CVE:CVE-2021-35603
CNNVD:CNNVD-202110-1360
Oracle Java SE和Oracle GraalVM都是美国甲骨文（Oracle）公司的产品。Oracle GraalVM是一套使用Java语言编写的即时编译器。该产品支持多种编程语言和执行模式。GraalVM Enterprise Edition是GraalVM的企业版。Oracle GraalVM是一套使用Java语言编写的即时编译器。该产品支持多种编程语言和执行模式。Oracle Java SE是一款用于开发和部署桌面、服务器以及嵌入设备和实时环境中的Java应用程序。
Oracle Java SE Oracle GraalVM Enterprise Edition 存在输入验证错误漏洞，该漏洞源于JSSE组件的输入验证不当。远程的未经身份验证的攻击者可以利用此漏洞获取敏感信息的访问权。
solution:Upgrade oracle graalvm to a higher version than 20.3.3,21.2.0,and avoid the version 20.3.3,21.2.0; Upgrade oracle openjdk to a higher version than 7:update311,8:update301,11.0.12,17,and avoid the version 7:update311,8:update301,11.0.12,17; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp e-series_santricity_os_controller to a higher version than 11.70.1,and avoid the version [11.0.0,11.70.1]; Upgrade netapp e-series_santricity_storage_manager to a higher version than -; Upgrade netapp e-series_santricity_web_services to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp santricity_unified_manager to a higher version than -; Upgrade netapp snapmanager to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade fedoraproject fedora to a higher version than 33,34,35,and avoid the version 33,34,35