CVE:CVE-2022-21434
CNNVD:CNNVD-202204-3831
Oracle Java SE是美国甲骨文（Oracle）公司的一款用于开发和部署桌面、服务器以及嵌入设备和实时环境中的Java应用程序。
Oracle Java SE 中存在输入验证错误漏洞，该漏洞允许未经身份验证的攻击者通过多种协议进行网络访问，从而破坏 Oracle Java SE、Oracle GraalVM 企业版。成功攻击此漏洞可导致对部分 Oracle Java SE、Oracle GraalVM 企业版可访问数据进行未经授权的更新、插入或删除访问。
solution:Upgrade oracle graalvm to a higher version than 20.3.5,21.3.1,22.0.0.2,and avoid the version 20.3.5,21.3.1,22.0.0.2; Upgrade oracle jdk to a higher version than 1.7.0:update331,1.8.0:update321,11.0.14,17.0.2,18,and avoid the version 1.7.0:update331,1.8.0:update321,11.0.14,17.0.2,18; Upgrade oracle jre to a higher version than 1.7.0:update331,1.8.0:update321,11.0.14,17.0.2,18,and avoid the version 1.7.0:update331,1.8.0:update321,11.0.14,17.0.2,18; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade netapp 7-mode_transition_tool to a higher version than -; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp cloud_insights_acquisition_unit to a higher version than -; Upgrade netapp cloud_secure_agent to a higher version than -; Upgrade netapp e-series_santricity_os_controller to a higher version than 11.70.1,and avoid the version [11.0.0,11.70.1]; Upgrade netapp e-series_santricity_storage_manager to a higher version than -; Upgrade netapp e-series_santricity_web_services to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp santricity_unified_manager to a higher version than -; Upgrade netapp solidfire,_enterprise_sds_&_hci_storage_node to a higher version than -; Upgrade netapp solidfire_&_hci_management_node to a higher version than -; Upgrade netapp hci_compute_node_firmware to a higher version than -; Upgrade azul zulu to a higher version than 6.45,7.52,8.60,11.54,13.46,15.38,17.32,18.28,and avoid the version 6.45,7.52,8.60,11.54,13.46,15.38,17.32,18.28