CVE-2021-2161

OpenJDK: Incorrect handling of partially quoted arguments in ProcessBuilder on Windows (Libraries, 8250568)

Severity Score

5.9

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track

*SSVC

Descriptions

Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. It can also be exploited by supplying untrusted data to APIs in the specified Component. CVSS 3.1 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).

Una vulnerabilidad en el producto Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition de Oracle Java SE (componente: Libraries). Las versiones compatibles que están afectadas son Java SE: 7u291, 8u281, 11.0.10, 16; Java SE integrado: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 y 21.0.0.2. La vulnerabilidad difícil de explotar permite a un atacante no autenticado con acceso a la red por medio de múltiples protocolos comprometer a Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o todos los datos accesibles de Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Nota: Esta vulnerabilidad se aplica a las implementaciones de Java que cargan y ejecutan código que no es confiable (p. Ej., código que proviene de Internet) y confía en el sandbox de Java para la seguridad. También puede ser explotado proporcionando datos no confiables a las API en el Componente especificado. CVSS 3.1 Puntuación Base 5.9 (Impactos en la Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)

*Credits: N/A

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:Track

Exploitation

None

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2020-12-09 CVE Reserved
2021-04-22 CVE Published
2024-06-23 EPSS Updated
2024-09-26 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CAPEC

References (15)

URL	Tag	Source
https://docs.azul.com/core/zulu-openjdk/release-notes/april-2021.html#fixed-common-vulnerabilities-and-exposures	Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10366	Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/04/msg00021.html	Mailing List
https://security.netapp.com/advisory/ntap-20210513-0001	Third Party Advisory

URL	Date	SRC

URL	Date	SRC
https://www.oracle.com/security-alerts/cpuapr2021.html	2023-11-07

URL	Date	SRC
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5ACX4JEVYH6H4PSMGMYWTGABPOFPH3TS	2023-11-07
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CFXOKM2233JVGYDOWW77BN54X3GZTIBK	2023-11-07
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CG7EWXSO6JUCVHP7R3SOZQ7WPNBOISJH	2023-11-07
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAULPCQFLAMBJIS27YLNNX6IHRFJMVP4	2023-11-07
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MVDY4T5XMSYDQT6RRKPMRCV4MVGS7KXF	2023-11-07
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UD3JEP4HPLK7MNZHVUMKIJPBP74M3A2V	2023-11-07
https://security.gentoo.org/glsa/202209-05	2023-11-07
https://www.debian.org/security/2021/dsa-4899	2023-11-07
https://access.redhat.com/security/cve/CVE-2021-2161	2021-04-28
https://bugzilla.redhat.com/show_bug.cgi?id=1951231	2021-04-28

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Oracle Search vendor "Oracle"		Jdk Search vendor "Oracle" for product "Jdk"				1.7.0 Search vendor "Oracle" for product "Jdk" and version "1.7.0"		update291		Affected
Oracle Search vendor "Oracle"		Jdk Search vendor "Oracle" for product "Jdk"				1.8.0 Search vendor "Oracle" for product "Jdk" and version "1.8.0"		update281		Affected
Oracle Search vendor "Oracle"		Jdk Search vendor "Oracle" for product "Jdk"				11.0.10 Search vendor "Oracle" for product "Jdk" and version "11.0.10"		-		Affected
Oracle Search vendor "Oracle"		Jdk Search vendor "Oracle" for product "Jdk"				16.0.0 Search vendor "Oracle" for product "Jdk" and version "16.0.0"		-		Affected
Oracle Search vendor "Oracle"		Jre Search vendor "Oracle" for product "Jre"				1.8.0 Search vendor "Oracle" for product "Jre" and version "1.8.0"		update281		Affected
Debian Search vendor "Debian"		Debian Linux Search vendor "Debian" for product "Debian Linux"				9.0 Search vendor "Debian" for product "Debian Linux" and version "9.0"		-		Affected
Debian Search vendor "Debian"		Debian Linux Search vendor "Debian" for product "Debian Linux"				10.0 Search vendor "Debian" for product "Debian Linux" and version "10.0"		-		Affected
Fedoraproject Search vendor "Fedoraproject"		Fedora Search vendor "Fedoraproject" for product "Fedora"				32 Search vendor "Fedoraproject" for product "Fedora" and version "32"		-		Affected
Fedoraproject Search vendor "Fedoraproject"		Fedora Search vendor "Fedoraproject" for product "Fedora"				33 Search vendor "Fedoraproject" for product "Fedora" and version "33"		-		Affected
Fedoraproject Search vendor "Fedoraproject"		Fedora Search vendor "Fedoraproject" for product "Fedora"				34 Search vendor "Fedoraproject" for product "Fedora" and version "34"		-		Affected
Oracle Search vendor "Oracle"		Graalvm Search vendor "Oracle" for product "Graalvm"				19.3.5 Search vendor "Oracle" for product "Graalvm" and version "19.3.5"		enterprise		Affected
Oracle Search vendor "Oracle"		Graalvm Search vendor "Oracle" for product "Graalvm"				20.3.1.2 Search vendor "Oracle" for product "Graalvm" and version "20.3.1.2"		enterprise		Affected
Oracle Search vendor "Oracle"		Graalvm Search vendor "Oracle" for product "Graalvm"				21.0.0.2 Search vendor "Oracle" for product "Graalvm" and version "21.0.0.2"		enterprise		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				>= 11 <= 11.0.10 Search vendor "Oracle" for product "Openjdk" and version " >= 11 <= 11.0.10"		-		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				>= 13 <= 13.0.6 Search vendor "Oracle" for product "Openjdk" and version " >= 13 <= 13.0.6"		-		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				>= 15 <= 15.0.2 Search vendor "Oracle" for product "Openjdk" and version " >= 15 <= 15.0.2"		-		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		-		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update1		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update10		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update101		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update11		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update111		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update121		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update13		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update131		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update141		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update15		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update151		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update161		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update17		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update171		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update181		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update191		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update2		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update201		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update21		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update211		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update221		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update231		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update241		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update25		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update251		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update261		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update271		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update281		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update291		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update3		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update4		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update40		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update45		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update5		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update51		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update55		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update6		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update60		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update65		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update67		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update7		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update72		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update76		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update80		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update85		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update9		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update91		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update95		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update97		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				7 Search vendor "Oracle" for product "Openjdk" and version "7"		update99		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		-		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		milestone1		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		milestone2		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		milestone3		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		milestone4		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		milestone5		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		milestone6		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		milestone7		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		milestone8		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		milestone9		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update101		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update102		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update11		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update111		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update112		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update121		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update131		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update141		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update151		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update152		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update161		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update162		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update171		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update172		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update181		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update191		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update192		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update20		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update201		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update202		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update211		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update212		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update221		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update222		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update231		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update232		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update241		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update242		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update25		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update252		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update262		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update271		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update281		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update282		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update31		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update40		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update45		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update5		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update51		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update60		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update65		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update66		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update71		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update72		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update73		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update74		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update77		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update91		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				8 Search vendor "Oracle" for product "Openjdk" and version "8"		update92		Affected
Oracle Search vendor "Oracle"		Openjdk Search vendor "Oracle" for product "Openjdk"				16 Search vendor "Oracle" for product "Openjdk" and version "16"		-		Affected
Netapp Search vendor "Netapp"		Active Iq Unified Manager Search vendor "Netapp" for product "Active Iq Unified Manager"				-		vmware_vsphere		Affected
Netapp Search vendor "Netapp"		Active Iq Unified Manager Search vendor "Netapp" for product "Active Iq Unified Manager"				-		windows		Affected
Netapp Search vendor "Netapp"		Hci Management Node Search vendor "Netapp" for product "Hci Management Node"				-		-		Affected
Netapp Search vendor "Netapp"		Solidfire Search vendor "Netapp" for product "Solidfire"				-		-		Affected
Netapp Search vendor "Netapp"		Hci Compute Node Search vendor "Netapp" for product "Hci Compute Node"				-		-		Affected
Netapp Search vendor "Netapp"		Hci Storage Node Search vendor "Netapp" for product "Hci Storage Node"				-		-		Affected
Mcafee Search vendor "Mcafee"		Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator"				< 5.10.0 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version " < 5.10.0"		-		Affected
Mcafee Search vendor "Mcafee"		Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator"				5.10.0 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "5.10.0"		-		Affected
Mcafee Search vendor "Mcafee"		Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator"				5.10.0 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "5.10.0"		update_1		Affected
Mcafee Search vendor "Mcafee"		Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator"				5.10.0 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "5.10.0"		update_10		Affected
Mcafee Search vendor "Mcafee"		Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator"				5.10.0 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "5.10.0"		update_2		Affected
Mcafee Search vendor "Mcafee"		Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator"				5.10.0 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "5.10.0"		update_3		Affected
Mcafee Search vendor "Mcafee"		Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator"				5.10.0 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "5.10.0"		update_4		Affected
Mcafee Search vendor "Mcafee"		Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator"				5.10.0 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "5.10.0"		update_5		Affected
Mcafee Search vendor "Mcafee"		Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator"				5.10.0 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "5.10.0"		update_6		Affected
Mcafee Search vendor "Mcafee"		Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator"				5.10.0 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "5.10.0"		update_7		Affected
Mcafee Search vendor "Mcafee"		Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator"				5.10.0 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "5.10.0"		update_8		Affected
Mcafee Search vendor "Mcafee"		Epolicy Orchestrator Search vendor "Mcafee" for product "Epolicy Orchestrator"				5.10.0 Search vendor "Mcafee" for product "Epolicy Orchestrator" and version "5.10.0"		update_9		Affected