 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L