onyx --cves cve-2021-2341
CVE-2021-2341
- score
- <0.1
- cvss
- 3.1
- epss
- 4.2%
- published
- 2021-07-21
- kev added
- —
- first seen
Oracle Java SE (7u301, 8u291, 11.0.11, 16.0.1) and GraalVM Enterprise Edition (20.3.2, 21.1.0) contain a network-based vulnerability caused by loading untrusted code in sandboxed environments, letting unauthenticated attackers with network access perform unauthorized read access, exploit requires human interaction from a user other than the attacker.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
NVD-CWE-noinfo
References 10
- https://lists.debian.org/debian-lts-announce/2021/08/msg00011.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A4TTUHVQF2MGUTP6GTCXLZS4GXK3XUWC/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N57OFX5EJKHHDW4WAOBZFWA5CL4VIIK5/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VTRQIXB52KIXUAO6JBYUKYWXST2NKNAK/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PJJ75FHSUZGWPV4UJTSMQHWLOQ77LHTG/
- https://security.gentoo.org/glsa/202209-05
- https://security.netapp.com/advisory/ntap-20210723-0002/
- https://www.debian.org/security/2021/dsa-4946
- https://www.oracle.com/security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuoct2021.html