Improper input validation in Oracle GraalVM Enterprise Edition - CVE-2021-2163

Vulnerability identifier: #VU52449

CSH Severity: Medium

CVSS v4: 5.9 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-2163

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote non-authenticated attacker to manipulate data.

The vulnerability exists due to improper input validation within the Libraries component in Oracle GraalVM Enterprise Edition. A remote non-authenticated attacker can exploit this vulnerability to manipulate data.

Oracle GraalVM Enterprise Edition
IBM Rational Directory Server (RDS)
Amazon Linux AMI
Gentoo Linux
SUSE Manager Server
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Enterprise Storage
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
CentOS
IBM AIX
IBM i
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
SUSE OpenStack Cloud Crowbar
Anolis OS
HPE Helion Openstack
SUSE OpenStack Cloud
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
SUSE Linux Enterprise Point of Sale
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Legacy Software
Ubuntu
openEuler
Fedora
Rational Business Developer (RBD)
Oracle Java SE
Java SE Embedded
OpenJDK Java (for Middleware)
IBM Java SDK
IBM CICS TX Advanced
IBM CICS TX Standard
IBM Tivoli Monitoring
Netcool Operations Insight
IBM Tivoli System Automation Application Manager
OpenShift Logging
IBM Intelligent Operations Center
IBM Sterling Control Center
IBM Tivoli Business Service Manager
IBM Tivoli Netcool Impact
IBM Rational Build Forge
Netcool/OMNIbus
IBM Common Licensing
CICS Transaction Gateway
Rational Functional Tester (RFT)
IBM Operations Analytics Predictive Insights
IBM SANnav Global View
IBM SANnav Management Portal
IBM Cloud Transformation Advisor
IBM Watson Discovery for IBM Cloud Pak for Data
IBM Sterling Secure Proxy
IBM Sterling Partner Engagement Manager
IBM MQ
IBM Security Verify Governance
IBM Robotic Process Automation
IBM Tivoli Netcool Configuration Manager
Rational Software Architect Designer (RSAD)
IBM WebSphere Application Server Patterns
Tivoli System Automation for Multiplatforms
Rational Synergy
IBM Virtualization Engine TS7700 3948-VED
InfoSphere Data Architect
Installation Manager
Packaging Utility
IBM Secure External Authentication Server
IBM Security Directory Server
IBM Security Directory Suite
Dell EMC NetWorker Runtime Environment (NRE)
IBM Rational Directory Administrator (RDA)
Red Hat OpenShift Container Platform
IBM Enterprise Content Management System Monitor
API Gateway
IBM VIOS
IBM WebSphere Application Server
API Manager
IBM Data Risk Manager
IBM Tivoli Application Dependency Discovery Manager
BIG-IP
Virtualization Engine TS7700 3957-VED
Virtualization Engine TS7700 3957-VEC
Cloud Pak for Security (CP4S)
IBM Qradar SIEM
IBM Cloud Pak System
BIG-IQ Centralized Management
Juniper Junos Space
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
java-11-openjdk (Red Hat package)
SUSE Linux Enterprise Module for Packagehub Subpackages
java-1_7_0-ibm-plugin
java-1_7_0-ibm
java-1_7_0-ibm-alsa
java-1_7_0-ibm-devel
java-1_7_0-ibm-jdbc
java-1_7_0-openjdk-demo-debuginfo
java-1_7_0-openjdk
java-1_7_0-openjdk-debuginfo
java-1_7_0-openjdk-debugsource
java-1_7_0-openjdk-demo
java-1_7_0-openjdk-devel
java-1_7_0-openjdk-devel-debuginfo
java-1_7_0-openjdk-headless-debuginfo
java-1_7_0-openjdk-headless
java-1_7_1-ibm
java-1_7_1-ibm-devel
java-1_7_1-ibm-jdbc
java-1_7_1-ibm-alsa
java-1_7_1-ibm-plugin
java-1.7.1-ibm (Red Hat package)
java
java-1_8_0-ibm-plugin
java-1_8_0-ibm-alsa
java-1_8_0-ibm-devel
java-1_8_0-ibm
java-1.8.0-ibm (Red Hat package)
java-1.8.0-openjdk
java-1.8.0-openjdk-accessibility
java-1.8.0-openjdk-demo
java-1.8.0-openjdk-headless
java-1.8.0-openjdk-src
java-1.8.0-openjdk-javadoc
java-1.8.0-openjdk-javadoc-zip
java-1.8.0-openjdk (Red Hat package)
java-1_8_0-openjdk-headless-debuginfo
java-1_8_0-openjdk-headless
java-1_8_0-openjdk-devel-debuginfo
java-1_8_0-openjdk-devel
java-1_8_0-openjdk-demo-debuginfo
java-1_8_0-openjdk-demo
java-1_8_0-openjdk-debugsource
java-1_8_0-openjdk-debuginfo
java-1_8_0-openjdk
openjdk-8-jre-headless (Ubuntu package)
openjdk-8-jdk (Ubuntu package)
openjdk-8-jre (Ubuntu package)
openjdk-8-jre-zero (Ubuntu package)
java-11-openjdk-debugsource
java-11-openjdk-debuginfo
java-11-openjdk
java-11-openjdk-demo
java-11-openjdk-devel
java-11-openjdk-headless
java-11-openjdk-javadoc
java-11-openjdk-static-libs
java-11-openjdk-src
java-11-openjdk-jmods
java-11-openjdk-javadoc-zip
openjdk-11-jre-headless (Ubuntu package)
openjdk-11-jre-zero (Ubuntu package)
openjdk-11-jre (Ubuntu package)
openjdk-11-jdk (Ubuntu package)
java-11-openjdk-src-slowdebug
java-11-openjdk-devel-slowdebug
java-11-openjdk-slowdebug
java-11-openjdk-jmods-slowdebug
java-11-openjdk-headless-slowdebug
java-11-openjdk-demo-slowdebug
java-latest-openjdk-demo
java-latest-openjdk-src
java-latest-openjdk-debuginfo
java-latest-openjdk-javadoc
java-latest-openjdk-headless
java-latest-openjdk-devel
java-latest-openjdk-javadoc-zip
java-latest-openjdk
java-latest-openjdk-debugsource
java-latest-openjdk-jmods
Liberty for Java for IBM Cloud
Dell EMC Storage Monitoring and Reporting (SMR)
IBM DB2
Dell EMC Unity VSA Operating Environment (OE)
Dell EMC Unity XT Operating Environment (OE)
Dell EMC Unity Operating Environment (OE)

Install updates from vendor's website.

API Gateway - update to May 2022
API Manager - update to May 2022
Netcool Operations Insight - update to 1.6.15
Cloud Pak for Security (CP4S) - update to 1.8.0.0
IBM Data Risk Manager - update to 2.0.6.15
IBM Cloud Pak System - update to 2.3.3.6
IBM Tivoli System Automation Application Manager - addressed in versions 4.1.0.2.0.13, 4.1.0.3.0.9, 4.1.0.4.0.6, 4.1.0.5.0.4
Tivoli System Automation for Multiplatforms - addressed in versions 4.1.0.4.0.17, 4.1.0.5.0.11, 4.1.0.6.0.6, 4.1.0.7.0.4
Red Hat OpenShift Container Platform - addressed in versions 4.6.27, 4.7.9
OpenShift Logging - update to 5.0.3
IBM Intelligent Operations Center - update to 5.2.4
IBM Sterling Control Center - addressed in versions 6.1.3.0.14, 6.2.1.0.9
IBM Tivoli Netcool Impact - update to 7.1.0.28
Rational Synergy - update to 7.2.2.6
IBM Qradar SIEM - addressed in versions 7.4.3 Fix Pack 8, 7.5.0 Update Pack 4
IBM Rational Build Forge - update to 8.0.0.24
Netcool/OMNIbus - update to 8.1.0.30
IBM WebSphere Application Server - update to 8.5.5.23
Virtualization Engine TS7700 3957-VED - addressed in versions 8.51.2.12 VTD_EXEC.269, 8.52.102.13 VTD_EXEC.269, 8.52.200.111 VTD_EXEC.269, 8.53.0.63 VTD_EXEC.269
Virtualization Engine TS7700 3957-VEC - addressed in versions 8.51.2.12 VTD_EXEC.269, 8.52.102.13 VTD_EXEC.269, 8.52.200.111 VTD_EXEC.269, 8.53.0.63 VTD_EXEC.269
IBM Virtualization Engine TS7700 3948-VED - update to 8.53.0.63 + VTD_EXEC.269
InfoSphere Data Architect - update to 9.2.1
java-11-openjdk (Red Hat package) - addressed in versions 11.0.11.0.9-0.el8_1, 11.0.11.0.9-0.el8_2, 11.0.11.0.9-0.el8_3, 11.0.11.0.9-1.el7_9
IBM Operations Analytics Predictive Insights - update to 1.3.6.6
java-1_7_0-ibm-plugin - update to 1.7.0_sr11.0-65.63.1
java-1_7_0-ibm - update to 1.7.0_sr11.0-65.63.1
java-1_7_0-ibm-alsa - update to 1.7.0_sr11.0-65.63.1
java-1_7_0-ibm-devel - update to 1.7.0_sr11.0-65.63.1
java-1_7_0-ibm-jdbc - update to 1.7.0_sr11.0-65.63.1
java-1_7_0-openjdk-demo-debuginfo - update to 1.7.0.311-43.50.2
java-1_7_0-openjdk - update to 1.7.0.311-43.50.2
java-1_7_0-openjdk-debuginfo - update to 1.7.0.311-43.50.2
java-1_7_0-openjdk-debugsource - update to 1.7.0.311-43.50.2
java-1_7_0-openjdk-demo - update to 1.7.0.311-43.50.2
java-1_7_0-openjdk-devel - update to 1.7.0.311-43.50.2
java-1_7_0-openjdk-devel-debuginfo - update to 1.7.0.311-43.50.2
java-1_7_0-openjdk-headless-debuginfo - update to 1.7.0.311-43.50.2
java-1_7_0-openjdk-headless - update to 1.7.0.311-43.50.2
java-1_7_1-ibm - addressed in versions 1.7.1_sr5.0-26.68.1, 1.7.1_sr5.0-38.65.1
java-1_7_1-ibm-devel - addressed in versions 1.7.1_sr5.0-26.68.1, 1.7.1_sr5.0-38.65.1
java-1_7_1-ibm-jdbc - addressed in versions 1.7.1_sr5.0-26.68.1, 1.7.1_sr5.0-38.65.1
java-1_7_1-ibm-alsa - addressed in versions 1.7.1_sr5.0-26.68.1, 1.7.1_sr5.0-38.65.1
java-1_7_1-ibm-plugin - addressed in versions 1.7.1_sr5.0-26.68.1, 1.7.1_sr5.0-38.65.1
java-1.7.1-ibm (Red Hat package) - update to 1.7.1.5.15-1jpp.1.el7
java - addressed in versions 1.8.0-openjdk-devel-1.8.0.292.b10-8, 1.8.0-openjdk-devel-slowdebug-1.8.0.292.b10-8, 1.8.0-openjdk-openjfx-devel-1.8.0.292.b10-8, 1.8.0-openjdk-openjfx-devel-slowdebug-1.8.0.292.b10-8, 1.8.0-openjdk-accessibility-1.8.0.292.b10-8, 1.8.0-openjdk-accessibility-slowdebug-1.8.0.292.b10-8, 1.8.0-openjdk-1.8.0.292.b10-8, 1.8.0-openjdk-src-1.8.0.292.b10-8, 1.8.0-openjdk-src-slowdebug-1.8.0.292.b10-8, 1.8.0-openjdk-debugsource-1.8.0.292.b10-8, 1.8.0-openjdk-debuginfo-1.8.0.292.b10-8, 1.8.0-openjdk-demo-1.8.0.292.b10-8, 1.8.0-openjdk-demo-slowdebug-1.8.0.292.b10-8, 1.8.0-openjdk-headless-1.8.0.292.b10-8, 1.8.0-openjdk-headless-slowdebug-1.8.0.292.b10-8, 1.8.0-openjdk-javadoc-1.8.0.292.b10-8, 1.8.0-openjdk-javadoc-zip-1.8.0.292.b10-8, 1.8.0-openjdk-openjfx-1.8.0.292.b10-8, 1.8.0-openjdk-openjfx-slowdebug-1.8.0.292.b10-8, 1.8.0-openjdk-slowdebug-1.8.0.292.b10-8
java-1_8_0-ibm-plugin - addressed in versions 1.8.0_sr7.0-3.53.1, 1.8.0_sr7.0-30.84.1
java-1_8_0-ibm-alsa - addressed in versions 1.8.0_sr7.0-3.53.1, 1.8.0_sr7.0-30.84.1
java-1_8_0-ibm-devel - addressed in versions 1.8.0_sr7.0-3.53.1, 1.8.0_sr7.0-30.84.1
java-1_8_0-ibm - addressed in versions 1.8.0_sr7.0-3.53.1, 1.8.0_sr7.0-30.84.1
java-1.8.0-ibm (Red Hat package) - addressed in versions 1.8.0.7.15-1.el8_6, 1.8.0.7.15-1jpp.1.el7
java-1.8.0-openjdk - update to 1.8.0.292.b10-0
java-1.8.0-openjdk-accessibility - update to 1.8.0.292.b10-0
java-1.8.0-openjdk-demo - update to 1.8.0.292.b10-0
java-1.8.0-openjdk-headless - update to 1.8.0.292.b10-0
java-1.8.0-openjdk-src - update to 1.8.0.292.b10-0
java-1.8.0-openjdk-javadoc - update to 1.8.0.292.b10-0
java-1.8.0-openjdk-javadoc-zip - update to 1.8.0.292.b10-0
java-1.8.0-openjdk (Red Hat package) - addressed in versions 1.8.0.292 b10-0.el8_1, 1.8.0.292 b10-0.el8_2, 1.8.0.292 b10-0.el8_3, 1.8.0.292 b10-1.el7_9
java-1.8.0-openjdk - addressed in versions 1.8.0.292.b10-0.fc32, 1.8.0.292.b10-0.fc33, 1.8.0.292.b10-0.fc34
OpenJDK Java (for Middleware) - addressed in versions 1.8.0.292, 11.0.11
java-1_8_0-openjdk-headless-debuginfo - addressed in versions 1.8.0.292-3.52.1, 1.8.0.292-27.60.1
java-1_8_0-openjdk-headless - addressed in versions 1.8.0.292-3.52.1, 1.8.0.292-27.60.1
java-1_8_0-openjdk-devel-debuginfo - addressed in versions 1.8.0.292-3.52.1, 1.8.0.292-27.60.1
java-1_8_0-openjdk-devel - addressed in versions 1.8.0.292-3.52.1, 1.8.0.292-27.60.1
java-1_8_0-openjdk-demo-debuginfo - addressed in versions 1.8.0.292-3.52.1, 1.8.0.292-27.60.1
java-1_8_0-openjdk-demo - addressed in versions 1.8.0.292-3.52.1, 1.8.0.292-27.60.1
java-1_8_0-openjdk-debugsource - addressed in versions 1.8.0.292-3.52.1, 1.8.0.292-27.60.1
java-1_8_0-openjdk-debuginfo - addressed in versions 1.8.0.292-3.52.1, 1.8.0.292-27.60.1
java-1_8_0-openjdk - addressed in versions 1.8.0.292-3.52.1, 1.8.0.292-27.60.1
Installation Manager - update to 1.9.2.3
Packaging Utility - update to 1.9.2.3
IBM SANnav Global View - update to 2.2.2
IBM SANnav Management Portal - update to 2.2.2
IBM Cloud Transformation Advisor - update to 3.3.1
Liberty for Java for IBM Cloud - update to 3.74-20220913-1224
IBM Watson Discovery for IBM Cloud Pak for Data - update to 4.5.3
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.6.0.0
IBM DB2 - update to 5.0
Dell EMC Unity VSA Operating Environment (OE) - update to 5.2.2.0.5.004
Dell EMC Unity XT Operating Environment (OE) - update to 5.2.2.0.5.004
Dell EMC Unity Operating Environment (OE) - update to 5.2.2.0.5.004
IBM Enterprise Content Management System Monitor - update to 5.5.7.0
IBM Secure External Authentication Server - addressed in versions 6.0.3.0 iFix 05, 6.1.0.0 iFix 01
IBM Sterling Secure Proxy - update to 6.0.3 iFix 05
IBM Sterling Partner Engagement Manager - addressed in versions 6.1.2.7, 6.2.0.5, 6.2.1.2
IBM Security Directory Server - update to 6.4.0.27
IBM Java SDK - addressed in versions 7.0.11.15, 7.1.5.15, 8.0.7.15, 11.0.11.0
openjdk-8-jre-headless (Ubuntu package) - addressed in versions 8u292-b10-0ubuntu1~16.04.1, 8u292-b10-0ubuntu1~18.04, 8u292-b10-0ubuntu1~20.04, 8u292-b10-0ubuntu1~20.10
openjdk-8-jdk (Ubuntu package) - addressed in versions 8u292-b10-0ubuntu1~16.04.1, 8u292-b10-0ubuntu1~18.04, 8u292-b10-0ubuntu1~20.04, 8u292-b10-0ubuntu1~20.10
openjdk-8-jre (Ubuntu package) - addressed in versions 8u292-b10-0ubuntu1~16.04.1, 8u292-b10-0ubuntu1~18.04, 8u292-b10-0ubuntu1~20.04, 8u292-b10-0ubuntu1~20.10
openjdk-8-jre-zero (Ubuntu package) - addressed in versions 8u292-b10-0ubuntu1~16.04.1, 8u292-b10-0ubuntu1~18.04, 8u292-b10-0ubuntu1~20.04, 8u292-b10-0ubuntu1~20.10
IBM Security Directory Suite - update to 8.0.1.19
Dell EMC NetWorker Runtime Environment (NRE) - update to 8.0.10
IBM MQ - addressed in versions 9.1.0.12, 9.2.0.7, 9.3.0.2, 9.3.1
IBM Security Verify Governance - update to 10.0.1.0.3
IBM CICS TX Advanced - addressed in versions 10.1.0.0 ifix11, 11.1.0.0 ifix4
java-11-openjdk-debugsource - addressed in versions 11.0.11.0-3.21.1, 11.0.11.0-3.56.1
java-11-openjdk-debuginfo - addressed in versions 11.0.11.0-3.21.1, 11.0.11.0-3.56.1
java-11-openjdk - addressed in versions 11.0.11.0-3.21.1, 11.0.11.0-3.56.1
java-11-openjdk-demo - addressed in versions 11.0.11.0-3.21.1, 11.0.11.0-3.56.1
java-11-openjdk-devel - addressed in versions 11.0.11.0-3.21.1, 11.0.11.0-3.56.1
java-11-openjdk-headless - addressed in versions 11.0.11.0-3.21.1, 11.0.11.0-3.56.1
java-11-openjdk-javadoc - update to 11.0.11.0-3.56.1
java-11-openjdk-headless - update to 11.0.11.0.9-0
java-11-openjdk - update to 11.0.11.0.9-0
java-11-openjdk-demo - update to 11.0.11.0.9-0
java-11-openjdk-devel - update to 11.0.11.0.9-0
java-11-openjdk-javadoc - update to 11.0.11.0.9-0
java-11-openjdk-static-libs - update to 11.0.11.0.9-0
java-11-openjdk-src - update to 11.0.11.0.9-0
java-11-openjdk-jmods - update to 11.0.11.0.9-0
java-11-openjdk-javadoc-zip - update to 11.0.11.0.9-0
java-11-openjdk - addressed in versions 11.0.11.0.9-0.fc32, 11.0.11.0.9-0.fc33, 11.0.11.0.9-0.fc34
openjdk-11-jre-headless (Ubuntu package) - addressed in versions 11.0.11+9-0ubuntu2~18.04, 11.0.11+9-0ubuntu2~20.04, 11.0.11+9-0ubuntu2~20.10
openjdk-11-jre-zero (Ubuntu package) - addressed in versions 11.0.11+9-0ubuntu2~18.04, 11.0.11+9-0ubuntu2~20.04, 11.0.11+9-0ubuntu2~20.10
openjdk-11-jre (Ubuntu package) - addressed in versions 11.0.11+9-0ubuntu2~18.04, 11.0.11+9-0ubuntu2~20.04, 11.0.11+9-0ubuntu2~20.10
openjdk-11-jdk (Ubuntu package) - addressed in versions 11.0.11+9-0ubuntu2~18.04, 11.0.11+9-0ubuntu2~20.04, 11.0.11+9-0ubuntu2~20.10
java-11-openjdk - update to 11.0.11.9-2
java-11-openjdk-devel - update to 11.0.11.9-2
java-11-openjdk-debuginfo - update to 11.0.11.9-2
java-11-openjdk-headless - update to 11.0.11.9-2
java-11-openjdk-demo - update to 11.0.11.9-2
java-11-openjdk-debugsource - update to 11.0.11.9-2
java-11-openjdk-javadoc - update to 11.0.11.9-2
java-11-openjdk-jmods - update to 11.0.11.9-2
java-11-openjdk-src-slowdebug - update to 11.0.11.9-2
java-11-openjdk-devel-slowdebug - update to 11.0.11.9-2
java-11-openjdk-src - update to 11.0.11.9-2
java-11-openjdk-slowdebug - update to 11.0.11.9-2
java-11-openjdk-javadoc-zip - update to 11.0.11.9-2
java-11-openjdk-jmods-slowdebug - update to 11.0.11.9-2
java-11-openjdk-headless-slowdebug - update to 11.0.11.9-2
java-11-openjdk-demo-slowdebug - update to 11.0.11.9-2
IBM CICS TX Standard - update to 11.1.0.0 ifix4
java-latest-openjdk-demo - update to 18.0.1.10-0.rolling
java-latest-openjdk-src - update to 18.0.1.10-0.rolling
java-latest-openjdk-debuginfo - update to 18.0.1.10-0.rolling
java-latest-openjdk-javadoc - update to 18.0.1.10-0.rolling
java-latest-openjdk-headless - update to 18.0.1.10-0.rolling
java-latest-openjdk-devel - update to 18.0.1.10-0.rolling
java-latest-openjdk-javadoc-zip - update to 18.0.1.10-0.rolling
java-latest-openjdk - update to 18.0.1.10-0.rolling
java-latest-openjdk-debugsource - update to 18.0.1.10-0.rolling
java-latest-openjdk-jmods - update to 18.0.1.10-0.rolling
IBM Robotic Process Automation - update to 21.0.5
Juniper Junos Space - update to 21.2R1

• https://www.oracle.com/security-alerts/cpuapr2021.html

• Multiple vulnerabilities in Java SE Embedded
• Multiple vulnerabilities in Java SE
• Multiple vulnerabilities in Oracle GraalVM Enterprise Edition
• Red Hat Enterprise Linux 7 update for java-11-openjdk
• Red Hat Enterprise Linux 7 update for java-1.8.0-openjdk
• Red Hat Enterprise Linux 8.2 update for java-1.8.0-openjdk
• Red Hat Enterprise Linux 8 update for java-1.8.0-openjdk
• Red Hat Enterprise Linux 8.1 update for java-11-openjdk
• Red Hat Enterprise Linux 8.2 update for java-11-openjdk
• Red Hat Enterprise Linux 8 update for java-11-openjdk
• Red Hat Enterprise Linux 8.1 update for java-1.8.0-openjdk
• Red Hat update for OpenJDK Java
• Red Hat update for OpenJDK Java
• CentOS 7 update for java-1.8.0-openjdk
• CentOS 7 update for java-11-openjdk
• Multiple vulnerabilities in Red Hat Openshift Logging
• Multiple vulnerabilities in Red Hat OpenShift Container Platform
• Multiple vulnerabilities in Red Hat OpenShift Container Platform
• Amazon Linux AMI update for java-1.8.0-openjdk
• Multiple vulnerabilities in Junos Space
• SUSE update for java-11-openjdk
• SUSE update for java-11-openjdk
• SUSE update for java-1_8_0-openjdk
• SUSE update for java-1_8_0-openjdk
• SUSE update for java-1_7_0-openjdk
• Ubuntu update for openjdk-8
• Multiple vulnerabilities in IBM Cloud Pak for Security
• Gentoo update for OpenJDK
• Multiple vulnerabilities in IBM Java SDK
• Multiple vulnerabilities in IBM Rational Functional Tester
• Red Hat Enterprise Linux 7 Supplementary update for java-1.8.0-ibm
• Red Hat Enterprise Linux 7 Supplementary update for java-1.7.1-ibm
• Improper input validation in IBM WebSphere Application Server
• Improper input validation in Liberty for Java for IBM Cloud
• Improper input validation in IBM CICS TX Standard
• Improper input validation in IBM CICS TX Advanced
• Improper input validation in IBM Watson Discovery for IBM Cloud Pak for Data
• Multiple vulnerabilities in Dell Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in Dell EMC NetWorker Runtime Environment (NRE)
• Improper input validation in IBM i
• Red Hat Enterprise Linux 8 update for java-1.8.0-ibm
• Multiple vulnerabilities in IBM Rational Software Architect Designer (RSAD)
• Improper input validation in IBM Installation Manager and IBM Packaging Utility
• Improper input validation in IBM Sterling Control Center
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• F5 BIG-IP update for Java
• F5 BIG-IQ Centralized Management update for Java
• Improper input validation in IBM Enterprise Content Management System Monitor
• Multiple vulnerabilities in IBM Data Risk Manager
• Improper input validation in IBM Virtualization Engine TS7700
• Improper input validation in IBM Rational Business Developer
• Improper input validation in IBM Sterling External Authentication Server
• Improper input validation in IBM Tivoli Business Service Manager
• Multiple vulnerabilities in Rational Directory Server (Tivoli) & Rational Directory Administrator
• Multiple vulnerabilities in IBM Tivoli Netcool Impact
• IBM AIX update for Java SDK
• IBM VIOS update for Java SDK
• Multiple vulnerabilities in IBM Tivoli Application Dependency Discovery Manager
• Multiple vulnerabilities in IBM WebSphere Application Server Patterns
• Improper input validation in CICS Transaction Gateway Desktop Edition
• Tivoli Netcool/OMNIbus update for IBM Java Runtime
• Multiple vulnerabilities in IBM Security Verify Governance
• Improper input validation in IBM Robotic Process Automation
• Improper input validation in IBM Tivoli System Automation for Multiplatforms
• Improper input validation in IBM Tivoli System Automation Application Manager
• IBM Tivoli Application Dependency Discovery Manager update for IBM SDK Java
• Improper input validation in IBM Sterling Partner Engagement Manager
• Improper input validation in IBM Tivoli Netcool Configuration Manager
• Multiple vulnerabilities in IBM Tivoli Monitoring.
• Improper input validation in IBM MQ
• Improper input validation in IBM MQ
• Improper input validation in SANnav Management Portal and Global View
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in Dell Unity, Dell UnityVSA, and Dell Unity XT
• SUSE update for java-1_8_0-ibm
• SUSE update for java-1_8_0-ibm
• SUSE update for java-1_7_1-ibm
• SUSE update for java-1_7_1-ibm
• SUSE update for java-1_7_1-ibm
• Multiple vulnerabilities in API Gateway and API Manager
• Multiple vulnerabilities in IBM Cloud Pak System
• Multiple vulnerabilities in IBM Directory Server and IBM Directory Suite
• Multiple vulnerabilities in IBM Sterling Secure Proxy
• Multiple vulnerabilities in IBM Rational Synergy
• Improper input validation in IBM Intelligent Operations Center
• Multiple vulnerabilities in IBM Operations Analytics Predictive Insights
• Multiple vulnerabilities in IBM Rational Build Forge
• Multiple vulnerabilities in IBM Common Licensing
• openEuler 20.03 LTS SP1 update for openjdk-1.8.0
• openEuler 20.03 LTS SP1 update for openjdk-11
• openEuler update for openjdk-latest
• Multiple vulnerabilities in IBM Db2 on Cloud Pak for Data
• Fedora 32 update for java-1.8.0-openjdk
• Fedora 33 update for java-1.8.0-openjdk
• Fedora 34 update for java-1.8.0-openjdk
• Fedora 33 update for java-11-openjdk
• Fedora 34 update for java-11-openjdk
• Fedora 32 update for java-11-openjdk
• Anolis OS update for java-11-openjdk
• Anolis OS update for java-1.8.0-openjdk
• Multiple vulnerabilities in Netcool Operations Insight
• Multiple vulnerabilities in IBM InfoSphere Data Architect