Vulnerability-Lookup

CVE-2021-35550 (GCVE-0-2021-35550)

Vulnerability from cvelistv5 – Published: 2021-10-20 10:49 – Updated: 2024-08-04 00:40

Summary

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).

Severity

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Oracle GraalVM Enterprise Edition accessible data.

Assigner

oracle

References

12 references

URL	Tags
https://www.oracle.com/security-alerts/cpuoct2021.html
https://security.netapp.com/advisory/ntap-2021102…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://www.debian.org/security/2021/dsa-5000	vendor-advisory
https://lists.debian.org/debian-lts-announce/2021…	mailing-list
https://security.gentoo.org/glsa/202209-05	vendor-advisory
https://security.netapp.com/advisory/ntap-2024062…

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	Java SE JDK and JRE	Affected: Java SE:7u311 Affected: Java SE:8u301 Affected: Java SE:11.0.12 Affected: Oracle GraalVM Enterprise Edition:20.3.3 Affected: Oracle GraalVM Enterprise Edition:21.2.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-35550",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-24T14:29:28.454778Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-24T14:30:11.763Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T00:40:46.946Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20211022-0004/"
          },
          {
            "name": "FEDORA-2021-35145352b0",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT/"
          },
          {
            "name": "FEDORA-2021-7701833090",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/"
          },
          {
            "name": "FEDORA-2021-9a51a6f8b1",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V362B2BWTH5IJDL45QPQGMBKIQOG7JX5/"
          },
          {
            "name": "FEDORA-2021-1cc8ffd122",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/"
          },
          {
            "name": "FEDORA-2021-eb3e3e87d3",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O/"
          },
          {
            "name": "FEDORA-2021-107c8c5063",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/"
          },
          {
            "name": "DSA-5000",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2021/dsa-5000"
          },
          {
            "name": "[debian-lts-announce] 20211109 [SECURITY] [DLA 2814-1] openjdk-8 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html"
          },
          {
            "name": "GLSA-202209-05",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202209-05"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20240621-0006/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Java SE JDK and JRE",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Java SE:7u311"
            },
            {
              "status": "affected",
              "version": "Java SE:8u301"
            },
            {
              "status": "affected",
              "version": "Java SE:11.0.12"
            },
            {
              "status": "affected",
              "version": "Oracle GraalVM Enterprise Edition:20.3.3"
            },
            {
              "status": "affected",
              "version": "Oracle GraalVM Enterprise Edition:21.2.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Java SE, Oracle GraalVM Enterprise Edition accessible data.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-06-21T19:06:58.485Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20211022-0004/"
        },
        {
          "name": "FEDORA-2021-35145352b0",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT/"
        },
        {
          "name": "FEDORA-2021-7701833090",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/"
        },
        {
          "name": "FEDORA-2021-9a51a6f8b1",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V362B2BWTH5IJDL45QPQGMBKIQOG7JX5/"
        },
        {
          "name": "FEDORA-2021-1cc8ffd122",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/"
        },
        {
          "name": "FEDORA-2021-eb3e3e87d3",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O/"
        },
        {
          "name": "FEDORA-2021-107c8c5063",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/"
        },
        {
          "name": "DSA-5000",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2021/dsa-5000"
        },
        {
          "name": "[debian-lts-announce] 20211109 [SECURITY] [DLA 2814-1] openjdk-8 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html"
        },
        {
          "name": "GLSA-202209-05",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202209-05"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20240621-0006/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2021-35550",
    "datePublished": "2021-10-20T10:49:59.000Z",
    "dateReserved": "2021-06-28T00:00:00.000Z",
    "dateUpdated": "2024-08-04T00:40:46.946Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2021-35550",
      "date": "2026-06-04",
      "epss": "0.00091",
      "percentile": "0.2567"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2021-35550\",\"sourceIdentifier\":\"secalert_us@oracle.com\",\"published\":\"2021-10-20T11:16:31.843\",\"lastModified\":\"2024-11-21T06:12:29.723\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad en el producto Java SE, Oracle GraalVM Enterprise Edition de Oracle Java SE (componente: JSSE). Las versiones compatibles que est\u00e1n afectadas son Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 y 21.2.0. Una vulnerabilidad dif\u00edcil de explotar permite a un atacante no autenticado con acceso a la red por medio de TLS comprometer Java SE, Oracle GraalVM Enterprise Edition. Los ataques con \u00e9xito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos cr\u00edticos o el acceso completo a todos los datos accesibles de Java SE, Oracle GraalVM Enterprise Edition. Nota: Esta vulnerabilidad se aplica a las implantaciones de Java, normalmente en clientes que ejecutan aplicaciones Java Web Start con sandbox o applets Java con sandbox, que cargan y ejecutan c\u00f3digo que no es confiable (por ejemplo, c\u00f3digo que viene de Internet) y dependen del sandbox de Java para la seguridad. Esta vulnerabilidad tambi\u00e9n puede ser explotada al usar APIs en el Componente especificado, por ejemplo, mediante un servicio web que suministra datos a las APIs. CVSS 3.1 Puntuaci\u00f3n Base 5.9 (impactos en la Confidencialidad). Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secalert_us@oracle.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":5.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.2,\"impactScore\":3.6},{\"source\":\"nvd@nist.gov\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":5.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.2,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:C/I:N/A:N\",\"baseScore\":7.1,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":8.6,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:graalvm:20.3.3:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"53B2BB06-A2F7-4603-89C3-C8500E55483A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:graalvm:21.2.0:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"01E88C86-8C04-4A4A-BF45-9082AA783056\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:openjdk:7:update311:*:*:*:*:*:*\",\"matchCriteriaId\":\"9F6F0137-F91F-4028-BED2-C29640D52C23\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:openjdk:8:update301:*:*:*:*:*:*\",\"matchCriteriaId\":\"56F2883B-6A1B-4081-8877-07AF3A73F6CD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:openjdk:11.0.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"190C4FEC-ECFD-4E46-8C4D-F99241CF0F75\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*\",\"matchCriteriaId\":\"3A756737-1CC4-42C2-A4DF-E1C893B4E2D5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*\",\"matchCriteriaId\":\"B55E8D50-99B4-47EC-86F9-699B67D473CE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.0.0\",\"versionEndIncluding\":\"11.50.2\",\"matchCriteriaId\":\"27723C4B-C434-4733-96E4-397AA6ECE601\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D9CC59D-6182-4B5E-96B5-226FCD343916\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:*\",\"matchCriteriaId\":\"1AEFF829-A8F2-4041-8DDF-E705DB3ADED2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A3C19813-E823-456A-B1CE-EC0684CE1953\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1BE6C1F-2565-4E97-92AA-16563E5660A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:santricity_unified_manager:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A372B177-F740-4655-865C-31777A6E140B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*\",\"matchCriteriaId\":\"26A2B713-7D6D-420A-93A4-E0D983C983DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*\",\"matchCriteriaId\":\"64DE38C8-94F1-4860-B045-F33928F676A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E460AA51-FCDA-46B9-AE97-E6676AA5E194\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A930E247-0B43-43CB-98FF-6CE7B8189835\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80E516C0-98A4-4ADE-B69F-66A772E2BAAA\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA6FEEC2-9F11-4643-8827-749718254FED\"}]}]}],\"references\":[{\"url\":\"https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/\",\"source\":\"secalert_us@oracle.com\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT/\",\"source\":\"secalert_us@oracle.com\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O/\",\"source\":\"secalert_us@oracle.com\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/\",\"source\":\"secalert_us@oracle.com\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/\",\"source\":\"secalert_us@oracle.com\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V362B2BWTH5IJDL45QPQGMBKIQOG7JX5/\",\"source\":\"secalert_us@oracle.com\"},{\"url\":\"https://security.gentoo.org/glsa/202209-05\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20211022-0004/\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20240621-0006/\",\"source\":\"secalert_us@oracle.com\"},{\"url\":\"https://www.debian.org/security/2021/dsa-5000\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuoct2021.html\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V362B2BWTH5IJDL45QPQGMBKIQOG7JX5/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/202209-05\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20211022-0004/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20240621-0006/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.debian.org/security/2021/dsa-5000\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuoct2021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://www.oracle.com/security-alerts/cpuoct2021.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20211022-0004/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT/\", \"name\": \"FEDORA-2021-35145352b0\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/\", \"name\": \"FEDORA-2021-7701833090\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V362B2BWTH5IJDL45QPQGMBKIQOG7JX5/\", \"name\": \"FEDORA-2021-9a51a6f8b1\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/\", \"name\": \"FEDORA-2021-1cc8ffd122\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O/\", \"name\": \"FEDORA-2021-eb3e3e87d3\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/\", \"name\": \"FEDORA-2021-107c8c5063\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://www.debian.org/security/2021/dsa-5000\", \"name\": \"DSA-5000\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html\", \"name\": \"[debian-lts-announce] 20211109 [SECURITY] [DLA 2814-1] openjdk-8 security update\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"https://security.gentoo.org/glsa/202209-05\", \"name\": \"GLSA-202209-05\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20240621-0006/\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-04T00:40:46.946Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2021-35550\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-06-24T14:29:28.454778Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-06-24T14:30:06.907Z\"}}], \"cna\": {\"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.9, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"vendor\": \"Oracle Corporation\", \"product\": \"Java SE JDK and JRE\", \"versions\": [{\"status\": \"affected\", \"version\": \"Java SE:7u311\"}, {\"status\": \"affected\", \"version\": \"Java SE:8u301\"}, {\"status\": \"affected\", \"version\": \"Java SE:11.0.12\"}, {\"status\": \"affected\", \"version\": \"Oracle GraalVM Enterprise Edition:20.3.3\"}, {\"status\": \"affected\", \"version\": \"Oracle GraalVM Enterprise Edition:21.2.0\"}]}], \"references\": [{\"url\": \"https://www.oracle.com/security-alerts/cpuoct2021.html\"}, {\"url\": \"https://security.netapp.com/advisory/ntap-20211022-0004/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT/\", \"name\": \"FEDORA-2021-35145352b0\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/\", \"name\": \"FEDORA-2021-7701833090\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V362B2BWTH5IJDL45QPQGMBKIQOG7JX5/\", \"name\": \"FEDORA-2021-9a51a6f8b1\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/\", \"name\": \"FEDORA-2021-1cc8ffd122\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O/\", \"name\": \"FEDORA-2021-eb3e3e87d3\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/\", \"name\": \"FEDORA-2021-107c8c5063\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://www.debian.org/security/2021/dsa-5000\", \"name\": \"DSA-5000\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html\", \"name\": \"[debian-lts-announce] 20211109 [SECURITY] [DLA 2814-1] openjdk-8 security update\", \"tags\": [\"mailing-list\"]}, {\"url\": \"https://security.gentoo.org/glsa/202209-05\", \"name\": \"GLSA-202209-05\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20240621-0006/\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"text\", \"description\": \"Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Java SE, Oracle GraalVM Enterprise Edition accessible data.\"}]}], \"providerMetadata\": {\"orgId\": \"43595867-4340-4103-b7a2-9a5208d29a85\", \"shortName\": \"oracle\", \"dateUpdated\": \"2024-06-21T19:06:58.485Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2021-35550\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-08-04T00:40:46.946Z\", \"dateReserved\": \"2021-06-28T00:00:00.000Z\", \"assignerOrgId\": \"43595867-4340-4103-b7a2-9a5208d29a85\", \"datePublished\": \"2021-10-20T10:49:59.000Z\", \"assignerShortName\": \"oracle\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

WID-SEC-W-2022-0674

Vulnerability from csaf_certbund - Published: 2022-02-24 23:00 - Updated: 2023-04-20 22:00

Summary

IBM Java: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Severity

Mittel

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: IBM Java Runtime ist die Java Runtime Environment (kurz JRE) Portierung von IBM.

Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Java ausnutzen, um Informationen offenzulegen.

Betroffene Betriebssysteme: - UNIX - Linux - Windows - Sonstiges

CVE-2021-35550

In IBM Java existieren mehrere Schwachstellen. Die Fehler bestehen in der Komponente Java SE im Zusammenhang mit der Komponente JSSE. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuführen.

Affected products

Known affected 5 products

Product	Identifier	Version
IBM Rational Build Forge 8.0.0 - 8.0.0.22 IBM	`cpe:/a:ibm:rational_build_forge:8.0.0_-_8.0.0.22`	—
IBM Rational Directory Server (RDS) 5.2.1 IBM	`cpe:/a:ibm:rational_directory_server:5.2.1`	—
HCL Commerce HCL	`cpe:/a:hcltechsw:commerce:-`	—
IBM Security Identity Manager IBM	`cpe:/a:ibm:security_identity_manager:-`	—
IBM FlashSystem IBM	`cpe:/a:ibm:flashsystem:-`	—

CVE-2021-35603

Affected products

Known affected 5 products

Product	Identifier	Version
IBM Rational Build Forge 8.0.0 - 8.0.0.22 IBM	`cpe:/a:ibm:rational_build_forge:8.0.0_-_8.0.0.22`	—
IBM Rational Directory Server (RDS) 5.2.1 IBM	`cpe:/a:ibm:rational_directory_server:5.2.1`	—
HCL Commerce HCL	`cpe:/a:hcltechsw:commerce:-`	—
IBM Security Identity Manager IBM	`cpe:/a:ibm:security_identity_manager:-`	—
IBM FlashSystem IBM	`cpe:/a:ibm:flashsystem:-`	—

References

9 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://www.ibm.com/support/pages/node/6985007	external
https://www.ibm.com/support/pages/node/6559262	external
https://www.ibm.com/support/pages/node/6559266	external
https://www.ibm.com/blogs/psirt/security-bulletin…	external
https://support.hcltechsw.com/csm?id=kb_article&s…	external
https://www.ibm.com/blogs/psirt/security-bulletin…	external
https://www.ibm.com/support/pages/node/6848847	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "IBM Java Runtime ist die Java Runtime Environment (kurz JRE) Portierung von IBM.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Java ausnutzen, um Informationen offenzulegen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- UNIX\n- Linux\n- Windows\n- Sonstiges",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2022-0674 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-0674.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2022-0674 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0674"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6985007 vom 2023-04-20",
        "url": "https://www.ibm.com/support/pages/node/6985007"
      },
      {
        "category": "external",
        "summary": "IBM Security Advisory vom 2022-02-24",
        "url": "https://www.ibm.com/support/pages/node/6559262"
      },
      {
        "category": "external",
        "summary": "IBM Security Advisory vom 2022-02-24",
        "url": "https://www.ibm.com/support/pages/node/6559266"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6603411 vom 2022-07-14",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-java-sdk-technology-edition-oct-2021-affects-ibm-security-verify-governance-identity-manager-virtual-appliance-component/"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0099131 vom 2022-07-24",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0099131"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6832958 vom 2022-11-01",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-ibm-java-affect-ibm-flashsystem-models-fs900-and-v9000/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6848847 vom 2022-12-21",
        "url": "https://www.ibm.com/support/pages/node/6848847"
      }
    ],
    "source_lang": "en-US",
    "title": "IBM Java: Mehrere Schwachstellen erm\u00f6glichen Offenlegung von Informationen",
    "tracking": {
      "current_release_date": "2023-04-20T22:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T17:31:41.815+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2022-0674",
      "initial_release_date": "2022-02-24T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2022-02-24T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2022-07-13T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2022-07-24T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von HCL aufgenommen"
        },
        {
          "date": "2022-10-31T23:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2022-12-20T23:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-04-20T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von IBM aufgenommen"
        }
      ],
      "status": "final",
      "version": "6"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "HCL Commerce",
            "product": {
              "name": "HCL Commerce",
              "product_id": "T019293",
              "product_identification_helper": {
                "cpe": "cpe:/a:hcltechsw:commerce:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "HCL"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "IBM FlashSystem",
            "product": {
              "name": "IBM FlashSystem",
              "product_id": "T025159",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:flashsystem:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "IBM Java \u003c 7.0.11.5",
                "product": {
                  "name": "IBM Java \u003c 7.0.11.5",
                  "product_id": "T022148",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:jre:7.0.11.5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "IBM Java \u003c 7.1.5.5",
                "product": {
                  "name": "IBM Java \u003c 7.1.5.5",
                  "product_id": "T022149",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:jre:7.1.5.5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "IBM Java \u003c 8.0.7.5",
                "product": {
                  "name": "IBM Java \u003c 8.0.7.5",
                  "product_id": "T022150",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:jre:8.0.7.5"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Java"
          },
          {
            "category": "product_name",
            "name": "IBM Rational Build Forge 8.0.0 - 8.0.0.22",
            "product": {
              "name": "IBM Rational Build Forge 8.0.0 - 8.0.0.22",
              "product_id": "T027484",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:rational_build_forge:8.0.0_-_8.0.0.22"
              }
            }
          },
          {
            "category": "product_name",
            "name": "IBM Rational Directory Server (RDS) 5.2.1",
            "product": {
              "name": "IBM Rational Directory Server (RDS) 5.2.1",
              "product_id": "195549",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:rational_directory_server:5.2.1"
              }
            }
          },
          {
            "category": "product_name",
            "name": "IBM Security Identity Manager",
            "product": {
              "name": "IBM Security Identity Manager",
              "product_id": "T023840",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:security_identity_manager:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "IBM"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-35550",
      "notes": [
        {
          "category": "description",
          "text": "In IBM Java existieren mehrere Schwachstellen. Die Fehler bestehen in der Komponente Java SE im Zusammenhang mit der Komponente JSSE. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T027484",
          "195549",
          "T019293",
          "T023840",
          "T025159"
        ]
      },
      "release_date": "2022-02-24T23:00:00.000+00:00",
      "title": "CVE-2021-35550"
    },
    {
      "cve": "CVE-2021-35603",
      "notes": [
        {
          "category": "description",
          "text": "In IBM Java existieren mehrere Schwachstellen. Die Fehler bestehen in der Komponente Java SE im Zusammenhang mit der Komponente JSSE. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T027484",
          "195549",
          "T019293",
          "T023840",
          "T025159"
        ]
      },
      "release_date": "2022-02-24T23:00:00.000+00:00",
      "title": "CVE-2021-35603"
    }
  ]
}

WID-SEC-W-2022-0676

Vulnerability from csaf_certbund - Published: 2022-07-13 22:00 - Updated: 2023-01-11 23:00

Summary

Juniper Junos Space: Mehrere Schwachstellen

Severity

Hoch

Notes

Produktbeschreibung: Junos Space ist eine Software-Plattform, die eine Reihe von Applikationen für das Netzwerkmanagement beinhaltet.

Angriff: Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Juniper Junos Space ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu verändern, seine Privilegien zu erweitern und Sicherheitsmaßnahmen zu umgehen.

Betroffene Betriebssysteme: - Juniper Appliance

CVE-2016-2124

In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu verändern, seine Privilegien zu erweitern und Sicherheitsmaßnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erhöhte Privilegien.

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2020-25704

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2020-25717

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2020-36322

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2020-36385

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2021-20271

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2021-22946

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2021-23017

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2021-23840

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2021-23841

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2021-28950

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2021-35550

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2021-35556

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2021-35559

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2021-35561

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2021-35564

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2021-35565

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2021-35567

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2021-35578

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2021-35586

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2021-35588

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2021-35603

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2021-37750

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2021-41617

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2021-42574

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2021-42739

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2022-21245

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2022-21270

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2022-21303

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2022-21304

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2022-21344

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2022-21367

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

CVE-2022-22218

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Juniper Contrail Service Orchestration Juniper	`cpe:/a:juniper:contrail_service_orchestration:-`	—

References

5 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://supportportal.juniper.net/s/article/2023-…	external
https://supportportal.juniper.net/s/article/2022-…	external
https://supportportal.juniper.net/s/article/2022-…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Junos Space ist eine Software-Plattform, die eine Reihe von Applikationen f\u00fcr das Netzwerkmanagement beinhaltet.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Juniper Junos Space ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Juniper Appliance",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2022-0676 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-0676.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2022-0676 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0676"
      },
      {
        "category": "external",
        "summary": "Juniper Security Advisory JSA70182 vom 2023-01-12",
        "url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Contrail-Service-Orchestration-Multiple-vulnerabilities-resolved-in-CSO-6-3-0?language=en_US"
      },
      {
        "category": "external",
        "summary": "Juniper Security Advisory vom 2022-07-13",
        "url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-Space-Security-Director-Policy-Enforcer-upgraded-to-CentOS-7-9"
      },
      {
        "category": "external",
        "summary": "Juniper Security Advisory vom 2022-07-13",
        "url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-22-2R1-release-CVE-2022-22218?language=en_US"
      }
    ],
    "source_lang": "en-US",
    "title": "Juniper Junos Space: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2023-01-11T23:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T17:31:42.465+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2022-0676",
      "initial_release_date": "2022-07-13T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2022-07-13T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2023-01-11T23:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Juniper aufgenommen"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Juniper Contrail Service Orchestration",
            "product": {
              "name": "Juniper Contrail Service Orchestration",
              "product_id": "T025794",
              "product_identification_helper": {
                "cpe": "cpe:/a:juniper:contrail_service_orchestration:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Juniper Junos Space \u003c 22.1R1",
            "product": {
              "name": "Juniper Junos Space \u003c 22.1R1",
              "product_id": "T023842",
              "product_identification_helper": {
                "cpe": "cpe:/a:juniper:junos_space:22.1r1"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Juniper"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-2124",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2016-2124"
    },
    {
      "cve": "CVE-2020-25704",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2020-25704"
    },
    {
      "cve": "CVE-2020-25717",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2020-25717"
    },
    {
      "cve": "CVE-2020-36322",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2020-36322"
    },
    {
      "cve": "CVE-2020-36385",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2020-36385"
    },
    {
      "cve": "CVE-2021-20271",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2021-20271"
    },
    {
      "cve": "CVE-2021-22946",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2021-22946"
    },
    {
      "cve": "CVE-2021-23017",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2021-23017"
    },
    {
      "cve": "CVE-2021-23840",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2021-23840"
    },
    {
      "cve": "CVE-2021-23841",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2021-23841"
    },
    {
      "cve": "CVE-2021-28950",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2021-28950"
    },
    {
      "cve": "CVE-2021-35550",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2021-35550"
    },
    {
      "cve": "CVE-2021-35556",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2021-35556"
    },
    {
      "cve": "CVE-2021-35559",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2021-35559"
    },
    {
      "cve": "CVE-2021-35561",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2021-35561"
    },
    {
      "cve": "CVE-2021-35564",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2021-35564"
    },
    {
      "cve": "CVE-2021-35565",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2021-35565"
    },
    {
      "cve": "CVE-2021-35567",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2021-35567"
    },
    {
      "cve": "CVE-2021-35578",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2021-35578"
    },
    {
      "cve": "CVE-2021-35586",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2021-35586"
    },
    {
      "cve": "CVE-2021-35588",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2021-35588"
    },
    {
      "cve": "CVE-2021-35603",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2021-35603"
    },
    {
      "cve": "CVE-2021-37750",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2021-37750"
    },
    {
      "cve": "CVE-2021-41617",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2021-41617"
    },
    {
      "cve": "CVE-2021-42574",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2021-42574"
    },
    {
      "cve": "CVE-2021-42739",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2021-42739"
    },
    {
      "cve": "CVE-2022-21245",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2022-21245"
    },
    {
      "cve": "CVE-2022-21270",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2022-21270"
    },
    {
      "cve": "CVE-2022-21303",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2022-21303"
    },
    {
      "cve": "CVE-2022-21304",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2022-21304"
    },
    {
      "cve": "CVE-2022-21344",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2022-21344"
    },
    {
      "cve": "CVE-2022-21367",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2022-21367"
    },
    {
      "cve": "CVE-2022-22218",
      "notes": [
        {
          "category": "description",
          "text": "In Juniper Junos Space existieren mehrere Schwachstellen. Die Fehler bestehen in den Komponenten nginx resolver, Java SE, Oracle GraalVM, OpenSSH, Unicode, Samba, RPM, Kerberos, OpenSSL, Linux Kernel, curl und MySQL. Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand herbeizuf\u00fchren, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder zu ver\u00e4ndern, seine Privilegien zu erweitern und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion und erh\u00f6hte Privilegien."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025794"
        ]
      },
      "release_date": "2022-07-13T22:00:00.000+00:00",
      "title": "CVE-2022-22218"
    }
  ]
}

WID-SEC-W-2022-0809

Vulnerability from csaf_certbund - Published: 2021-10-19 22:00 - Updated: 2023-07-02 22:00

Summary

OpenJDK: Mehrere Schwachstellen

Severity

Hoch

Notes

Produktbeschreibung: OpenJDK ist eine Java Umgebung, die unter der GPLv2 veröffentlicht wird.

Angriff: Ein Angreifer kann mehrere Schwachstellen in OpenJDK ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, einen Denial of Service Zustand herzustellen und Sicherheitsmaßnahmen zu umgehen.

Betroffene Betriebssysteme: - UNIX - Linux

CVE-2021-35550

Es existieren mehrere Schwachstellen in OpenJDK, die zum aktuellen Zeitpunkt nicht im Detail beschrieben und veröffentlicht wurden. Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht näher spezifizierte Auswirkungen zu verursachen, einen Denial of Service Zustand herzustellen und Sicherheitsmaßnahmen zu umgehen.

Affected products

Known affected 11 products

Product	Identifier	Version
Kyocera Printer Kyocera	`cpe:/h:kyocera:printer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Hitachi Command Suite Hitachi	`cpe:/a:hitachi:command_suite:-`	—
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Hitachi Ops Center Hitachi	`cpe:/a:hitachi:ops_center:-`	—

Last affected 6 products

Product	Identifier	Version
Open Source OpenJDK <= 16.0.2 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:16.0.2`	—
Open Source OpenJDK <= 11.0.12 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:11.0.12`	—
Open Source OpenJDK <= 15.0.4 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:15.0.4`	—
Open Source OpenJDK <= 8u302 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:8u302`	—
Open Source OpenJDK <= 7u311 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:7u311`	—
Open Source OpenJDK <= 13.0.8 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:13.0.8`	—

CVE-2021-35556

Affected products

Known affected 11 products

Product	Identifier	Version
Kyocera Printer Kyocera	`cpe:/h:kyocera:printer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Hitachi Command Suite Hitachi	`cpe:/a:hitachi:command_suite:-`	—
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Hitachi Ops Center Hitachi	`cpe:/a:hitachi:ops_center:-`	—

Last affected 6 products

Product	Identifier	Version
Open Source OpenJDK <= 16.0.2 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:16.0.2`	—
Open Source OpenJDK <= 11.0.12 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:11.0.12`	—
Open Source OpenJDK <= 15.0.4 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:15.0.4`	—
Open Source OpenJDK <= 8u302 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:8u302`	—
Open Source OpenJDK <= 7u311 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:7u311`	—
Open Source OpenJDK <= 13.0.8 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:13.0.8`	—

CVE-2021-35559

Affected products

Known affected 11 products

Product	Identifier	Version
Kyocera Printer Kyocera	`cpe:/h:kyocera:printer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Hitachi Command Suite Hitachi	`cpe:/a:hitachi:command_suite:-`	—
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Hitachi Ops Center Hitachi	`cpe:/a:hitachi:ops_center:-`	—

Last affected 6 products

Product	Identifier	Version
Open Source OpenJDK <= 16.0.2 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:16.0.2`	—
Open Source OpenJDK <= 11.0.12 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:11.0.12`	—
Open Source OpenJDK <= 15.0.4 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:15.0.4`	—
Open Source OpenJDK <= 8u302 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:8u302`	—
Open Source OpenJDK <= 7u311 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:7u311`	—
Open Source OpenJDK <= 13.0.8 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:13.0.8`	—

CVE-2021-35561

Affected products

Known affected 11 products

Product	Identifier	Version
Kyocera Printer Kyocera	`cpe:/h:kyocera:printer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Hitachi Command Suite Hitachi	`cpe:/a:hitachi:command_suite:-`	—
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Hitachi Ops Center Hitachi	`cpe:/a:hitachi:ops_center:-`	—

Last affected 6 products

Product	Identifier	Version
Open Source OpenJDK <= 16.0.2 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:16.0.2`	—
Open Source OpenJDK <= 11.0.12 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:11.0.12`	—
Open Source OpenJDK <= 15.0.4 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:15.0.4`	—
Open Source OpenJDK <= 8u302 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:8u302`	—
Open Source OpenJDK <= 7u311 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:7u311`	—
Open Source OpenJDK <= 13.0.8 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:13.0.8`	—

CVE-2021-35564

Affected products

Known affected 11 products

Product	Identifier	Version
Kyocera Printer Kyocera	`cpe:/h:kyocera:printer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Hitachi Command Suite Hitachi	`cpe:/a:hitachi:command_suite:-`	—
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Hitachi Ops Center Hitachi	`cpe:/a:hitachi:ops_center:-`	—

Last affected 6 products

Product	Identifier	Version
Open Source OpenJDK <= 16.0.2 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:16.0.2`	—
Open Source OpenJDK <= 11.0.12 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:11.0.12`	—
Open Source OpenJDK <= 15.0.4 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:15.0.4`	—
Open Source OpenJDK <= 8u302 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:8u302`	—
Open Source OpenJDK <= 7u311 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:7u311`	—
Open Source OpenJDK <= 13.0.8 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:13.0.8`	—

CVE-2021-35565

Affected products

Known affected 11 products

Product	Identifier	Version
Kyocera Printer Kyocera	`cpe:/h:kyocera:printer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Hitachi Command Suite Hitachi	`cpe:/a:hitachi:command_suite:-`	—
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Hitachi Ops Center Hitachi	`cpe:/a:hitachi:ops_center:-`	—

Last affected 6 products

Product	Identifier	Version
Open Source OpenJDK <= 16.0.2 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:16.0.2`	—
Open Source OpenJDK <= 11.0.12 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:11.0.12`	—
Open Source OpenJDK <= 15.0.4 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:15.0.4`	—
Open Source OpenJDK <= 8u302 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:8u302`	—
Open Source OpenJDK <= 7u311 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:7u311`	—
Open Source OpenJDK <= 13.0.8 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:13.0.8`	—

CVE-2021-35567

Affected products

Known affected 11 products

Product	Identifier	Version
Kyocera Printer Kyocera	`cpe:/h:kyocera:printer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Hitachi Command Suite Hitachi	`cpe:/a:hitachi:command_suite:-`	—
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Hitachi Ops Center Hitachi	`cpe:/a:hitachi:ops_center:-`	—

Last affected 6 products

Product	Identifier	Version
Open Source OpenJDK <= 16.0.2 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:16.0.2`	—
Open Source OpenJDK <= 11.0.12 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:11.0.12`	—
Open Source OpenJDK <= 15.0.4 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:15.0.4`	—
Open Source OpenJDK <= 8u302 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:8u302`	—
Open Source OpenJDK <= 7u311 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:7u311`	—
Open Source OpenJDK <= 13.0.8 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:13.0.8`	—

CVE-2021-35578

Affected products

Known affected 11 products

Product	Identifier	Version
Kyocera Printer Kyocera	`cpe:/h:kyocera:printer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Hitachi Command Suite Hitachi	`cpe:/a:hitachi:command_suite:-`	—
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Hitachi Ops Center Hitachi	`cpe:/a:hitachi:ops_center:-`	—

Last affected 6 products

Product	Identifier	Version
Open Source OpenJDK <= 16.0.2 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:16.0.2`	—
Open Source OpenJDK <= 11.0.12 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:11.0.12`	—
Open Source OpenJDK <= 15.0.4 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:15.0.4`	—
Open Source OpenJDK <= 8u302 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:8u302`	—
Open Source OpenJDK <= 7u311 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:7u311`	—
Open Source OpenJDK <= 13.0.8 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:13.0.8`	—

CVE-2021-35586

Affected products

Known affected 11 products

Product	Identifier	Version
Kyocera Printer Kyocera	`cpe:/h:kyocera:printer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Hitachi Command Suite Hitachi	`cpe:/a:hitachi:command_suite:-`	—
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Hitachi Ops Center Hitachi	`cpe:/a:hitachi:ops_center:-`	—

Last affected 6 products

Product	Identifier	Version
Open Source OpenJDK <= 16.0.2 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:16.0.2`	—
Open Source OpenJDK <= 11.0.12 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:11.0.12`	—
Open Source OpenJDK <= 15.0.4 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:15.0.4`	—
Open Source OpenJDK <= 8u302 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:8u302`	—
Open Source OpenJDK <= 7u311 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:7u311`	—
Open Source OpenJDK <= 13.0.8 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:13.0.8`	—

CVE-2021-35588

Affected products

Known affected 11 products

Product	Identifier	Version
Kyocera Printer Kyocera	`cpe:/h:kyocera:printer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Hitachi Command Suite Hitachi	`cpe:/a:hitachi:command_suite:-`	—
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Hitachi Ops Center Hitachi	`cpe:/a:hitachi:ops_center:-`	—

Last affected 6 products

Product	Identifier	Version
Open Source OpenJDK <= 16.0.2 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:16.0.2`	—
Open Source OpenJDK <= 11.0.12 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:11.0.12`	—
Open Source OpenJDK <= 15.0.4 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:15.0.4`	—
Open Source OpenJDK <= 8u302 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:8u302`	—
Open Source OpenJDK <= 7u311 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:7u311`	—
Open Source OpenJDK <= 13.0.8 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:13.0.8`	—

CVE-2021-35603

Affected products

Known affected 11 products

Product	Identifier	Version
Kyocera Printer Kyocera	`cpe:/h:kyocera:printer:-`	—
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Hitachi Command Suite Hitachi	`cpe:/a:hitachi:command_suite:-`	—
Amazon Linux 2 Amazon	`cpe:/o:amazon:linux_2:-`	—
Gentoo Linux Gentoo	`cpe:/o:gentoo:linux:-`	—
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Hitachi Ops Center Hitachi	`cpe:/a:hitachi:ops_center:-`	—

Last affected 6 products

Product	Identifier	Version
Open Source OpenJDK <= 16.0.2 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:16.0.2`	—
Open Source OpenJDK <= 11.0.12 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:11.0.12`	—
Open Source OpenJDK <= 15.0.4 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:15.0.4`	—
Open Source OpenJDK <= 8u302 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:8u302`	—
Open Source OpenJDK <= 7u311 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:7u311`	—
Open Source OpenJDK <= 13.0.8 Open Source / OpenJDK	`cpe:/a:oracle:openjdk:13.0.8`	—

References

40 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://kyocommunity.kyocera.de/lexicon/index.php	external
https://lists.debian.org/debian-lts-announce/2021…	external
https://access.redhat.com/errata/RHSA-2021:4135	external
https://openjdk.java.net/groups/vulnerability/adv…	external
https://access.redhat.com/errata/RHSA-2021:3885	external
https://access.redhat.com/errata/RHSA-2021:3893	external
https://access.redhat.com/errata/RHSA-2021:3886	external
https://linux.oracle.com/errata/ELSA-2021-3889.html	external
https://linux.oracle.com/errata/ELSA-2021-3891.html	external
https://linux.oracle.com/errata/ELSA-2021-3892.html	external
https://linux.oracle.com/errata/ELSA-2021-3893.html	external
https://access.redhat.com/errata/RHSA-2021:3887	external
https://access.redhat.com/errata/RHSA-2021:3889	external
https://access.redhat.com/errata/RHSA-2021:3891	external
https://access.redhat.com/errata/RHSA-2021:3892	external
https://bodhi.fedoraproject.org/updates/FEDORA-20…	external
https://access.redhat.com/errata/RHSA-2021:3967	external
https://access.redhat.com/errata/RHSA-2021:3968	external
https://access.redhat.com/errata/RHSA-2021:3960	external
https://access.redhat.com/errata/RHSA-2021:3961	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://www.debian.org/security/2021/dsa-5000	external
https://access.redhat.com/errata/RHSA-2021:4532	external
https://access.redhat.com/errata/RHSA-2021:4531	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://linux.oracle.com/errata/ELSA-2021-4135.html	external
https://lists.centos.org/pipermail/centos-announc…	external
https://lists.centos.org/pipermail/centos-announc…	external
https://www.hitachi.co.jp/Prod/comp/soft1/global/…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://alas.aws.amazon.com/AL2/ALAS-2021-1726.html	external
https://ubuntu.com/security/notices/USN-5202-1	external
https://alas.aws.amazon.com/ALAS-2022-1561.html	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://security.gentoo.org/glsa/202209-05	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "OpenJDK ist eine Java Umgebung, die unter der GPLv2 ver\u00f6ffentlicht wird.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in OpenJDK ausnutzen, um einen nicht n\u00e4her spezifizierten Angriff durchzuf\u00fchren, einen Denial of Service Zustand herzustellen und Sicherheitsma\u00dfnahmen zu umgehen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- UNIX\n- Linux",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2022-0809 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2021/wid-sec-w-2022-0809.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2022-0809 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0809"
      },
      {
        "category": "external",
        "summary": "Kyocera Firmwareneuheiten im Juni 2023 vom 2023-07-03",
        "url": "https://kyocommunity.kyocera.de/lexicon/index.php"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-2814 vom 2021-11-09",
        "url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:4135 vom 2021-11-10",
        "url": "https://access.redhat.com/errata/RHSA-2021:4135"
      },
      {
        "category": "external",
        "summary": "OpenJDK Vulnerability Advisory vom 2021-10-19",
        "url": "https://openjdk.java.net/groups/vulnerability/advisories/2021-10-19"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3885 vom 2021-10-20",
        "url": "https://access.redhat.com/errata/RHSA-2021:3885"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3893 vom 2021-10-20",
        "url": "https://access.redhat.com/errata/RHSA-2021:3893"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3886 vom 2021-10-20",
        "url": "https://access.redhat.com/errata/RHSA-2021:3886"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2021-3889 vom 2021-10-20",
        "url": "https://linux.oracle.com/errata/ELSA-2021-3889.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2021-3891 vom 2021-10-20",
        "url": "https://linux.oracle.com/errata/ELSA-2021-3891.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2021-3892 vom 2021-10-21",
        "url": "https://linux.oracle.com/errata/ELSA-2021-3892.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2021-3893 vom 2021-10-20",
        "url": "https://linux.oracle.com/errata/ELSA-2021-3893.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3887 vom 2021-10-20",
        "url": "https://access.redhat.com/errata/RHSA-2021:3887"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3889 vom 2021-10-20",
        "url": "https://access.redhat.com/errata/RHSA-2021:3889"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3891 vom 2021-10-20",
        "url": "https://access.redhat.com/errata/RHSA-2021:3891"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3892 vom 2021-10-20",
        "url": "https://access.redhat.com/errata/RHSA-2021:3892"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2021-27BA6780E5 vom 2021-10-23",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2021-27ba6780e5"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3967 vom 2021-10-25",
        "url": "https://access.redhat.com/errata/RHSA-2021:3967"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3968 vom 2021-10-25",
        "url": "https://access.redhat.com/errata/RHSA-2021:3968"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3960 vom 2021-10-25",
        "url": "https://access.redhat.com/errata/RHSA-2021:3960"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3961 vom 2021-10-25",
        "url": "https://access.redhat.com/errata/RHSA-2021:3961"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:3528-1 vom 2021-10-27",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-October/009657.html"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-5000 vom 2021-11-02",
        "url": "https://www.debian.org/security/2021/dsa-5000"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:4532 vom 2021-11-11",
        "url": "https://access.redhat.com/errata/RHSA-2021:4532"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:4531 vom 2021-11-11",
        "url": "https://access.redhat.com/errata/RHSA-2021:4531"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:3671-1 vom 2021-11-16",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-November/009728.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2021-4135 vom 2021-11-18",
        "url": "https://linux.oracle.com/errata/ELSA-2021-4135.html"
      },
      {
        "category": "external",
        "summary": "CentOS Security Advisory CESA-2021:3892 vom 2021-11-17",
        "url": "https://lists.centos.org/pipermail/centos-announce/2021-November/048393.html"
      },
      {
        "category": "external",
        "summary": "CentOS Security Advisory CESA-2021:3889 vom 2021-11-17",
        "url": "https://lists.centos.org/pipermail/centos-announce/2021-November/048394.html"
      },
      {
        "category": "external",
        "summary": "Hitachi Vulnerability Information HITACHI-SEC-2021-142 vom 2021-11-19",
        "url": "https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2021-142/index.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:3770-1 vom 2021-11-23",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-November/009768.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:3771-1 vom 2021-11-23",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-November/009772.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:3797-1 vom 2021-11-24",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-November/009773.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2021-1726 vom 2021-12-10",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2021-1726.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5202-1 vom 2021-12-17",
        "url": "https://ubuntu.com/security/notices/USN-5202-1"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-1561 vom 2022-01-20",
        "url": "https://alas.aws.amazon.com/ALAS-2022-1561.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:2540-1 vom 2022-07-23",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-July/011646.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:2539-1 vom 2022-07-23",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-July/011645.html"
      },
      {
        "category": "external",
        "summary": "Gentoo Linux Security Advisory GLSA-202209-05 vom 2022-09-07",
        "url": "https://security.gentoo.org/glsa/202209-05"
      }
    ],
    "source_lang": "en-US",
    "title": "OpenJDK: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2023-07-02T22:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T17:32:16.670+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2022-0809",
      "initial_release_date": "2021-10-19T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2021-10-19T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2021-10-20T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2021-10-24T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Fedora aufgenommen"
        },
        {
          "date": "2021-10-25T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2021-10-27T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2021-11-01T23:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2021-11-09T23:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von Debian und Red Hat aufgenommen"
        },
        {
          "date": "2021-11-11T23:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2021-11-16T23:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2021-11-17T23:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Oracle Linux und CentOS aufgenommen"
        },
        {
          "date": "2021-11-18T23:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von HITACHI aufgenommen"
        },
        {
          "date": "2021-11-23T23:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2021-11-24T23:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2021-12-09T23:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2021-12-16T23:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2022-01-19T23:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von Amazon aufgenommen"
        },
        {
          "date": "2022-07-24T22:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2022-09-06T22:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von Gentoo aufgenommen"
        },
        {
          "date": "2023-07-02T22:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates aufgenommen"
        }
      ],
      "status": "final",
      "version": "19"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Gentoo Linux",
            "product": {
              "name": "Gentoo Linux",
              "product_id": "T012167",
              "product_identification_helper": {
                "cpe": "cpe:/o:gentoo:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Gentoo"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Hitachi Command Suite",
            "product": {
              "name": "Hitachi Command Suite",
              "product_id": "T010951",
              "product_identification_helper": {
                "cpe": "cpe:/a:hitachi:command_suite:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Hitachi Ops Center",
            "product": {
              "name": "Hitachi Ops Center",
              "product_id": "T017562",
              "product_identification_helper": {
                "cpe": "cpe:/a:hitachi:ops_center:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Hitachi"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Kyocera Printer",
            "product": {
              "name": "Kyocera Printer",
              "product_id": "T015471",
              "product_identification_helper": {
                "cpe": "cpe:/h:kyocera:printer:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Kyocera"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Open Source CentOS",
            "product": {
              "name": "Open Source CentOS",
              "product_id": "1727",
              "product_identification_helper": {
                "cpe": "cpe:/o:centos:centos:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Open Source OpenJDK \u003c= 13.0.8",
                "product": {
                  "name": "Open Source OpenJDK \u003c= 13.0.8",
                  "product_id": "989635",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:openjdk:13.0.8"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Open Source OpenJDK \u003c= 15.0.4",
                "product": {
                  "name": "Open Source OpenJDK \u003c= 15.0.4",
                  "product_id": "989639",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:openjdk:15.0.4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Open Source OpenJDK \u003c= 7u311",
                "product": {
                  "name": "Open Source OpenJDK \u003c= 7u311",
                  "product_id": "T020765",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:openjdk:7u311"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Open Source OpenJDK \u003c= 8u302",
                "product": {
                  "name": "Open Source OpenJDK \u003c= 8u302",
                  "product_id": "T020766",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:openjdk:8u302"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Open Source OpenJDK \u003c= 11.0.12",
                "product": {
                  "name": "Open Source OpenJDK \u003c= 11.0.12",
                  "product_id": "T020767",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:openjdk:11.0.12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Open Source OpenJDK \u003c= 16.0.2",
                "product": {
                  "name": "Open Source OpenJDK \u003c= 16.0.2",
                  "product_id": "T020768",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:openjdk:16.0.2"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "OpenJDK"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-35550",
      "notes": [
        {
          "category": "description",
          "text": "Es existieren mehrere Schwachstellen in OpenJDK, die zum aktuellen Zeitpunkt nicht im Detail beschrieben und ver\u00f6ffentlicht wurden. Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht n\u00e4her spezifizierte Auswirkungen zu verursachen, einen Denial of Service Zustand herzustellen und Sicherheitsma\u00dfnahmen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T015471",
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T010951",
          "398363",
          "T012167",
          "1727",
          "T004914",
          "T017562"
        ],
        "last_affected": [
          "T020768",
          "T020767",
          "989639",
          "T020766",
          "T020765",
          "989635"
        ]
      },
      "release_date": "2021-10-19T22:00:00.000+00:00",
      "title": "CVE-2021-35550"
    },
    {
      "cve": "CVE-2021-35556",
      "notes": [
        {
          "category": "description",
          "text": "Es existieren mehrere Schwachstellen in OpenJDK, die zum aktuellen Zeitpunkt nicht im Detail beschrieben und ver\u00f6ffentlicht wurden. Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht n\u00e4her spezifizierte Auswirkungen zu verursachen, einen Denial of Service Zustand herzustellen und Sicherheitsma\u00dfnahmen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T015471",
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T010951",
          "398363",
          "T012167",
          "1727",
          "T004914",
          "T017562"
        ],
        "last_affected": [
          "T020768",
          "T020767",
          "989639",
          "T020766",
          "T020765",
          "989635"
        ]
      },
      "release_date": "2021-10-19T22:00:00.000+00:00",
      "title": "CVE-2021-35556"
    },
    {
      "cve": "CVE-2021-35559",
      "notes": [
        {
          "category": "description",
          "text": "Es existieren mehrere Schwachstellen in OpenJDK, die zum aktuellen Zeitpunkt nicht im Detail beschrieben und ver\u00f6ffentlicht wurden. Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht n\u00e4her spezifizierte Auswirkungen zu verursachen, einen Denial of Service Zustand herzustellen und Sicherheitsma\u00dfnahmen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T015471",
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T010951",
          "398363",
          "T012167",
          "1727",
          "T004914",
          "T017562"
        ],
        "last_affected": [
          "T020768",
          "T020767",
          "989639",
          "T020766",
          "T020765",
          "989635"
        ]
      },
      "release_date": "2021-10-19T22:00:00.000+00:00",
      "title": "CVE-2021-35559"
    },
    {
      "cve": "CVE-2021-35561",
      "notes": [
        {
          "category": "description",
          "text": "Es existieren mehrere Schwachstellen in OpenJDK, die zum aktuellen Zeitpunkt nicht im Detail beschrieben und ver\u00f6ffentlicht wurden. Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht n\u00e4her spezifizierte Auswirkungen zu verursachen, einen Denial of Service Zustand herzustellen und Sicherheitsma\u00dfnahmen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T015471",
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T010951",
          "398363",
          "T012167",
          "1727",
          "T004914",
          "T017562"
        ],
        "last_affected": [
          "T020768",
          "T020767",
          "989639",
          "T020766",
          "T020765",
          "989635"
        ]
      },
      "release_date": "2021-10-19T22:00:00.000+00:00",
      "title": "CVE-2021-35561"
    },
    {
      "cve": "CVE-2021-35564",
      "notes": [
        {
          "category": "description",
          "text": "Es existieren mehrere Schwachstellen in OpenJDK, die zum aktuellen Zeitpunkt nicht im Detail beschrieben und ver\u00f6ffentlicht wurden. Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht n\u00e4her spezifizierte Auswirkungen zu verursachen, einen Denial of Service Zustand herzustellen und Sicherheitsma\u00dfnahmen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T015471",
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T010951",
          "398363",
          "T012167",
          "1727",
          "T004914",
          "T017562"
        ],
        "last_affected": [
          "T020768",
          "T020767",
          "989639",
          "T020766",
          "T020765",
          "989635"
        ]
      },
      "release_date": "2021-10-19T22:00:00.000+00:00",
      "title": "CVE-2021-35564"
    },
    {
      "cve": "CVE-2021-35565",
      "notes": [
        {
          "category": "description",
          "text": "Es existieren mehrere Schwachstellen in OpenJDK, die zum aktuellen Zeitpunkt nicht im Detail beschrieben und ver\u00f6ffentlicht wurden. Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht n\u00e4her spezifizierte Auswirkungen zu verursachen, einen Denial of Service Zustand herzustellen und Sicherheitsma\u00dfnahmen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T015471",
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T010951",
          "398363",
          "T012167",
          "1727",
          "T004914",
          "T017562"
        ],
        "last_affected": [
          "T020768",
          "T020767",
          "989639",
          "T020766",
          "T020765",
          "989635"
        ]
      },
      "release_date": "2021-10-19T22:00:00.000+00:00",
      "title": "CVE-2021-35565"
    },
    {
      "cve": "CVE-2021-35567",
      "notes": [
        {
          "category": "description",
          "text": "Es existieren mehrere Schwachstellen in OpenJDK, die zum aktuellen Zeitpunkt nicht im Detail beschrieben und ver\u00f6ffentlicht wurden. Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht n\u00e4her spezifizierte Auswirkungen zu verursachen, einen Denial of Service Zustand herzustellen und Sicherheitsma\u00dfnahmen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T015471",
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T010951",
          "398363",
          "T012167",
          "1727",
          "T004914",
          "T017562"
        ],
        "last_affected": [
          "T020768",
          "T020767",
          "989639",
          "T020766",
          "T020765",
          "989635"
        ]
      },
      "release_date": "2021-10-19T22:00:00.000+00:00",
      "title": "CVE-2021-35567"
    },
    {
      "cve": "CVE-2021-35578",
      "notes": [
        {
          "category": "description",
          "text": "Es existieren mehrere Schwachstellen in OpenJDK, die zum aktuellen Zeitpunkt nicht im Detail beschrieben und ver\u00f6ffentlicht wurden. Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht n\u00e4her spezifizierte Auswirkungen zu verursachen, einen Denial of Service Zustand herzustellen und Sicherheitsma\u00dfnahmen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T015471",
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T010951",
          "398363",
          "T012167",
          "1727",
          "T004914",
          "T017562"
        ],
        "last_affected": [
          "T020768",
          "T020767",
          "989639",
          "T020766",
          "T020765",
          "989635"
        ]
      },
      "release_date": "2021-10-19T22:00:00.000+00:00",
      "title": "CVE-2021-35578"
    },
    {
      "cve": "CVE-2021-35586",
      "notes": [
        {
          "category": "description",
          "text": "Es existieren mehrere Schwachstellen in OpenJDK, die zum aktuellen Zeitpunkt nicht im Detail beschrieben und ver\u00f6ffentlicht wurden. Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht n\u00e4her spezifizierte Auswirkungen zu verursachen, einen Denial of Service Zustand herzustellen und Sicherheitsma\u00dfnahmen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T015471",
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T010951",
          "398363",
          "T012167",
          "1727",
          "T004914",
          "T017562"
        ],
        "last_affected": [
          "T020768",
          "T020767",
          "989639",
          "T020766",
          "T020765",
          "989635"
        ]
      },
      "release_date": "2021-10-19T22:00:00.000+00:00",
      "title": "CVE-2021-35586"
    },
    {
      "cve": "CVE-2021-35588",
      "notes": [
        {
          "category": "description",
          "text": "Es existieren mehrere Schwachstellen in OpenJDK, die zum aktuellen Zeitpunkt nicht im Detail beschrieben und ver\u00f6ffentlicht wurden. Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht n\u00e4her spezifizierte Auswirkungen zu verursachen, einen Denial of Service Zustand herzustellen und Sicherheitsma\u00dfnahmen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T015471",
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T010951",
          "398363",
          "T012167",
          "1727",
          "T004914",
          "T017562"
        ],
        "last_affected": [
          "T020768",
          "T020767",
          "989639",
          "T020766",
          "T020765",
          "989635"
        ]
      },
      "release_date": "2021-10-19T22:00:00.000+00:00",
      "title": "CVE-2021-35588"
    },
    {
      "cve": "CVE-2021-35603",
      "notes": [
        {
          "category": "description",
          "text": "Es existieren mehrere Schwachstellen in OpenJDK, die zum aktuellen Zeitpunkt nicht im Detail beschrieben und ver\u00f6ffentlicht wurden. Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht n\u00e4her spezifizierte Auswirkungen zu verursachen, einen Denial of Service Zustand herzustellen und Sicherheitsma\u00dfnahmen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T015471",
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T010951",
          "398363",
          "T012167",
          "1727",
          "T004914",
          "T017562"
        ],
        "last_affected": [
          "T020768",
          "T020767",
          "989639",
          "T020766",
          "T020765",
          "989635"
        ]
      },
      "release_date": "2021-10-19T22:00:00.000+00:00",
      "title": "CVE-2021-35603"
    }
  ]
}

WID-SEC-W-2022-1375

Vulnerability from csaf_certbund - Published: 2022-09-11 22:00 - Updated: 2025-10-12 22:00

Summary

JFrog Artifactory: Mehrere Schwachstellen

Severity

Hoch

Notes

Produktbeschreibung: JFrog Artifactory ist eine universelle DevOps-Lösung.

Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.

Betroffene Betriebssysteme: - Linux - UNIX

CVE-2013-4517

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2013-7285

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2014-0107

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2014-0114

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2014-3577

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2014-3623

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2015-0227

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2015-2575

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2015-3253

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2015-4852

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2015-7940

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2016-10750

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2016-3092

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2016-3674

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2016-6501

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2016-8735

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2016-8745

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2017-1000487

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2017-15095

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2017-17485

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2017-18214

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2017-18640

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2017-7525

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2017-7657

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2017-7957

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2017-9506

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2018-1000206

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2018-9116

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2019-10219

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2019-12402

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2019-17359

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2019-17571

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2019-20104

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2020-11996

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2020-13934

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2020-13935

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2020-13949

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2020-14340

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2020-15586

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2020-1745

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2020-17521

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2020-25649

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2020-28500

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2020-29582

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2020-36518

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2020-7226

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2020-7692

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2020-8203

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-13936

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-21290

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-22060

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-22112

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-22119

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-22147

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-22148

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-22149

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-22573

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-23337

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-25122

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-26291

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-27568

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-29505

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-30129

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-33037

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-35550

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-35556

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-35560

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-35561

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-35564

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-35565

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-35567

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-35578

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-35586

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-35588

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-35603

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-36374

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-3765

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-3807

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-38561

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-3859

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-41090

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-41091

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-42340

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-42550

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2021-43797

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2022-0536

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2022-22963

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2022-23632

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2022-23648

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2022-23806

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2022-24769

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2022-24823

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2022-27191

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2022-29153

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2022-32212

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2022-32213

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2022-32214

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2022-32215

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

CVE-2022-32223

Affected products

Known affected 5 products

Product	Identifier	Version
JFrog Artifactory JFrog / Artifactory	`cpe:/a:jfrog:artifactory:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
JFrog Artifactory <7.46.3 JFrog / Artifactory		<7.46.3

References

8 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://www.jfrog.com/confluence/display/JFROG/Fi…	external
https://www.jfrog.com/confluence/display/JFROG/Fi…	external
https://access.redhat.com/errata/RHSA-2022:6782	external
https://ubuntu.com/security/notices/USN-5776-1	external
https://access.redhat.com/errata/RHSA-2023:5165	external
https://lists.opensuse.org/archives/list/security…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "JFrog Artifactory ist eine universelle DevOps-L\u00f6sung.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszul\u00f6sen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- UNIX",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2022-1375 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-1375.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2022-1375 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-1375"
      },
      {
        "category": "external",
        "summary": "JFrog Fixed Security Vulnerabilities vom 2022-09-11",
        "url": "https://www.jfrog.com/confluence/display/JFROG/Fixed+Security+Vulnerabilities"
      },
      {
        "category": "external",
        "summary": "JFrog Fixed Security Vulnerabilities",
        "url": "https://www.jfrog.com/confluence/display/JFROG/Fixed+Security+Vulnerabilities"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:6782 vom 2022-10-04",
        "url": "https://access.redhat.com/errata/RHSA-2022:6782"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5776-1 vom 2022-12-13",
        "url": "https://ubuntu.com/security/notices/USN-5776-1"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2023:5165 vom 2023-09-14",
        "url": "https://access.redhat.com/errata/RHSA-2023:5165"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:03545-1 vom 2025-10-13",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UB7MGNRMXC5LO5Y66FLOE354VVU5ULQK/"
      }
    ],
    "source_lang": "en-US",
    "title": "JFrog Artifactory: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2025-10-12T22:00:00.000+00:00",
      "generator": {
        "date": "2025-10-13T09:29:51.555+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.4.0"
        }
      },
      "id": "WID-SEC-W-2022-1375",
      "initial_release_date": "2022-09-11T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2022-09-11T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2022-10-03T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates aufgenommen"
        },
        {
          "date": "2022-10-04T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-12-12T23:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2022-12-20T23:00:00.000+00:00",
          "number": "5",
          "summary": "Referenz(en) aufgenommen: FEDORA-2022-DB674BAFD9, FEDORA-2022-7E327A20BE"
        },
        {
          "date": "2023-09-14T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-10-12T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von SUSE aufgenommen"
        }
      ],
      "status": "final",
      "version": "7"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "JFrog Artifactory",
                "product": {
                  "name": "JFrog Artifactory",
                  "product_id": "T024527",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:jfrog:artifactory:-"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c7.46.3",
                "product": {
                  "name": "JFrog Artifactory \u003c7.46.3",
                  "product_id": "T024764"
                }
              },
              {
                "category": "product_version",
                "name": "7.46.3",
                "product": {
                  "name": "JFrog Artifactory 7.46.3",
                  "product_id": "T024764-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:jfrog:artifactory:7.46.3"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Artifactory"
          }
        ],
        "category": "vendor",
        "name": "JFrog"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2013-4517",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2013-4517"
    },
    {
      "cve": "CVE-2013-7285",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2013-7285"
    },
    {
      "cve": "CVE-2014-0107",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2014-0107"
    },
    {
      "cve": "CVE-2014-0114",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2014-0114"
    },
    {
      "cve": "CVE-2014-3577",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2014-3577"
    },
    {
      "cve": "CVE-2014-3623",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2014-3623"
    },
    {
      "cve": "CVE-2015-0227",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2015-0227"
    },
    {
      "cve": "CVE-2015-2575",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2015-2575"
    },
    {
      "cve": "CVE-2015-3253",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2015-3253"
    },
    {
      "cve": "CVE-2015-4852",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2015-4852"
    },
    {
      "cve": "CVE-2015-7940",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2015-7940"
    },
    {
      "cve": "CVE-2016-10750",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2016-10750"
    },
    {
      "cve": "CVE-2016-3092",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2016-3092"
    },
    {
      "cve": "CVE-2016-3674",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2016-3674"
    },
    {
      "cve": "CVE-2016-6501",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2016-6501"
    },
    {
      "cve": "CVE-2016-8735",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2016-8735"
    },
    {
      "cve": "CVE-2016-8745",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2016-8745"
    },
    {
      "cve": "CVE-2017-1000487",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2017-1000487"
    },
    {
      "cve": "CVE-2017-15095",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2017-15095"
    },
    {
      "cve": "CVE-2017-17485",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2017-17485"
    },
    {
      "cve": "CVE-2017-18214",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2017-18214"
    },
    {
      "cve": "CVE-2017-18640",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2017-18640"
    },
    {
      "cve": "CVE-2017-7525",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2017-7525"
    },
    {
      "cve": "CVE-2017-7657",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2017-7657"
    },
    {
      "cve": "CVE-2017-7957",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2017-7957"
    },
    {
      "cve": "CVE-2017-9506",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2017-9506"
    },
    {
      "cve": "CVE-2018-1000206",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2018-1000206"
    },
    {
      "cve": "CVE-2018-9116",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2018-9116"
    },
    {
      "cve": "CVE-2019-10219",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2019-10219"
    },
    {
      "cve": "CVE-2019-12402",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2019-12402"
    },
    {
      "cve": "CVE-2019-17359",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2019-17359"
    },
    {
      "cve": "CVE-2019-17571",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2019-17571"
    },
    {
      "cve": "CVE-2019-20104",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2019-20104"
    },
    {
      "cve": "CVE-2020-11996",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2020-11996"
    },
    {
      "cve": "CVE-2020-13934",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2020-13934"
    },
    {
      "cve": "CVE-2020-13935",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2020-13935"
    },
    {
      "cve": "CVE-2020-13949",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2020-13949"
    },
    {
      "cve": "CVE-2020-14340",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2020-14340"
    },
    {
      "cve": "CVE-2020-15586",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2020-15586"
    },
    {
      "cve": "CVE-2020-1745",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2020-1745"
    },
    {
      "cve": "CVE-2020-17521",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2020-17521"
    },
    {
      "cve": "CVE-2020-25649",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2020-25649"
    },
    {
      "cve": "CVE-2020-28500",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2020-28500"
    },
    {
      "cve": "CVE-2020-29582",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2020-29582"
    },
    {
      "cve": "CVE-2020-36518",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2020-36518"
    },
    {
      "cve": "CVE-2020-7226",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2020-7226"
    },
    {
      "cve": "CVE-2020-7692",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2020-7692"
    },
    {
      "cve": "CVE-2020-8203",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2020-8203"
    },
    {
      "cve": "CVE-2021-13936",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-13936"
    },
    {
      "cve": "CVE-2021-21290",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-21290"
    },
    {
      "cve": "CVE-2021-22060",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-22060"
    },
    {
      "cve": "CVE-2021-22112",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-22112"
    },
    {
      "cve": "CVE-2021-22119",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-22119"
    },
    {
      "cve": "CVE-2021-22147",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-22147"
    },
    {
      "cve": "CVE-2021-22148",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-22148"
    },
    {
      "cve": "CVE-2021-22149",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-22149"
    },
    {
      "cve": "CVE-2021-22573",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-22573"
    },
    {
      "cve": "CVE-2021-23337",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-23337"
    },
    {
      "cve": "CVE-2021-25122",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-25122"
    },
    {
      "cve": "CVE-2021-26291",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-26291"
    },
    {
      "cve": "CVE-2021-27568",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-27568"
    },
    {
      "cve": "CVE-2021-29505",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-29505"
    },
    {
      "cve": "CVE-2021-30129",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-30129"
    },
    {
      "cve": "CVE-2021-33037",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-33037"
    },
    {
      "cve": "CVE-2021-35550",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-35550"
    },
    {
      "cve": "CVE-2021-35556",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-35556"
    },
    {
      "cve": "CVE-2021-35560",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-35560"
    },
    {
      "cve": "CVE-2021-35561",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-35561"
    },
    {
      "cve": "CVE-2021-35564",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-35564"
    },
    {
      "cve": "CVE-2021-35565",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-35565"
    },
    {
      "cve": "CVE-2021-35567",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-35567"
    },
    {
      "cve": "CVE-2021-35578",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-35578"
    },
    {
      "cve": "CVE-2021-35586",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-35586"
    },
    {
      "cve": "CVE-2021-35588",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-35588"
    },
    {
      "cve": "CVE-2021-35603",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-35603"
    },
    {
      "cve": "CVE-2021-36374",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-36374"
    },
    {
      "cve": "CVE-2021-3765",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-3765"
    },
    {
      "cve": "CVE-2021-3807",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-3807"
    },
    {
      "cve": "CVE-2021-38561",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-38561"
    },
    {
      "cve": "CVE-2021-3859",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-3859"
    },
    {
      "cve": "CVE-2021-41090",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-41090"
    },
    {
      "cve": "CVE-2021-41091",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-41091"
    },
    {
      "cve": "CVE-2021-42340",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-42340"
    },
    {
      "cve": "CVE-2021-42550",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-42550"
    },
    {
      "cve": "CVE-2021-43797",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2021-43797"
    },
    {
      "cve": "CVE-2022-0536",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2022-0536"
    },
    {
      "cve": "CVE-2022-22963",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2022-22963"
    },
    {
      "cve": "CVE-2022-23632",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2022-23632"
    },
    {
      "cve": "CVE-2022-23648",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2022-23648"
    },
    {
      "cve": "CVE-2022-23806",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2022-23806"
    },
    {
      "cve": "CVE-2022-24769",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2022-24769"
    },
    {
      "cve": "CVE-2022-24823",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2022-24823"
    },
    {
      "cve": "CVE-2022-27191",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2022-27191"
    },
    {
      "cve": "CVE-2022-29153",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2022-29153"
    },
    {
      "cve": "CVE-2022-32212",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2022-32212"
    },
    {
      "cve": "CVE-2022-32213",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2022-32213"
    },
    {
      "cve": "CVE-2022-32214",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2022-32214"
    },
    {
      "cve": "CVE-2022-32215",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2022-32215"
    },
    {
      "cve": "CVE-2022-32223",
      "product_status": {
        "known_affected": [
          "T024527",
          "T002207",
          "67646",
          "T000126",
          "T024764"
        ]
      },
      "release_date": "2022-09-11T22:00:00.000+00:00",
      "title": "CVE-2022-32223"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2021-35550 (GCVE-0-2021-35550)

WID-SEC-W-2022-0674

WID-SEC-W-2022-0676

WID-SEC-W-2022-0809

WID-SEC-W-2022-1375

Tags

Sightings

Nomenclature