CVE-2021-35561

oracle graalvm, oracle openjdk, netapp active iq unified manager +11 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2021-35561

Katalog CVE

CVSS 5.3 · Medium EPSS 6,9%

Kerentanan pada oracle graalvm, oracle openjdk +12 lainnya. Skor CVSS 3.1 5.3 (Medium) menurut oracle.com.

Deskripsi (NVD)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Rincian

Terbit di NVD
20 Oktober 2021
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
5.3 (Medium), sumber oracle.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator
EPSS (30 hari)
6,9% peluang dieksploitasi; lebih tinggi dari 93,9% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
oracle graalvm Versi 20.3.3
oracle graalvm Versi 21.2.0
oracle openjdk Versi 7 update311
oracle openjdk Versi 8 update301
oracle openjdk Versi 11.0.12
oracle openjdk Versi 17
netapp active iq unified manager Semua versi
netapp e-series santricity os controller Versi 11.0.0 hingga 11.50.2
netapp e-series santricity storage manager Semua versi
netapp e-series santricity web services Semua versi
netapp hci management node Semua versi
netapp oncommand insight Semua versi
netapp oncommand workflow automation Semua versi
netapp santricity unified manager Semua versi
netapp snapmanager Semua versi
netapp solidfire Semua versi
fedoraproject fedora Versi 33
fedoraproject fedora Versi 34
fedoraproject fedora Versi 35
debian debian linux Versi 9.0
debian debian linux Versi 10.0
debian debian linux Versi 11.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.