CVE:CVE-2022-21366
CNNVD:CNNVD-202201-1488
Oracle Java SE和Oracle GraalVM都是美国甲骨文（Oracle）公司的产品。Oracle Java SE是一款用于开发和部署桌面、服务器以及嵌入设备和实时环境中的Java应用程序。Oracle GraalVM是一套使用Java语言编写的即时编译器。该产品支持多种编程语言和执行模式。
Oracle Java SE和Oracle GraalVM 企业版存在输入验证错误漏洞，该漏洞源于序列化组件中的输入验证不正确。远程未经身份验证的攻击者可以利用此漏洞来操纵数据。
solution:Upgrade oracle graalvm to a higher version than 20.3.4,21.3.0,and avoid the version 20.3.4,21.3.0; Upgrade oracle jdk to a higher version than 11.0.13,17.0.1,and avoid the version 11.0.13,17.0.1; Upgrade oracle jre to a higher version than 11.0.13,17.0.1,and avoid the version 11.0.13,17.0.1; Upgrade netapp 7-mode_transition_tool to a higher version than -; Upgrade netapp cloud_insights to a higher version than -; Upgrade netapp e-series_santricity_os_controller to a higher version than 11.70.1,and avoid the version [11.0.0,11.70.1]; Upgrade netapp e-series_santricity_storage_manager to a higher version than -; Upgrade netapp e-series_santricity_web_services to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp santricity_unified_manager to a higher version than -; Upgrade netapp snapmanager to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0; Upgrade oracle openjdk to a higher version than 11.0.13,13.0.9,15.0.5,17,17.0.1,and avoid the version [11,11.0.13],[13,13.0.9],[15,15.0.5],17,17.0.1