CVE:CVE-2022-21476
CNNVD:CNNVD-202204-3779
Oracle Java SE是美国甲骨文（Oracle）公司的一款用于开发和部署桌面、服务器以及嵌入设备和实时环境中的Java应用程序。
Oracle Java SE 的 Oracle GraalVM存在输入验证错误漏洞，该漏洞允许未经身份验证的攻击者通过多种协议进行网络访问，从而破坏 Oracle Java SE、Oracle GraalVM 企业版。成功攻击此漏洞可能导致未经授权访问关键数据或完全访问所有 Oracle Java SE、Oracle GraalVM 企业版可访问数据。注意：此漏洞适用于 Java 部署，通常在运行沙盒 Java Web Start 应用程序或沙盒 Java 小程序的客户端中，加载和运行不受信任的代码（例如，来自 Internet 的代码）并依赖 Java 沙盒来确保安全。也可以通过使用指定组件中的 API 来利用此漏洞，例如，通过向 API 提供数据的 Web 服务。
solution:Upgrade oracle graalvm to a higher version than 20.3.5,21.3.1,22.0.0.2,and avoid the version 20.3.5,21.3.1,22.0.0.2; Upgrade oracle jdk to a higher version than 7.0:update_331,8.0:update_321,11.0.14,17.0.2,18,and avoid the version 7.0:update_331,8.0:update_321,11.0.14,17.0.2,18; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp cloud_insights_acquisition_unit to a higher version than -; Upgrade netapp cloud_secure_agent to a higher version than -; Upgrade netapp e-series_santricity_os_controller to a higher version than 11.70.1,and avoid the version [11.0.0,11.70.1]; Upgrade netapp e-series_santricity_storage_manager to a higher version than -; Upgrade netapp e-series_santricity_web_services to a higher version than -; Upgrade netapp element_software to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp santricity_unified_manager to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp bootstrap_os to a higher version than -; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade azul zulu to a higher version than 7.52,8.60,11.54,13.46,15.38,17.32,and avoid the version 7.52,8.60,11.54,13.46,15.38,17.32