Endpoint VulnerabilityOracle Java JRE CVE-2022-21496 Vulnerability
Description
Unauthenticated network attackers can exploit a JNDI vulnerability in Oracle Java SE (7u331, 8u321, 11.0.14, 17.0.2, 18) and Oracle GraalVM Enterprise Edition (20.3.5, 21.3.1, 22.0.0.2) to gain unauthorized update, insert, or delete access to data.
Affected Applications
Java JRE
Version Updates
| Date | Version | Status | Detail |
|---|---|---|---|
| 2022-04-27 | 1.00307 |
New
|
Java JRE |
References
https://www.oracle.com/security-alerts/| ID | 72186 |
| Created | Apr 24, 2022 |
| Description Updated |
Jan 04, 2026 |
| CVE ID | |
| Risk |
|
| Coverage | FortiClient |
| OS | Windows |
| Vendor | Oracle |
| Patch | auto |
| Application | Java JRE |