CVE:CVE-2019-2996
CNNVD:CNNVD-201910-1009
Oracle Java SE和Oracle Java SE Embedded都是美国甲骨文（Oracle）公司的产品。Oracle Java SE是一款用于开发和部署桌面、服务器以及嵌入设备和实时环境中的Java应用程序。Oracle Java SE Embedded是一款针对嵌入式系统的、可移植的应用程序的Java平台。
Oracle Java SE 8u221版本和Java SE Embedded 8u221版本中的Deployment组件存在安全漏洞。攻击者可利用该漏洞未授权读取、更新、插入或删除数据，影响数据的保密性和完整性。
solution:Upgrade oracle jdk to a higher version than 1.8.0:update221,and avoid the version 1.8.0:update221; Upgrade oracle jre to a higher version than 1.8.0:update221,and avoid the version 1.8.0:update221; Upgrade netapp e-series_santricity_os_controller to a higher version than 11.50.2,and avoid the version [11.0.0,11.50.2]; Upgrade netapp e-series_santricity_storage_manager to a higher version than -; Upgrade netapp e-series_santricity_unified_manager to a higher version than -; Upgrade netapp e-series_santricity_web_services_proxy to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp snapmanager to a higher version than -; Upgrade redhat satellite to a higher version than 5.8,and avoid the version 5.8; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_eus to a higher version than 8.1,8.6,and avoid the version 8.1,8.6; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0