Vulnerability in Oracle Graalvm
CVE-2021-2388
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0…
EPSS: 0.040 (89.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Oracle Graalvm — versions 20.3.2, 21.1.0
- Oracle Jdk — versions 1.8.0, 11.0.11, 16.0.1
- Oracle Jre — versions 1.8.0, 11.0.11, 16.0.1
- Oracle Openjdk — versions 8, 11, 11.0.1
- Oracle Corporation Java Se Jdk And Jre — versions Java SE:8u291, Java SE:11.0.11, Java SE:16.0.1
- Debian Debian_linux — versions 9.0, 10.0
References
- secalert_us@oracle.com (x_refsource_MISC, Vendor Advisory)
- secalert_us@oracle.com (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
- secalert_us@oracle.com (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)
- secalert_us@oracle.com (Patch, x_refsource_MISC, Vendor Advisory)
- secalert_us@oracle.com (x_refsource_CONFIRM, Third Party Advisory)
- secalert_us@oracle.com (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
Frequently asked questions
- What is CVE-2021-2388?
- CVE-2021-2388 is a high-severity vulnerability in Oracle Graalvm. CVSS score: 7.5/10. Published 2021-07-21.
- How severe is CVE-2021-2388?
- High severity. CVSS v3 base score is 7.5 out of 10.