14 July 2022
22 June 2022
Base Score: 5.3 MEDIUM - Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Summary Security Advisory ID : BSA-2022-1980 Component : Oracle Java SE Revision : 1.1
Security Advisory ID : BSA-2022-1980
Component : Oracle Java SE
Revision : 1.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.01; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs.
- Brocade SANnav versions before v184.108.40.206
Products Confirmed Not Vulnerable
- Brocade Fabric OS
- Brocade ASCG
A security update has been provided in Brocade SANnav v220.127.116.11, and upper Brocade SANnav releases.
|1.0||Initial Publication||June 22, 2022|
updated with SANnav 2.2.1
July 14, 2022