Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle graalvm 20.3.6 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2022-25647
The package com.google.code.gson:gson prior to 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.
Google GsonDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Active Iq Unified Manager -Oracle Retail Order Broker 18.0Oracle Retail Order Broker 19.1Oracle Graalvm 20.3.6Oracle Graalvm 21.3.2Oracle Graalvm 22.1.0Oracle Financial Services Crime And Compliance Management Studio 8.0.8.2.0Oracle Financial Services Crime And Compliance Management Studio 8.0.8.3.0
NA
CVE-2022-21540
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle GraalVM Enterprise Edition: 20.3.6, 21.3.2 and 22.1....
Oracle Jre 17.0.3.1Oracle Jre 18.0.1.1Oracle Jre 11.0.15.1Oracle Jre 1.8.0Oracle Jre 1.7.0Oracle Jdk 17.0.3.1Oracle Jdk 18.0.1.1Oracle Jdk 11.0.15.1Oracle Jdk 1.8.0Oracle Jdk 1.7.0Oracle Graalvm 20.3.6Oracle Graalvm 21.3.2Oracle Graalvm 22.1.0Oracle Openjdk 8Oracle Openjdk 7Oracle Openjdk 18Oracle OpenjdkFedoraproject Fedora 36Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Oncommand Insight -Netapp Solidfire -
NA
CVE-2022-21541
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle GraalVM Enterprise Edition: 20.3.6, 21.3.2 and 22.1....
Oracle Jre 17.0.3.1Oracle Jre 18.0.1.1Oracle Jre 11.0.15.1Oracle Jre 1.8.0Oracle Jre 1.7.0Oracle Jdk 17.0.3.1Oracle Jdk 18.0.1.1Oracle Jdk 11.0.15.1Oracle Jdk 1.8.0Oracle Jdk 1.7.0Oracle Graalvm 20.3.6Oracle Graalvm 21.3.2Oracle Graalvm 22.1.0Oracle Openjdk 8Oracle Openjdk 7Oracle Openjdk 18Oracle OpenjdkFedoraproject Fedora 36Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Oncommand Insight -Netapp Solidfire -
NA
CVE-2022-34169
The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update t...
Apache Xalan-javaDebian Debian Linux 10.0Debian Debian Linux 11.0Oracle Jre 17.0.3.1Oracle Jre 18.0.1.1Oracle Jre 11.0.15.1Oracle Jre 1.8.0Oracle Jre 1.7.0Oracle Jdk 17.0.3.1Oracle Jdk 18.0.1.1Oracle Jdk 11.0.15.1Oracle Jdk 1.8.0Oracle Jdk 1.7.0Oracle Graalvm 20.3.6Oracle Graalvm 21.3.2Oracle Graalvm 22.1.0Oracle Openjdk 8Oracle Openjdk 7Oracle Openjdk 18Oracle OpenjdkFedoraproject Fedora 35Fedoraproject Fedora 36
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook