CVE:CVE-2020-14583
CNNVD:CNNVD-202007-756
Oracle GraalVM是美国甲骨文（Oracle）公司的一套使用Java语言编写的即时编译器。该产品支持多种编程语言和执行模式。GraalVM Enterprise Edition是GraalVM的企业版。
Oracle GraalVM Enterprise Edition 19.3.2版本和20.1.0版本中的Java组件存在安全漏洞。攻击者可利用该漏洞控制Oracle GraalVM Enterprise Edition，影响数据的可用性、保密性和完整性。
solution:Upgrade oracle jdk to a higher version than 1.7.0:update261,1.8.0:update251,11.0.7,14.0.1,and avoid the version 1.7.0:update261,1.8.0:update251,11.0.7,14.0.1; Upgrade oracle jre to a higher version than 1.8.0:update251,and avoid the version 1.8.0:update251; Upgrade fedoraproject fedora to a higher version than 31,32,and avoid the version 31,32; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,20.04,and avoid the version 16.04,18.04,20.04; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2; Upgrade netapp 7-mode_transition_tool to a higher version than -; netapp active_iq_unified_manager avoid the version [7.3,),[9.5,),no fixed version after 7.3,no fixed version after 9.5; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp cloud_secure_agent to a higher version than -; Upgrade netapp e-series_performance_analyzer to a higher version than -; Upgrade netapp e-series_santricity_os_controller to a higher version than 11.70.2,and avoid the version [11.0.0,11.70.2]; Upgrade netapp e-series_santricity_web_services to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp santricity_unified_manager to a higher version than -; Upgrade netapp snapmanager to a higher version than -; Upgrade netapp steelstore_cloud_integrated_storage to a higher version than -; Upgrade netapp storagegrid to a higher version than 9.0.4,-,and avoid the version [9.0.0,9.0.4]