THE INFORMATION IN THIS ARTICLE APPLIES TO:
DISCUSSION
This notice is for informational purposes only and is intended to provide you with the latest update from Globalscape regarding the vulnerabilities in OpenJDK which is part of Java. Globalscape deems the risk posed by this issue to be low or not applicable, but we strive to be transparent with any issues that may arise.
The following list will be updated with any new identified vulnerabilities or customer requests.
|
CVE-2022-
21426
|
Oracle Java SE
Oracle GraalVM Enterprise edition
in JAXP component
|
This vulnerability applies to Java deployments, typically in clients running sandboxed
Java Web Start applications or sandboxed Java applets, that run untrusted code.
DMZ does not have any interface which can execute outside code.
Additionally, DMZ does not have any API endpoints that can be called from outside to exchange data.
|
|
CVE-2022-
21434
|
Oracle Java SE
Oracle GraalVM Enterprise edition
in JAXP component
|
This vulnerability applies to Java deployments, typically in clients running sandboxed
Java Web Start applications or sandboxed Java applets, that run untrusted code.
DMZ does not have any interface which can execute outside code.
Additionally, DMZ does not have any API endpoints that can be called from outside to exchange data.
|
|
CVE-2022-
21443
|
Oracle Java SE
Oracle GraalVM Enterprise edition
in JAXP component
|
This vulnerability applies to Java deployments, typically in clients running sandboxed
Java Web Start applications or sandboxed Java applets, that run untrusted code.
DMZ does not have any interface which can execute outside code.
Additionally, DMZ does not have any API endpoints that can be called from outside to exchange data.
|
|
CVE-2022-
21476
|
Oracle Java SE
Oracle GraalVM Enterprise edition
in JAXP component
|
This vulnerability applies to Java deployments, typically in clients running sandboxed
Java Web Start applications or sandboxed Java applets, that run untrusted code.
DMZ does not have any interface which can execute outside code.
Additionally, DMZ does not have any API endpoints that can be called from outside to exchange data.
|
If you would like more information on the new vulnerabilities in Java, please view the following link:
If you have any further questions or concerns, please do not hesitate to contact Support.