{"schema_version":"1.7.5","id":"CVE-2021-2388","published":"2021-07-21T15:15:40.827Z","modified":"2026-07-08T07:34:14.571517499Z","aliases":["BIT-java-2021-2388","BIT-java-min-2021-2388","BIT-jre-2021-2388"],"related":["ALSA-2021:2776","ALSA-2021:2781","CGA-9pj5-24x7-wr9v","SUSE-SU-2021:2613-1","SUSE-SU-2021:2797-1","SUSE-SU-2021:2798-1","SUSE-SU-2021:2952-1","SUSE-SU-2022:14876-1","openSUSE-SU-2021:1176-1","openSUSE-SU-2021:1233-1","openSUSE-SU-2021:1455-1","openSUSE-SU-2021:2798-1","openSUSE-SU-2021:2952-1","openSUSE-SU-2021:3615-1","openSUSE-SU-2024:10871-1","openSUSE-SU-2024:10872-1","openSUSE-SU-2024:10873-1","openSUSE-SU-2024:10874-1","openSUSE-SU-2024:10876-1","openSUSE-SU-2024:11896-1"],"details":"Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/graalvm/graalvm-ce-builds","events":[{"introduced":"cf616f9f924f9e60b6158ff4aaed8306382b4c31"},{"last_affected":"a748f59635430848730ca95f41a9f7fa1f26b12b"}],"database_specific":{"cpe":["cpe:2.3:a:oracle:graalvm:20.3.2:*:*:*:enterprise:*:*:*","cpe:2.3:a:oracle:graalvm:21.1.0:*:*:*:enterprise:*:*:*"],"extracted_events":[{"introduced":"20.3.2"},{"last_affected":"20.3.2"},{"introduced":"21.1.0"},{"last_affected":"21.1.0"}],"source":"CPE_STRING"}}],"versions":["20.3.2","21.1.0","vm-21.1.0","vm-20.3.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-2388.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/openjdk/jdk","events":[{"introduced":"6412341d454eee8a151cf89b51cabfb7b3d87140"},{"last_affected":"4de3a6be9e60b9676f2199cd18eadb54a9d6e3fe"}],"database_specific":{"cpe":["cpe:2.3:a:oracle:openjdk:8:update101:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update11:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update111:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update25:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:11:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:13:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:15:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:16:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8-update101"},{"last_affected":"8-update101"},{"introduced":"8-update102"},{"last_affected":"8-update102"},{"introduced":"8-update11"},{"last_affected":"8-update11"},{"introduced":"8-update111"},{"last_affected":"8-update111"},{"introduced":"8-update112"},{"last_affected":"8-update112"},{"introduced":"8-update20"},{"last_affected":"8-update20"},{"introduced":"8-update25"},{"last_affected":"8-update25"},{"introduced":"11"},{"last_affected":"11"},{"introduced":"13"},{"last_affected":"13"},{"introduced":"15"},{"last_affected":"15"},{"introduced":"16"},{"last_affected":"16"}],"source":"CPE_STRING"}}],"versions":["11","13","15","16","8-update101","8-update102","8-update11","8-update111","8-update112","8-update20","8-update25"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-2388.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/openjdk/jdk15u","events":[{"introduced":"6412341d454eee8a151cf89b51cabfb7b3d87140"},{"last_affected":"acc01bf89be85c594633bc830e6ca8e8b04e1505"}],"database_specific":{"cpe":["cpe:2.3:a:oracle:openjdk:8:update101:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update11:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update111:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update25:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:11:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:13:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:15:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:15.0.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:15.0.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:15.0.3:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8-update101"},{"last_affected":"8-update101"},{"introduced":"8-update102"},{"last_affected":"8-update102"},{"introduced":"8-update11"},{"last_affected":"8-update11"},{"introduced":"8-update111"},{"last_affected":"8-update111"},{"introduced":"8-update112"},{"last_affected":"8-update112"},{"introduced":"8-update20"},{"last_affected":"8-update20"},{"introduced":"8-update25"},{"last_affected":"8-update25"},{"introduced":"11"},{"last_affected":"11"},{"introduced":"13"},{"last_affected":"13"},{"introduced":"15"},{"last_affected":"15"},{"introduced":"15.0.1"},{"last_affected":"15.0.1"},{"introduced":"15.0.2"},{"last_affected":"15.0.2"},{"introduced":"15.0.3"},{"last_affected":"15.0.3"}],"source":"CPE_STRING"}}],"versions":["11","13","15","15.0.1","15.0.2","15.0.3","8-update101","8-update102","8-update11","8-update111","8-update112","8-update20","8-update25"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-2388.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/openjdk/jdk8u","events":[{"introduced":"6412341d454eee8a151cf89b51cabfb7b3d87140"},{"last_affected":"69efabad3d8a2ff47a62a4626c574a56edec1cfd"}],"database_specific":{"cpe":["cpe:2.3:a:oracle:openjdk:8:update101:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update11:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update111:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update121:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update131:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update25:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8-update101"},{"last_affected":"8-update101"},{"introduced":"8-update102"},{"last_affected":"8-update102"},{"introduced":"8-update11"},{"last_affected":"8-update11"},{"introduced":"8-update111"},{"last_affected":"8-update111"},{"introduced":"8-update112"},{"last_affected":"8-update112"},{"introduced":"8-update121"},{"last_affected":"8-update121"},{"introduced":"8-update131"},{"last_affected":"8-update131"},{"introduced":"8-update20"},{"last_affected":"8-update20"},{"introduced":"8-update25"},{"last_affected":"8-update25"}],"source":"CPE_STRING"}}],"versions":["8-update101","8-update102","8-update11","8-update111","8-update112","8-update121","8-update131","8-update20","8-update25"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-2388.json"}}],"references":[{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2021/08/msg00011.html"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202209-05"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20210723-0002/"},{"type":"ADVISORY","url":"https://www.debian.org/security/2021/dsa-4946"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/cpujul2021.html"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpuoct2021.html"}],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.0"},{"last_affected":"9.0"},{"introduced":"10.0"},{"last_affected":"10.0"}],"source":"CPE_STRING","vendor_product":"debian:debian_linux"},{"cpes":["cpe:2.3:a:oracle:jdk:1.8.0:update291:*:*:*:*:*:*","cpe:2.3:a:oracle:jdk:11.0.11:*:*:*:*:*:*:*","cpe:2.3:a:oracle:jdk:16.0.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.8.0-update291"},{"last_affected":"1.8.0-update291"},{"introduced":"11.0.11"},{"last_affected":"11.0.11"},{"introduced":"16.0.1"},{"last_affected":"16.0.1"}],"source":"CPE_STRING","vendor_product":"oracle:jdk"},{"cpes":["cpe:2.3:a:oracle:jre:1.8.0:update291:*:*:*:*:*:*","cpe:2.3:a:oracle:jre:11.0.11:*:*:*:*:*:*:*","cpe:2.3:a:oracle:jre:16.0.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.8.0-update291"},{"last_affected":"1.8.0-update291"},{"introduced":"11.0.11"},{"last_affected":"11.0.11"},{"introduced":"16.0.1"},{"last_affected":"16.0.1"}],"source":"CPE_STRING","vendor_product":"oracle:jre"},{"cpes":["cpe:2.3:a:oracle:openjdk:11.0.10:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:11.0.11:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:11.0.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:11.0.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:11.0.3:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:11.0.4:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:11.0.5:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:11.0.6:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:11.0.7:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:11.0.8:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:11.0.9:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:13.0.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:13.0.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:13.0.3:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:13.0.4:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:13.0.5:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:13.0.6:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:13.0.7:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:16.0.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:-:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:milestone1:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:milestone2:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:milestone3:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:milestone4:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:milestone5:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:milestone6:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:milestone7:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:milestone8:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:milestone9:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update141:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update151:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update152:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update161:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update162:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update171:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update172:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update181:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update191:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update192:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update201:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update202:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update211:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update212:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update221:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update222:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update231:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update232:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update241:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update242:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update252:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update262:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update271:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update281:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update282:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update291:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update292:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8-NA"},{"last_affected":"8-NA"},{"introduced":"8-NA"},{"last_affected":"8-NA"},{"introduced":"8-NA"},{"last_affected":"8-NA"},{"introduced":"8-milestone1"},{"last_affected":"8-milestone1"},{"introduced":"8-milestone1"},{"last_affected":"8-milestone1"},{"introduced":"8-milestone1"},{"last_affected":"8-milestone1"},{"introduced":"8-milestone2"},{"last_affected":"8-milestone2"},{"introduced":"8-milestone2"},{"last_affected":"8-milestone2"},{"introduced":"8-milestone2"},{"last_affected":"8-milestone2"},{"introduced":"8-milestone3"},{"last_affected":"8-milestone3"},{"introduced":"8-milestone3"},{"last_affected":"8-milestone3"},{"introduced":"8-milestone3"},{"last_affected":"8-milestone3"},{"introduced":"8-milestone4"},{"last_affected":"8-milestone4"},{"introduced":"8-milestone4"},{"last_affected":"8-milestone4"},{"introduced":"8-milestone4"},{"last_affected":"8-milestone4"},{"introduced":"8-milestone5"},{"last_affected":"8-milestone5"},{"introduced":"8-milestone5"},{"last_affected":"8-milestone5"},{"introduced":"8-milestone5"},{"last_affected":"8-milestone5"},{"introduced":"8-milestone6"},{"last_affected":"8-milestone6"},{"introduced":"8-milestone6"},{"last_affected":"8-milestone6"},{"introduced":"8-milestone6"},{"last_affected":"8-milestone6"},{"introduced":"8-milestone7"},{"last_affected":"8-milestone7"},{"introduced":"8-milestone7"},{"last_affected":"8-milestone7"},{"introduced":"8-milestone7"},{"last_affected":"8-milestone7"},{"introduced":"8-milestone8"},{"last_affected":"8-milestone8"},{"introduced":"8-milestone8"},{"last_affected":"8-milestone8"},{"introduced":"8-milestone8"},{"last_affected":"8-milestone8"},{"introduced":"8-milestone9"},{"last_affected":"8-milestone9"},{"introduced":"8-milestone9"},{"last_affected":"8-milestone9"},{"introduced":"8-milestone9"},{"last_affected":"8-milestone9"},{"introduced":"8-update141"},{"last_affected":"8-update141"},{"introduced":"8-update141"},{"last_affected":"8-update141"},{"introduced":"8-update141"},{"last_affected":"8-update141"},{"introduced":"8-update151"},{"last_affected":"8-update151"},{"introduced":"8-update151"},{"last_affected":"8-update151"},{"introduced":"8-update151"},{"last_affected":"8-update151"},{"introduced":"8-update152"},{"last_affected":"8-update152"},{"introduced":"8-update152"},{"last_affected":"8-update152"},{"introduced":"8-update152"},{"last_affected":"8-update152"},{"introduced":"8-update161"},{"last_affected":"8-update161"},{"introduced":"8-update161"},{"last_affected":"8-update161"},{"introduced":"8-update161"},{"last_affected":"8-update161"},{"introduced":"8-update162"},{"last_affected":"8-update162"},{"introduced":"8-update162"},{"last_affected":"8-update162"},{"introduced":"8-update162"},{"last_affected":"8-update162"},{"introduced":"8-update171"},{"last_affected":"8-update171"},{"introduced":"8-update171"},{"last_affected":"8-update171"},{"introduced":"8-update171"},{"last_affected":"8-update171"},{"introduced":"8-update172"},{"last_affected":"8-update172"},{"introduced":"8-update172"},{"last_affected":"8-update172"},{"introduced":"8-update172"},{"last_affected":"8-update172"},{"introduced":"8-update181"},{"last_affected":"8-update181"},{"introduced":"8-update181"},{"last_affected":"8-update181"},{"introduced":"8-update181"},{"last_affected":"8-update181"},{"introduced":"8-update191"},{"last_affected":"8-update191"},{"introduced":"8-update191"},{"last_affected":"8-update191"},{"introduced":"8-update191"},{"last_affected":"8-update191"},{"introduced":"8-update192"},{"last_affected":"8-update192"},{"introduced":"8-update192"},{"last_affected":"8-update192"},{"introduced":"8-update192"},{"last_affected":"8-update192"},{"introduced":"8-update201"},{"last_affected":"8-update201"},{"introduced":"8-update201"},{"last_affected":"8-update201"},{"introduced":"8-update201"},{"last_affected":"8-update201"},{"introduced":"8-update202"},{"last_affected":"8-update202"},{"introduced":"8-update202"},{"last_affected":"8-update202"},{"introduced":"8-update202"},{"last_affected":"8-update202"},{"introduced":"8-update211"},{"last_affected":"8-update211"},{"introduced":"8-update211"},{"last_affected":"8-update211"},{"introduced":"8-update211"},{"last_affected":"8-update211"},{"introduced":"8-update212"},{"last_affected":"8-update212"},{"introduced":"8-update212"},{"last_affected":"8-update212"},{"introduced":"8-update212"},{"last_affected":"8-update212"},{"introduced":"8-update221"},{"last_affected":"8-update221"},{"introduced":"8-update221"},{"last_affected":"8-update221"},{"introduced":"8-update221"},{"last_affected":"8-update221"},{"introduced":"8-update222"},{"last_affected":"8-update222"},{"introduced":"8-update222"},{"last_affected":"8-update222"},{"introduced":"8-update222"},{"last_affected":"8-update222"},{"introduced":"8-update231"},{"last_affected":"8-update231"},{"introduced":"8-update231"},{"last_affected":"8-update231"},{"introduced":"8-update231"},{"last_affected":"8-update231"},{"introduced":"8-update232"},{"last_affected":"8-update232"},{"introduced":"8-update232"},{"last_affected":"8-update232"},{"introduced":"8-update232"},{"last_affected":"8-update232"},{"introduced":"8-update241"},{"last_affected":"8-update241"},{"introduced":"8-update241"},{"last_affected":"8-update241"},{"introduced":"8-update241"},{"last_affected":"8-update241"},{"introduced":"8-update242"},{"last_affected":"8-update242"},{"introduced":"8-update242"},{"last_affected":"8-update242"},{"introduced":"8-update242"},{"last_affected":"8-update242"},{"introduced":"8-update252"},{"last_affected":"8-update252"},{"introduced":"8-update252"},{"last_affected":"8-update252"},{"introduced":"8-update252"},{"last_affected":"8-update252"},{"introduced":"8-update262"},{"last_affected":"8-update262"},{"introduced":"8-update262"},{"last_affected":"8-update262"},{"introduced":"8-update262"},{"last_affected":"8-update262"},{"introduced":"8-update271"},{"last_affected":"8-update271"},{"introduced":"8-update271"},{"last_affected":"8-update271"},{"introduced":"8-update271"},{"last_affected":"8-update271"},{"introduced":"8-update281"},{"last_affected":"8-update281"},{"introduced":"8-update281"},{"last_affected":"8-update281"},{"introduced":"8-update281"},{"last_affected":"8-update281"},{"introduced":"8-update282"},{"last_affected":"8-update282"},{"introduced":"8-update282"},{"last_affected":"8-update282"},{"introduced":"8-update282"},{"last_affected":"8-update282"},{"introduced":"8-update291"},{"last_affected":"8-update291"},{"introduced":"8-update291"},{"last_affected":"8-update291"},{"introduced":"8-update291"},{"last_affected":"8-update291"},{"introduced":"8-update292"},{"last_affected":"8-update292"},{"introduced":"8-update292"},{"last_affected":"8-update292"},{"introduced":"8-update292"},{"last_affected":"8-update292"},{"introduced":"11.0.1"},{"last_affected":"11.0.1"},{"introduced":"11.0.1"},{"last_affected":"11.0.1"},{"introduced":"11.0.1"},{"last_affected":"11.0.1"},{"introduced":"11.0.2"},{"last_affected":"11.0.2"},{"introduced":"11.0.2"},{"last_affected":"11.0.2"},{"introduced":"11.0.2"},{"last_affected":"11.0.2"},{"introduced":"11.0.3"},{"last_affected":"11.0.3"},{"introduced":"11.0.3"},{"last_affected":"11.0.3"},{"introduced":"11.0.3"},{"last_affected":"11.0.3"},{"introduced":"11.0.4"},{"last_affected":"11.0.4"},{"introduced":"11.0.4"},{"last_affected":"11.0.4"},{"introduced":"11.0.4"},{"last_affected":"11.0.4"},{"introduced":"11.0.5"},{"last_affected":"11.0.5"},{"introduced":"11.0.5"},{"last_affected":"11.0.5"},{"introduced":"11.0.5"},{"last_affected":"11.0.5"},{"introduced":"11.0.6"},{"last_affected":"11.0.6"},{"introduced":"11.0.6"},{"last_affected":"11.0.6"},{"introduced":"11.0.6"},{"last_affected":"11.0.6"},{"introduced":"11.0.7"},{"last_affected":"11.0.7"},{"introduced":"11.0.7"},{"last_affected":"11.0.7"},{"introduced":"11.0.7"},{"last_affected":"11.0.7"},{"introduced":"11.0.8"},{"last_affected":"11.0.8"},{"introduced":"11.0.8"},{"last_affected":"11.0.8"},{"introduced":"11.0.8"},{"last_affected":"11.0.8"},{"introduced":"11.0.9"},{"last_affected":"11.0.9"},{"introduced":"11.0.9"},{"last_affected":"11.0.9"},{"introduced":"11.0.9"},{"last_affected":"11.0.9"},{"introduced":"11.0.10"},{"last_affected":"11.0.10"},{"introduced":"11.0.10"},{"last_affected":"11.0.10"},{"introduced":"11.0.10"},{"last_affected":"11.0.10"},{"introduced":"11.0.11"},{"last_affected":"11.0.11"},{"introduced":"11.0.11"},{"last_affected":"11.0.11"},{"introduced":"11.0.11"},{"last_affected":"11.0.11"},{"introduced":"13.0.1"},{"last_affected":"13.0.1"},{"introduced":"13.0.1"},{"last_affected":"13.0.1"},{"introduced":"13.0.1"},{"last_affected":"13.0.1"},{"introduced":"13.0.2"},{"last_affected":"13.0.2"},{"introduced":"13.0.2"},{"last_affected":"13.0.2"},{"introduced":"13.0.2"},{"last_affected":"13.0.2"},{"introduced":"13.0.3"},{"last_affected":"13.0.3"},{"introduced":"13.0.3"},{"last_affected":"13.0.3"},{"introduced":"13.0.3"},{"last_affected":"13.0.3"},{"introduced":"13.0.4"},{"last_affected":"13.0.4"},{"introduced":"13.0.4"},{"last_affected":"13.0.4"},{"introduced":"13.0.4"},{"last_affected":"13.0.4"},{"introduced":"13.0.5"},{"last_affected":"13.0.5"},{"introduced":"13.0.5"},{"last_affected":"13.0.5"},{"introduced":"13.0.5"},{"last_affected":"13.0.5"},{"introduced":"13.0.6"},{"last_affected":"13.0.6"},{"introduced":"13.0.6"},{"last_affected":"13.0.6"},{"introduced":"13.0.6"},{"last_affected":"13.0.6"},{"introduced":"13.0.7"},{"last_affected":"13.0.7"},{"introduced":"13.0.7"},{"last_affected":"13.0.7"},{"introduced":"13.0.7"},{"last_affected":"13.0.7"},{"introduced":"16.0.1"},{"last_affected":"16.0.1"},{"introduced":"16.0.1"},{"last_affected":"16.0.1"},{"introduced":"16.0.1"},{"last_affected":"16.0.1"}],"source":"CPE_STRING","vendor_product":"oracle:openjdk"}]},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}