CVE:CVE-2021-35567
CNNVD:CNNVD-202110-1373
Oracle Java SE和Oracle GraalVM都是美国甲骨文（Oracle）公司的产品。Oracle GraalVM是一套使用Java语言编写的即时编译器。该产品支持多种编程语言和执行模式。GraalVM Enterprise Edition是GraalVM的企业版。Oracle GraalVM是一套使用Java语言编写的即时编译器。该产品支持多种编程语言和执行模式。Oracle Java SE是一款用于开发和部署桌面、服务器以及嵌入设备和实时环境中的Java应用程序。
Oracle Java SE 的 Oracle GraalVM Enterprise Edition （组件：Libraries）存在输入验证错误漏洞，该漏洞可导致对关键数据的未授权访问或对所有 Oracle GraalVM Enterprise Edition product  数据的完全访问。
solution:Upgrade oracle graalvm to a higher version than 20.3.3,21.2.0,and avoid the version 20.3.3,21.2.0; Upgrade oracle openjdk to a higher version than 8:update301,11.0.12,17,and avoid the version 8:update301,11.0.12,17; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp e-series_santricity_os_controller to a higher version than 11.50.2,and avoid the version [11.0.0,11.50.2]; Upgrade netapp e-series_santricity_storage_manager to a higher version than -; Upgrade netapp e-series_santricity_web_services to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp santricity_unified_manager to a higher version than -; Upgrade netapp snapmanager to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade fedoraproject fedora to a higher version than 33,34,35,and avoid the version 33,34,35