onyx --cves cve-2021-2163
CVE-2021-2163
- score
- <0.1
- cvss
- 5.3
- epss
- 3.6%
- published
- 2021-04-22
- kev added
- —
- first seen
Oracle Java SE (7u291, 8u281, 11.0.10, 16), Java SE Embedded (8u281), and GraalVM Enterprise Edition (19.3.5, 20.3.1.2, 21.0.0.2) contain a vulnerability caused by insecure handling of untrusted code in libraries, letting unauthenticated network attackers compromise the system, exploit requires human interaction.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
NVD-CWE-noinfo
References 11
- https://www.oracle.com/security-alerts/cpuapr2021.html
- https://security.gentoo.org/glsa/202209-05
- https://security.netapp.com/advisory/ntap-20210513-0001/
- https://www.debian.org/security/2021/dsa-4899
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5ACX4JEVYH6H4PSMGMYWTGABPOFPH3TS/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CG7EWXSO6JUCVHP7R3SOZQ7WPNBOISJH/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MVDY4T5XMSYDQT6RRKPMRCV4MVGS7KXF/
- https://lists.debian.org/debian-lts-announce/2021/04/msg00021.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CFXOKM2233JVGYDOWW77BN54X3GZTIBK/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAULPCQFLAMBJIS27YLNNX6IHRFJMVP4/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UD3JEP4HPLK7MNZHVUMKIJPBP74M3A2V/