CVE:CVE-2021-35550
CNNVD:CNNVD-202110-1372
Oracle Java SE是美国甲骨文（Oracle）公司的一款用于开发和部署桌面、服务器以及嵌入设备和实时环境中的Java应用程序。
Oracle Java SE 的 Oracle GraalVM Enterprise Edition 存在输入验证错误漏洞，该漏洞允许未经身份验证的攻击者通过 TLS 进行网络访问以破坏Oracle GraalVM Enterprise Edition。成功攻击此漏洞可导致对关键数据的未授权访问或对所有Oracle GraalVM Enterprise Edition 可访问数据的完全访问。
solution:Upgrade oracle graalvm to a higher version than 20.3.3,21.2.0,and avoid the version 20.3.3,21.2.0; Upgrade oracle openjdk to a higher version than 7:update311,8:update301,11.0.12,and avoid the version 7:update311,8:update301,11.0.12; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp e-series_santricity_os_controller to a higher version than 11.50.2,and avoid the version [11.0.0,11.50.2]; Upgrade netapp e-series_santricity_storage_manager to a higher version than -; Upgrade netapp e-series_santricity_web_services to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp santricity_unified_manager to a higher version than -; Upgrade netapp snapmanager to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade fedoraproject fedora to a higher version than 33,34,35,and avoid the version 33,34,35; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0