CVE-2022-21426

Vendordebian, oracle, netapp, azulProductdebian linux, jre, active iq unified manager, oncommand insight, jdk, e-series santricity os controller, e-series santricity storage manager, e-series santricity web services, 7-mode transition tool, solidfire & hci management node, graalvm, hci compute node firmware, solidfire, enterprise sds & hci storage node, santricity unified manager, cloud secure agent, cloud insights acquisition unit, zuluDiscoveredApr 19, 2022UpdatedNov 21, 2024

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run…

View graph Watch Export

CVSS v3.1

5.3 MEDIUM

EPSS

3.20%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

EPSS Trend

Aug 16, 2026 → Sep 21, 2026

● 0.00pp

3.20% → 3.20% over 3 tracked changes

CVSS v3.1 Detail

Attack VectorNETWORK

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

ScopeUNCHANGED

ConfidentialityNONE

IntegrityNONE

AvailabilityLOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Connections

17 relationships