Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle graalvm 21.3.0 vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv3

CVE-2021-22959

The parser in accepts requests with a space (SP) right after the header name before the colon. This can lead to HTTP Request Smuggling (HRS) in llhttp < v2.1.4 and < v6.0.6.
Llhttp LlhttpOracle Graalvm 20.3.4Oracle Graalvm 21.3.0Debian Debian Linux 11.0
6.5
CVSSv3

CVE-2021-22960

The parse function in llhttp < 2.1.4 and < 6.0.6. ignores chunk extensions when parsing the body of chunked requests. This leads to HTTP Request Smuggling (HRS) under certain conditions.
Llhttp LlhttpOracle Graalvm 20.3.4Oracle Graalvm 21.3.0Debian Debian Linux 11.0
5.3
CVSSv3

CVE-2022-21349

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 7u321, 8u311; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows u...
Oracle Graalvm 20.3.4Oracle Graalvm 21.3.0Oracle Jdk 1.7.0Oracle Jdk 1.8.0Oracle Jre 1.7.0Oracle Jre 1.8.0Netapp 7-mode Transition Tool -Netapp Cloud Insights -Netapp E-series Santricity Os ControllerNetapp E-series Santricity Storage Manager -Netapp E-series Santricity Web Services -Netapp Hci Management Node -
5.3
CVSSv3

CVE-2022-21271

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulner...
Oracle Graalvm 20.3.4Oracle Graalvm 21.3.0Oracle Http Server 12.2.1.3.0Oracle Http Server 12.2.1.4.0Oracle Jdk 1.7.0Oracle Jdk 1.8.0Oracle Jdk 11.0.13Oracle Jre 1.7.0Oracle Jre 1.8.0Oracle Jre 11.0.13Oracle Zfs Storage Appliance Kit 8.8Oracle Solaris 11
5.3
CVSSv3

CVE-2022-21277

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability ...
Oracle Graalvm 20.3.4Oracle Graalvm 21.3.0Oracle Jdk 11.0.13Oracle Jdk 17.0.1Oracle Jre 11.0.13Oracle Jre 17.0.1Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp 7-mode Transition Tool -Netapp Active Iq Unified Manager -Netapp Cloud Insights Acquisition Unit -Netapp Cloud Secure Agent -
5.3
CVSSv3

CVE-2022-21366

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability ...
Oracle Graalvm 20.3.4Oracle Graalvm 21.3.0Oracle Jdk 11.0.13Oracle Jdk 17.0.1Oracle Jre 11.0.13Oracle Jre 17.0.1Netapp 7-mode Transition Tool -Netapp Active Iq Unified Manager -Netapp Cloud Insights Acquisition Unit -Netapp Cloud Secure Agent -Netapp E-series Santricity Os ControllerNetapp E-series Santricity Storage Manager -
5.3
CVSSv3

CVE-2022-21283

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerabilit...
Oracle Graalvm 20.3.4Oracle Graalvm 21.3.0Oracle Jdk 11.0.13Oracle Jdk 17.0.1Oracle Jre 11.0.13Oracle Jre 17.0.1Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 34Netapp 7-mode Transition Tool -Netapp Active Iq Unified Manager -
5.3
CVSSv3

CVE-2022-21291

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable ...
Oracle Graalvm 20.3.4Oracle Graalvm 21.3.0Oracle Jdk 1.7.0Oracle Jdk 1.8.0Oracle Jdk 11.0.13Oracle Jdk 17.0.1Oracle Jre 1.7.0Oracle Jre 1.8.0Oracle Jre 11.0.13Oracle Jre 17.0.1Debian Debian Linux 10.0Debian Debian Linux 11.0
5.3
CVSSv3

CVE-2022-21282

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vul...
Oracle Graalvm 20.3.4Oracle Graalvm 21.3.0Oracle Jdk 1.7.0Oracle Jdk 1.8.0Oracle Jdk 11.0.13Oracle Jdk 17.0.1Oracle Jre 1.7.0Oracle Jre 1.8.0Oracle Jre 11.0.13Oracle Jre 17.0.1Debian Debian Linux 9.0Debian Debian Linux 10.0
5.3
CVSSv3

CVE-2022-21293

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitabl...
Oracle Graalvm 20.3.4Oracle Graalvm 21.3.0Oracle Jdk 1.7.0Oracle Jdk 1.8.0Oracle Jdk 11.0.13Oracle Jdk 17.0.1Oracle Jre 1.7.0Oracle Jre 1.8.0Oracle Jre 11.0.13Oracle Jre 17.0.1Debian Debian Linux 9.0Debian Debian Linux 10.0
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2025-25291CVE-2025-29358download managervisual bacnet capture toolgolang.org/x/netCVE-2025-1429log injectioncodename065local usersCVE-2025-29359CVE-2025-27363CVE-2025-2104wireless
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook