Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle graalvm 21.3.0 vulnerabilities and exploits

(subscribe to this query)
6.4
CVSSv2
CVE-2021-22959
The parser in accepts requests with a space (SP) right after the header name before the colon. This can lead to HTTP Request Smuggling (HRS) in llhttp < v2.1.4 and < v6.0.6.
Llhttp LlhttpOracle Graalvm 21.3.0Oracle Graalvm 20.3.4Debian Debian Linux 11.0
5.8
CVSSv2
CVE-2021-22960
The parse function in llhttp < 2.1.4 and < 6.0.6. ignores chunk extensions when parsing the body of chunked requests. This leads to HTTP Request Smuggling (HRS) under certain conditions.
Llhttp LlhttpOracle Graalvm 21.3.0Oracle Graalvm 20.3.4Debian Debian Linux 11.0
5
CVSSv2
CVE-2022-21349
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 7u321, 8u311; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows u...
Oracle Graalvm 21.3.0Oracle Jre 1.7.0Oracle Graalvm 20.3.4Oracle Jre 1.8.0Oracle Jdk 1.7.0Oracle Jdk 1.8.0Netapp Snapmanager -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Cloud Insights -Netapp E-series Santricity Storage Manager -Netapp Solidfire -Netapp Hci Management Node -Netapp Santricity Unified Manager -Netapp E-series Santricity Web Services -Netapp 7-mode Transition Tool -Netapp E-series Santricity Os ControllerDebian Debian Linux 9.0Oracle Openjdk 8Oracle Openjdk 7
NA
CVE-2023-21835
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0. Easily exploitable v...
Oracle Graalvm 21.3.4Oracle Graalvm 22.3.0Oracle Graalvm 20.3.8Oracle Jre 11.0.17Oracle Jre 17.0.5Oracle Jre 19.0.1Oracle Jdk 11.0.17Oracle Jdk 17.0.5Oracle Jdk 19.0.1Azul Zulu 11.60Azul Zulu 13.52Azul Zulu 15.44Azul Zulu 17.38Azul Zulu 19.30
NA
CVE-2023-21843
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound). Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf, 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0. ...
Oracle Graalvm 21.3.4Oracle Graalvm 22.3.0Oracle Graalvm 20.3.8Oracle Jre 1.8.0Oracle Jre 11.0.17Oracle Jre 17.0.5Oracle Jre 19.0.1Oracle Jdk 11.0.17Oracle Jdk 17.0.5Oracle Jdk 19.0.1Oracle Jdk 1.8.0Azul Zulu 11.60Azul Zulu 13.52Azul Zulu 15.44Azul Zulu 17.38Azul Zulu 19.30Azul Zulu 6.51Azul Zulu 7.57Azul Zulu 8.66
5
CVSSv2
CVE-2022-21277
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability ...
Oracle Graalvm 21.3.0Oracle Jre 17.0.1Oracle Jre 11.0.13Oracle Graalvm 20.3.4Oracle Jdk 17.0.1Oracle Jdk 11.0.13Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Snapmanager -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp E-series Santricity Storage Manager -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager -Netapp Santricity Unified Manager -Netapp E-series Santricity Web Services -Netapp 7-mode Transition Tool -Netapp E-series Santricity Os ControllerNetapp Cloud Insights Acquisition Unit -Netapp Cloud Secure Agent -Netapp Santricity Storage Plugin -
5
CVSSv2
CVE-2022-21366
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability ...
Oracle Graalvm 21.3.0Oracle Jre 17.0.1Oracle Jre 11.0.13Oracle Graalvm 20.3.4Oracle Jdk 17.0.1Oracle Jdk 11.0.13Netapp Snapmanager -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp E-series Santricity Storage Manager -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager -Netapp Santricity Unified Manager -Netapp E-series Santricity Web Services -Netapp 7-mode Transition Tool -Netapp E-series Santricity Os ControllerNetapp Cloud Insights Acquisition Unit -Netapp Cloud Secure Agent -Netapp Santricity Storage Plugin -Debian Debian Linux 10.0Debian Debian Linux 11.0
5
CVSSv2
CVE-2022-21271
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulner...
Oracle Solaris 11Oracle Http Server 12.2.1.3.0Oracle Http Server 12.2.1.4.0Oracle Zfs Storage Appliance Kit 8.8Oracle Graalvm 21.3.0Oracle Jre 1.7.0Oracle Jre 11.0.13Oracle Graalvm 20.3.4Oracle Jre 1.8.0Oracle Jdk 1.7.0Oracle Jdk 11.0.13Oracle Jdk 1.8.0Netapp Snapmanager -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp E-series Santricity Storage Manager -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager -Netapp Santricity Unified Manager -Netapp E-series Santricity Web Services -Netapp 7-mode Transition Tool -
5
CVSSv2
CVE-2022-21291
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable ...
Oracle Graalvm 21.3.0Oracle Jre 17.0.1Oracle Jre 1.7.0Oracle Jre 11.0.13Oracle Graalvm 20.3.4Oracle Jre 1.8.0Oracle Jdk 17.0.1Oracle Jdk 1.7.0Oracle Jdk 11.0.13Oracle Jdk 1.8.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Snapmanager -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp E-series Santricity Storage Manager -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager -Netapp Santricity Unified Manager -Netapp E-series Santricity Web Services -Netapp 7-mode Transition Tool -
5
CVSSv2
CVE-2022-21283
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerabilit...
Oracle Graalvm 21.3.0Oracle Jre 17.0.1Oracle Jre 11.0.13Oracle Graalvm 20.3.4Oracle Jdk 17.0.1Oracle Jdk 11.0.13Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 34Netapp Snapmanager -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp E-series Santricity Storage Manager -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager -Netapp Santricity Unified Manager -Netapp E-series Santricity Web Services -Netapp 7-mode Transition Tool -Netapp E-series Santricity Os ControllerNetapp Cloud Insights Acquisition Unit -
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook