Every CVE Search/ Get API key

CVE-2021-2432

Vulnerability in the Java SE product of Oracle Java SE (component: JNDI). The supported version...

3.7 LowFix available

Vulnerability in the Java SE product of Oracle Java SE (component: JNDI). The supported version that is affected is Java SE: 7u301. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

3.70%Up 3.2 points since Jul 21, 2021
90%50%10%1%

What each source reports

CVE List Score used 3.7

Vulnerability in the Java SE product of Oracle Java SE (component: JNDI). The supported version that is affected is Java SE: 7u301. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

Record
CVE-2021-2432
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
EUVDEUVD-2021-16891 3.7

Vulnerability in the Java SE product of Oracle Java SE (component: JNDI). The supported version that is affected is Java SE: 7u301. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

Record
EUVD-2021-16891
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-03
GitHub AdvisoriesGHSA-3xjg-p34v-7jgf 3.7

Vulnerability in the Java SE product of Oracle Java SE (component: JNDI). The supported version...

Vulnerability in the Java SE product of Oracle Java SE (component: JNDI). The supported version that is affected is Java SE: 7u301. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

Record
GHSA-3xjg-p34v-7jgf
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
NVD 3.7

Vulnerability in the Java SE product of Oracle Java SE (component: JNDI). The supported version that is affected is Java SE: 7u301. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

Record
CVE-2021-2432
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Updated
2026-11-02
OSVALPINE-CVE-2021-2432 3.7

Vulnerability in the Java SE product of Oracle Java SE (component: JNDI). The supported version that is affected is Java SE: 7u301. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

Record
ALPINE-CVE-2021-2432
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-03
OSVRHSA-2021:3293 4.3

Red Hat Security Advisory: java-1.7.1-ibm security update

Record
RHSA-2021:3293
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Updated
2026-11-02
Show 9 moreShow less
OSVBIT-java-2021-2432 No score

Vulnerability in the Java SE product of Oracle Java SE (component: JNDI). The supported version that is affected is Java SE: 7u301. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

Record
BIT-java-2021-2432
Updated
2026-11-02
OSVBIT-java-min-2021-2432 No score

Vulnerability in the Java SE product of Oracle Java SE (component: JNDI). The supported version that is affected is Java SE: 7u301. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

Record
BIT-java-min-2021-2432
Updated
2026-11-02
OSVBIT-jre-2021-2432 No score

Vulnerability in the Java SE product of Oracle Java SE (component: JNDI). The supported version that is affected is Java SE: 7u301. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

Record
BIT-jre-2021-2432
Updated
2026-11-02
OSVCLSA-2022-1661173656 No score

Fixed 50 CVEs in java-1.7.0-openjdk

  • Bump to 2.6.28 and OpenJDK 7u351-b01.
  • Security fixes in 7u351:
  • CVE-2022-21540: Improve class compilation (JDK-8281859)
  • CVE-2022-21541: Enhance MethodHandle invocations (JDK-8281866)
  • CVE-2022-34169: Improve Xalan supports (JDK-8285407)
  • Security fixes in 7u341:
  • CVE-2022-21426: Better XPath expression handling (JDK-8270504)
  • CVE-2022-21434: Better invocation handler handling (JDK-8277672)
  • CVE-2022-21443: Improved Object Identification (JDK-8275151)
  • CVE-2022-21476: Improve Santuario processing (JDK-8278008)
  • CVE-2022-21496: Improve URL supports (JDK-8278972)
  • Security fixes in 7u331:
  • CVE-2022-21248: Enhance cross VM serialization (JDK-8264934)
  • CVE-2022-21282: Better resolution of URIs (JDK-8270492)
  • CVE-2022-21283: Better String matching (JDK-8268813)
  • CVE-2022-21293: Improve String constructions (JDK-8270392)
  • CVE-2022-21294: Enhance construction of Identity maps (JDK-8270416)
  • CVE-2022-21296: Improve SAX Parser configuration management (JDK-8270498)
  • CVE-2022-21299: Improved scanning of XML entities (JDK-8270646)
  • CVE-2022-21305: Better array indexing (JDK-8272014)
  • CVE-2022-21340: Verify Jar Verification (JDK-8272026)
  • CVE-2022-21341: Improve serial forms for transport (JDK-8272236)
  • CVE-2022-21349: Improve Solaris font rendering (JDK-8273748)
  • CVE-2022-21360: Enhance BMP image support (JDK-8273756)
  • CVE-2022-21365: Enhanced BMP processing (JDK-8273838)
  • Security fixes in 7u321:
  • CVE-2021-35550: Update the default enabled cipher suites preference (JDK-8163326)
  • CVE-2021-35556: Richer Text Editors (JDK-8265167)
  • CVE-2021-35559: Enhanced style for RTF kit (JDK-8265580)
  • CVE-2021-35561: Better hashing support (JDK-8266097)
  • CVE-2021-35564: Improve Keystore integrity (JDK-8266137)
  • CVE-2021-35565: com.sun.net.HttpsServer spins on TLS session close (JDK-8254967)
  • CVE-2021-35586: Better BMP support (JDK-8267735)
  • CVE-2021-35588: InnerClasses: VM permits wrong Throw ClassFormatError if InnerClasses attribute's inner_class_info_index is 0 (JDK-8130183)
  • CVE-2021-35603: Better session identification (JDK-8269618)
  • Security fixes in 7u311:
  • CVE-2021-2341: Improve file transfers (JDK-8258432)
  • CVE-2021-2369: Better jar file validation (JDK-8260967)
  • CVE-2021-2432: Provide better LDAP provider support (JDK-8267412)
  • Security fixes in 7u301:
  • CVE-2021-2161: Less ambiguous processing (JDK-8250568)
  • CVE-2021-2163: Enhance opening JARs (JDK-8249906)
  • Security fixes in 7u281:
  • CVE-2020-14779: Enhance support of Proxy class (JDK-8236862)
  • CVE-2020-14781: Enhanced LDAP contexts (JDK-8237990)
  • CVE-2020-14782: Enhance certificate processing (JDK-8237995)
  • CVE-2020-14792: Better range handling (JDK-8241114)
  • CVE-2020-14796: Improved URI Support (JDK-8242680)
  • CVE-2020-14797: Better Path Validation (JDK-8242685)
  • CVE-2020-14798: Enhanced buffer support (JDK-8242695)
  • CVE-2020-14803: Improved Buffer supports (JDK-8244136)
  • Security fixes in 7u271:
  • CVE-2020-14577: Enhance certificate verification (JDK-8237592)
  • CVE-2020-14578: NegativeArraySizeException in sun.security.util.DerInputStream.getUnalignedBitString() (JDK-8028591)
  • CVE-2020-14579: NullPointerException in DerValue.equals(DerValue) (JDK-8028431)
  • CVE-2020-14581: Better matrix operations (JDK-8238002)
  • CVE-2020-14583: Better Buffer support (JDK-8238920)
  • CVE-2020-14593: Less Affine Transformations (JDK-8240119)
  • CVE-2020-14621: Better XML namespace handling (JDK-8242136)
  • Update tzdata requirement to 2022a to match JDK-8283350
  • Update NEWS from IcedTea
  • Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after bump OpenJDK version
Record
CLSA-2022-1661173656
Updated
2026-11-02
OSVCLSA-2022-1661176564 No score

Fixed 50 CVEs in java-1.7.0-openjdk

  • Bump to 2.6.28 and OpenJDK 7u351-b01.
  • Security fixes in 7u351:
  • CVE-2022-21540: Improve class compilation (JDK-8281859)
  • CVE-2022-21541: Enhance MethodHandle invocations (JDK-8281866)
  • CVE-2022-34169: Improve Xalan supports (JDK-8285407)
  • Security fixes in 7u341:
  • CVE-2022-21426: Better XPath expression handling (JDK-8270504)
  • CVE-2022-21434: Better invocation handler handling (JDK-8277672)
  • CVE-2022-21443: Improved Object Identification (JDK-8275151)
  • CVE-2022-21476: Improve Santuario processing (JDK-8278008)
  • CVE-2022-21496: Improve URL supports (JDK-8278972)
  • Security fixes in 7u331:
  • CVE-2022-21248: Enhance cross VM serialization (JDK-8264934)
  • CVE-2022-21282: Better resolution of URIs (JDK-8270492)
  • CVE-2022-21283: Better String matching (JDK-8268813)
  • CVE-2022-21293: Improve String constructions (JDK-8270392)
  • CVE-2022-21294: Enhance construction of Identity maps (JDK-8270416)
  • CVE-2022-21296: Improve SAX Parser configuration management (JDK-8270498)
  • CVE-2022-21299: Improved scanning of XML entities (JDK-8270646)
  • CVE-2022-21305: Better array indexing (JDK-8272014)
  • CVE-2022-21340: Verify Jar Verification (JDK-8272026)
  • CVE-2022-21341: Improve serial forms for transport (JDK-8272236)
  • CVE-2022-21349: Improve Solaris font rendering (JDK-8273748)
  • CVE-2022-21360: Enhance BMP image support (JDK-8273756)
  • CVE-2022-21365: Enhanced BMP processing (JDK-8273838)
  • Security fixes in 7u321:
  • CVE-2021-35550: Update the default enabled cipher suites preference (JDK-8163326)
  • CVE-2021-35556: Richer Text Editors (JDK-8265167)
  • CVE-2021-35559: Enhanced style for RTF kit (JDK-8265580)
  • CVE-2021-35561: Better hashing support (JDK-8266097)
  • CVE-2021-35564: Improve Keystore integrity (JDK-8266137)
  • CVE-2021-35565: com.sun.net.HttpsServer spins on TLS session close (JDK-8254967)
  • CVE-2021-35586: Better BMP support (JDK-8267735)
  • CVE-2021-35588: InnerClasses: VM permits wrong Throw ClassFormatError if InnerClasses attribute's inner_class_info_index is 0 (JDK-8130183)
  • CVE-2021-35603: Better session identification (JDK-8269618)
  • Security fixes in 7u311:
  • CVE-2021-2341: Improve file transfers (JDK-8258432)
  • CVE-2021-2369: Better jar file validation (JDK-8260967)
  • CVE-2021-2432: Provide better LDAP provider support (JDK-8267412)
  • Security fixes in 7u301:
  • CVE-2021-2161: Less ambiguous processing (JDK-8250568)
  • CVE-2021-2163: Enhance opening JARs (JDK-8249906)
  • Security fixes in 7u281:
  • CVE-2020-14779: Enhance support of Proxy class (JDK-8236862)
  • CVE-2020-14781: Enhanced LDAP contexts (JDK-8237990)
  • CVE-2020-14782: Enhance certificate processing (JDK-8237995)
  • CVE-2020-14792: Better range handling (JDK-8241114)
  • CVE-2020-14796: Improved URI Support (JDK-8242680)
  • CVE-2020-14797: Better Path Validation (JDK-8242685)
  • CVE-2020-14798: Enhanced buffer support (JDK-8242695)
  • CVE-2020-14803: Improved Buffer supports (JDK-8244136)
  • Security fixes in 7u271:
  • CVE-2020-14577: Enhance certificate verification (JDK-8237592)
  • CVE-2020-14578: NegativeArraySizeException in sun.security.util.DerInputStream.getUnalignedBitString() (JDK-8028591)
  • CVE-2020-14579: NullPointerException in DerValue.equals(DerValue) (JDK-8028431)
  • CVE-2020-14581: Better matrix operations (JDK-8238002)
  • CVE-2020-14583: Better Buffer support (JDK-8238920)
  • CVE-2020-14593: Less Affine Transformations (JDK-8240119)
  • CVE-2020-14621: Better XML namespace handling (JDK-8242136)
  • Update tzdata requirement to 2022a to match JDK-8283350
  • Update NEWS from IcedTea
  • Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after bump OpenJDK version
Record
CLSA-2022-1661176564
Updated
2026-11-02
OSVSUSE-SU-2021:3007-1 No score

Security update for java-1_7_0-openjdk

This update for java-1_7_0-openjdk fixes the following issues:

  • Update to 2.6.27 - OpenJDK 7u311 (July 2021 CPU)

Security fixes:

  • CVE-2021-2341: Improve file transfers (bsc#1188564)
  • CVE-2021-2369: Better jar file validation (bsc#1188565)
  • CVE-2021-2432: Provide better LDAP provider support (bsc#1188568)
  • CVE-2021-2163: Enhance opening JARs (bsc#1185055)
  • CVE-2021-2161: Less ambiguous processing (bsc#1185056)
  • CVE-2018-3639: Fix revision to prefer
Record
SUSE-SU-2021:3007-1
Updated
2026-11-02
OSVSUSE-SU-2022:0166-1 No score

Security update for java-1_7_1-ibm

This update for java-1_7_1-ibm fixes the following issues:

  • Update to Java 7.1 Service Refresh 5 Fix Pack 0
  • CVE-2021-41035: before version 0.29.0, the openj9 JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods. (bsc#1194198, bsc#1192052)
  • CVE-2021-35586: Excessive memory allocation in BMPImageReader. (bsc#1191914)
  • CVE-2021-35564: Certificates with end dates too far in the future can corrupt keystore. (bsc#1191913)
  • CVE-2021-35559: Excessive memory allocation in RTFReader. (bsc#1191911)
  • CVE-2021-35556: Excessive memory allocation in RTFParser. (bsc#1191910)
  • CVE-2021-35565: Loop in HttpsServer triggered during TLS session close. (bsc#1191909)
  • CVE-2021-35588: Incomplete validation of inner class references in ClassFileParser. (bsc#1191905)
  • CVE-2021-2341: Fixed a flaw inside the FtpClient. (bsc#1188564)
  • CVE-2021-2369: JAR file handling problem containing multiple MANIFEST.MF files. (bsc#1188565)
  • CVE-2021-2432: Fixed a vulnerability in the omponent JNDI. (bsc#1188568)
  • CVE-2021-2163: Incomplete enforcement of JAR signing disabled algorithms. (bsc#1185055)
Record
SUSE-SU-2022:0166-1
Updated
2026-11-02
OSVSUSE-SU-2022:14875-1 No score

Security update for java-1_7_1-ibm

This update for java-1_7_1-ibm fixes the following issues:

  • Update to Java 7.1 Service Refresh 5 Fix Pack 0
  • CVE-2021-41035: before version 0.29.0, the openj9 JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods. (bsc#1194198, bsc#1192052)
  • CVE-2021-35586: Excessive memory allocation in BMPImageReader. (bsc#1191914)
  • CVE-2021-35564: Certificates with end dates too far in the future can corrupt keystore. (bsc#1191913)
  • CVE-2021-35559: Excessive memory allocation in RTFReader. (bsc#1191911)
  • CVE-2021-35556: Excessive memory allocation in RTFParser. (bsc#1191910)
  • CVE-2021-35565: Loop in HttpsServer triggered during TLS session close. (bsc#1191909)
  • CVE-2021-35588: Incomplete validation of inner class references in ClassFileParser. (bsc#1191905)
  • CVE-2021-2341: Fixed a flaw inside the FtpClient. (bsc#1188564)
  • CVE-2021-2369: JAR file handling problem containing multiple MANIFEST.MF files. (bsc#1188565)
  • CVE-2021-2432: Fixed a vulnerability in the omponent JNDI. (bsc#1188568)
  • CVE-2021-2163: Incomplete enforcement of JAR signing disabled algorithms. (bsc#1185055)
Record
SUSE-SU-2022:14875-1
Updated
2026-11-02
OSVSUSE-SU-2022:14876-1 No score

Security update for java-1_7_1-ibm

This update for java-1_7_1-ibm fixes the following issues:

  • Update to Java 7.1 Service Refresh 5 Fix Pack 0
  • CVE-2021-41035: before version 0.29.0, the openj9 JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods. (bsc#1194198, bsc#1192052)
  • CVE-2021-35586: Excessive memory allocation in BMPImageReader. (bsc#1191914)
  • CVE-2021-35564: Certificates with end dates too far in the future can corrupt keystore. (bsc#1191913)
  • CVE-2021-35559: Excessive memory allocation in RTFReader. (bsc#1191911)
  • CVE-2021-35556: Excessive memory allocation in RTFParser. (bsc#1191910)
  • CVE-2021-35565: Loop in HttpsServer triggered during TLS session close. (bsc#1191909)
  • CVE-2021-35588: Incomplete validation of inner class references in ClassFileParser. (bsc#1191905)
  • CVE-2021-2341: Fixed a flaw inside the FtpClient. (bsc#1188564)
  • CVE-2021-2369: JAR file handling problem containing multiple MANIFEST.MF files. (bsc#1188565)
  • CVE-2021-2432: Fixed a vulnerability in the omponent JNDI. (bsc#1188568)
  • CVE-2021-2163: Incomplete enforcement of JAR signing disabled algorithms. (bsc#1185055)
  • CVE-2021-2388: Fixed a flaw inside the Hotspot component performed range check elimination. (bsc#1188566)
Record
SUSE-SU-2022:14876-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openjdk7
Alpine:v3.15
 before 7.311.2.6.27-r0
7.311.2.6.27-r0
openjdk7
Alpine:v3.16
 before 7.311.2.6.27-r0
7.311.2.6.27-r0
openjdk7
Alpine:v3.17
 before 7.311.2.6.27-r0
7.311.2.6.27-r0
openjdk7
Alpine:v3.18
 before 7.311.2.6.27-r0
7.311.2.6.27-r0
java
Bitnami
 before 1.7.0, 7.0.0 up to 7.0.311
1.7.07.0.311
java-min
Bitnami
 before 1.7.0, 7.0.0 up to 7.0.311
1.7.07.0.311
jre
Bitnami
 before 1.7.0, 7.0.0 up to 7.0.311
1.7.07.0.311
java-1.7.0-openjdk
TuxCare:OracleLinux:6
From an advisory covering 50 CVEs
 before 1:1.7.0.351-2.6.28.0.el6.tuxcare.els1
1:1.7.0.351-2.6.28.0.el6.tuxcare.els1
java-1.7.0-openjdk-demo
TuxCare:OracleLinux:6
From an advisory covering 50 CVEs
 before 1:1.7.0.351-2.6.28.0.el6.tuxcare.els1
1:1.7.0.351-2.6.28.0.el6.tuxcare.els1
java-1.7.0-openjdk-devel
TuxCare:OracleLinux:6
From an advisory covering 50 CVEs
 before 1:1.7.0.351-2.6.28.0.el6.tuxcare.els1
1:1.7.0.351-2.6.28.0.el6.tuxcare.els1
Show 31 moreShow less
Affected packages
PackageAffectedFixed
java-1.7.0-openjdk-javadoc
TuxCare:OracleLinux:6
From an advisory covering 50 CVEs
 before 1:1.7.0.351-2.6.28.0.el6.tuxcare.els1
1:1.7.0.351-2.6.28.0.el6.tuxcare.els1
java-1.7.0-openjdk-src
TuxCare:OracleLinux:6
From an advisory covering 50 CVEs
 before 1:1.7.0.351-2.6.28.0.el6.tuxcare.els1
1:1.7.0.351-2.6.28.0.el6.tuxcare.els1
java-1.7.0-openjdk
TuxCare:CentOS:6
From an advisory covering 50 CVEs
 before 1:1.7.0.351-2.6.28.0.el6.tuxcare.els1
1:1.7.0.351-2.6.28.0.el6.tuxcare.els1
java-1.7.0-openjdk-demo
TuxCare:CentOS:6
From an advisory covering 50 CVEs
 before 1:1.7.0.351-2.6.28.0.el6.tuxcare.els1
1:1.7.0.351-2.6.28.0.el6.tuxcare.els1
java-1.7.0-openjdk-devel
TuxCare:CentOS:6
From an advisory covering 50 CVEs
 before 1:1.7.0.351-2.6.28.0.el6.tuxcare.els1
1:1.7.0.351-2.6.28.0.el6.tuxcare.els1
java-1.7.0-openjdk-javadoc
TuxCare:CentOS:6
From an advisory covering 50 CVEs
 before 1:1.7.0.351-2.6.28.0.el6.tuxcare.els1
1:1.7.0.351-2.6.28.0.el6.tuxcare.els1
java-1.7.0-openjdk-src
TuxCare:CentOS:6
From an advisory covering 50 CVEs
 before 1:1.7.0.351-2.6.28.0.el6.tuxcare.els1
1:1.7.0.351-2.6.28.0.el6.tuxcare.els1
java-1.7.1-ibm
Red Hat:rhel_extras:7
From an advisory covering 3 CVEs
 before 1:1.7.1.4.90-1jpp.1.el7
1:1.7.1.4.90-1jpp.1.el7
java-1.7.1-ibm-demo
Red Hat:rhel_extras:7
From an advisory covering 3 CVEs
 before 1:1.7.1.4.90-1jpp.1.el7
1:1.7.1.4.90-1jpp.1.el7
java-1.7.1-ibm-devel
Red Hat:rhel_extras:7
From an advisory covering 3 CVEs
 before 1:1.7.1.4.90-1jpp.1.el7
1:1.7.1.4.90-1jpp.1.el7
java-1.7.1-ibm-jdbc
Red Hat:rhel_extras:7
From an advisory covering 3 CVEs
 before 1:1.7.1.4.90-1jpp.1.el7
1:1.7.1.4.90-1jpp.1.el7
java-1.7.1-ibm-plugin
Red Hat:rhel_extras:7
From an advisory covering 3 CVEs
 before 1:1.7.1.4.90-1jpp.1.el7
1:1.7.1.4.90-1jpp.1.el7
java-1.7.1-ibm-src
Red Hat:rhel_extras:7
From an advisory covering 3 CVEs
 before 1:1.7.1.4.90-1jpp.1.el7
1:1.7.1.4.90-1jpp.1.el7
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 6 CVEs
 before 1.7.0.311-43.50.2
1.7.0.311-43.50.2
java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 6 CVEs
 before 1.7.0.311-43.50.2
1.7.0.311-43.50.2
java-1_7_1-ibm
SUSE:HPE Helion OpenStack 8
From an advisory covering 11 CVEs
 before 1.7.1_sr5.0-38.65.1
1.7.1_sr5.0-38.65.1
java-1_7_1-ibm
SUSE:OpenStack Cloud 8
From an advisory covering 11 CVEs
 before 1.7.1_sr5.0-38.65.1
1.7.1_sr5.0-38.65.1
java-1_7_1-ibm
SUSE:OpenStack Cloud 9
From an advisory covering 11 CVEs
 before 1.7.1_sr5.0-38.65.1
1.7.1_sr5.0-38.65.1
java-1_7_1-ibm
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 11 CVEs
 before 1.7.1_sr5.0-38.65.1
1.7.1_sr5.0-38.65.1
java-1_7_1-ibm
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 11 CVEs
 before 1.7.1_sr5.0-38.65.1
1.7.1_sr5.0-38.65.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 11 CVEs
 before 1.7.1_sr5.0-38.65.1
1.7.1_sr5.0-38.65.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 11 CVEs
 before 1.7.1_sr5.0-38.65.1
1.7.1_sr5.0-38.65.1
java-1_7_1-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 11 CVEs
 before 1.7.1_sr5.0-38.65.1
1.7.1_sr5.0-38.65.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 11 CVEs
 before 1.7.1_sr5.0-38.65.1
1.7.1_sr5.0-38.65.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 11 CVEs
 before 1.7.1_sr5.0-38.65.1
1.7.1_sr5.0-38.65.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 11 CVEs
 before 1.7.1_sr5.0-38.65.1
1.7.1_sr5.0-38.65.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 11 CVEs
 before 1.7.1_sr5.0-38.65.1
1.7.1_sr5.0-38.65.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 11 CVEs
 before 1.7.1_sr5.0-38.65.1
1.7.1_sr5.0-38.65.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 11 CVEs
 before 1.7.1_sr5.0-38.65.1
1.7.1_sr5.0-38.65.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 11 CVEs
 before 1.7.1_sr5.0-26.68.1
1.7.1_sr5.0-26.68.1
java-1_7_0-ibm
SUSE:Linux Enterprise Point of Sale 11 SP3
From an advisory covering 12 CVEs
 before 1.7.0_sr11.0-65.63.1
1.7.0_sr11.0-65.63.1

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-2432 is a low vulnerability (CVSS 3.7) in Mcafee Epolicy Orchestrator, published July 20, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.70%, the 89th percentile. Fixed in openjdk7 7.311.2.6.27-r0.

References

Show 51 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open