CVE:CVE-2022-21291
CNNVD:CNNVD-202201-1484
Oracle GraalVM是美国甲骨文（Oracle）公司的一套使用Java语言编写的即时编译器。该产品支持多种编程语言和执行模式。
Oracle GraalVM 存在输入验证错误漏洞，该漏洞的存在是由于 Oracle GraalVM 企业版中序列化组件中的输入验证不正确。远程未经身份验证的攻击者可以利用此漏洞来操纵数据。
solution:Upgrade oracle graalvm to a higher version than 20.3.4,21.3.0,and avoid the version 20.3.4,21.3.0; Upgrade oracle jdk to a higher version than 1.7.0:update321,1.8.0:update311,11.0.13,17.0.1,and avoid the version 1.7.0:update321,1.8.0:update311,11.0.13,17.0.1; Upgrade oracle jre to a higher version than 1.7.0:update321,1.8.0:update311,11.0.13,17.0.1,and avoid the version 1.7.0:update321,1.8.0:update311,11.0.13,17.0.1; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0; Upgrade netapp 7-mode_transition_tool to a higher version than -; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp cloud_insights to a higher version than -; Upgrade netapp e-series_santricity_os_controller to a higher version than 11.70.1,and avoid the version [11.0.0,11.70.1]; Upgrade netapp e-series_santricity_storage_manager to a higher version than -; Upgrade netapp e-series_santricity_web_services to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp santricity_unified_manager to a higher version than -; Upgrade netapp snapmanager to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade oracle openjdk to a higher version than 11.0.13,13.0.9,15.0.5,17,17.0.1,and avoid the version [11,11.0.13],[13,13.0.9],[15,15.0.5],17,17.0.1