{"schemaVersion":3,"id":"CVE-2021-2432","aliases":["CGA-2wq6-53pq-cmvh","CGA-36rq-xvmc-5qwq","CGA-3j7v-9xvm-x7g9","CGA-4h8v-qwfv-mfhp","CGA-4rmx-7mqg-cwv3","CGA-6xpm-5pq3-c7r7","CGA-7f8h-c759-8q4g","CGA-7jc5-36m9-hgxp","CGA-8m9p-3f42-jwfx","CGA-97v7-jrxm-rgmc","CGA-9hgj-4fv3-mqch","CGA-c7pm-mx3q-wm4r","CGA-gh4h-gf85-6q7x","CGA-h7x7-4833-r73c","CGA-hgw3-jwmw-p8ww","CGA-jvq5-rqj4-2hwg","CGA-m44g-47j7-3g2m","CGA-m6p9-5chv-mp2x","CGA-mqjm-rc33-4xhr","CGA-mr2g-m2cq-vm67","CGA-p3p2-rvcj-489g","CGA-p53j-64j7-rxph","CGA-qx55-83x8-jp26","CGA-v3gm-564w-468h","CGA-v6r8-2vq9-6v85","CGA-v7v2-p3x3-mvj7","CGA-vgc2-vg4q-p89m","CGA-w4m8-q556-vg4v","CGA-w8j8-pm88-wfjq","CGA-x3r9-vw95-44jh","CGA-x984-82w5-x8rh","CGA-xp34-5gq9-rqwj"],"status":"published","duplicateOf":null,"title":null,"description":"Vulnerability in the Java SE product of Oracle Java SE (component: JNDI). The supported version that is affected is Java SE: 7u301. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).","dates":{"published":"2021-07-20T22:44:41.000Z","modified":"2024-09-25T19:44:47.488Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.3,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":5.6,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.03701,"percentile":0.89608,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.03701},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03701,"percentile":0.89608}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03701,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.03701,"percentile":0.89608}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"chainguard","product":"openjdk-11-openj9-default-policy","name":"openjdk-11-openj9-default-policy","label":"openjdk-11-openj9-default-policy","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-11-openj9-default-policy","purlType":"apk","versions":[{"text":"< 0.53.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.53.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-17-openj9-default-policy","name":"openjdk-17-openj9-default-policy","label":"openjdk-17-openj9-default-policy","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-17-openj9-default-policy","purlType":"apk","versions":[{"text":"< 0.53.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.53.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-21-openj9-default-policy","name":"openjdk-21-openj9-default-policy","label":"openjdk-21-openj9-default-policy","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-21-openj9-default-policy","purlType":"apk","versions":[{"text":"< 0.53.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.53.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-25-openj9","name":"openjdk-25-openj9","label":"openjdk-25-openj9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-25-openj9","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-25-openj9-dbg","name":"openjdk-25-openj9-dbg","label":"openjdk-25-openj9-dbg","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-25-openj9-dbg","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-25-openj9-default-jdk","name":"openjdk-25-openj9-default-jdk","label":"openjdk-25-openj9-default-jdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-25-openj9-default-jdk","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-25-openj9-default-jvm","name":"openjdk-25-openj9-default-jvm","label":"openjdk-25-openj9-default-jvm","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-25-openj9-default-jvm","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-25-openj9-jmods","name":"openjdk-25-openj9-jmods","label":"openjdk-25-openj9-jmods","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-25-openj9-jmods","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-25-openj9-jre","name":"openjdk-25-openj9-jre","label":"openjdk-25-openj9-jre","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-25-openj9-jre","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-26-openj9","name":"openjdk-26-openj9","label":"openjdk-26-openj9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-26-openj9","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-26-openj9-dbg","name":"openjdk-26-openj9-dbg","label":"openjdk-26-openj9-dbg","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-26-openj9-dbg","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-26-openj9-default-jdk","name":"openjdk-26-openj9-default-jdk","label":"openjdk-26-openj9-default-jdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-26-openj9-default-jdk","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-26-openj9-default-jvm","name":"openjdk-26-openj9-default-jvm","label":"openjdk-26-openj9-default-jvm","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-26-openj9-default-jvm","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-26-openj9-jmods","name":"openjdk-26-openj9-jmods","label":"openjdk-26-openj9-jmods","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-26-openj9-jmods","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-26-openj9-jre","name":"openjdk-26-openj9-jre","label":"openjdk-26-openj9-jre","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-26-openj9-jre","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-8-openj9-dbg","name":"openjdk-8-openj9-dbg","label":"openjdk-8-openj9-dbg","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-8-openj9-dbg","purlType":"apk","versions":[{"text":"< 0.53.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.53.0-r1","eol":null,"hubHref":null},{"vendor":"mcafee","product":"epolicy_orchestrator","name":"epolicy orchestrator","label":"epolicy_orchestrator","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.10.0","noFixRecorded":false,"fixedIn":null},{"text":"5.10.0","noFixRecorded":false,"fixedIn":null},{"text":"5.10.0:update_1","noFixRecorded":false,"fixedIn":null},{"text":"5.10.0:update_10","noFixRecorded":false,"fixedIn":null},{"text":"5.10.0:update_2","noFixRecorded":false,"fixedIn":null},{"text":"5.10.0:update_3","noFixRecorded":false,"fixedIn":null},{"text":"5.10.0:update_4","noFixRecorded":false,"fixedIn":null},{"text":"5.10.0:update_5","noFixRecorded":false,"fixedIn":null},{"text":"5.10.0:update_6","noFixRecorded":false,"fixedIn":null},{"text":"5.10.0:update_7","noFixRecorded":false,"fixedIn":null},{"text":"5.10.0:update_8","noFixRecorded":false,"fixedIn":null},{"text":"5.10.0:update_9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.10.0 | 5.10.0 | 5.10.0:update_1 | 5.10.0:update_10 | 5.10.0:update_2 | 5.10.0:update_3 | 5.10.0:update_4 | 5.10.0:update_5 | 5.10.0:update_6 | 5.10.0:update_7 | 5.10.0:update_8 | 5.10.0:update_9","eol":null,"hubHref":"/vendor/mcafee/epolicy_orchestrator"},{"vendor":"oracle corporation","product":"java se jdk and jre","name":"Java SE JDK and JRE","label":"java se jdk and jre","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"Java SE:7u301","noFixRecorded":false,"fixedIn":null}],"versionsText":"Java SE:7u301","eol":null,"hubHref":"/vendor/oracle_corporation/java_se_jdk_and_jre"},{"vendor":"oracle","product":"jdk","name":"jdk","label":"jdk","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.7.0:update301","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.7.0:update301","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"oracle-jdk","label":"Oracle JDK","category":"lang"}},"hubHref":"/vendor/oracle/jdk"}],"affectedCount":19,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.oracle.com/security-alerts/cpujul2021.html","label":"www.oracle.com/security-alerts/cpujul2021.html","hostname":"www.oracle.com","tags":["X Refsource MISC","Advisory","Vendor Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","label":"www.oracle.com/security-alerts/cpuoct2021.html","hostname":"www.oracle.com","tags":["X Refsource MISC","FIX","Patch","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210723-0002/","label":"security.netapp.com/advisory/ntap-20210723-0002/","hostname":"security.netapp.com","tags":["X Refsource CONFIRM","Advisory","Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10366","label":"kc.mcafee.com/corporate/index?page=content&id=SB10366","hostname":"kc.mcafee.com","tags":["X Refsource CONFIRM","Advisory","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202209-05","label":"security.gentoo.org/glsa/202209-05","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Advisory","Third Party Advisory"]}],"lineage":{"upstream":[],"downstream":["RHSA-2021:3293","SUSE-SU-2021:3007-1","SUSE-SU-2022:0166-1","SUSE-SU-2022:14875-1","SUSE-SU-2022:14876-1"],"duplicates":[],"related":["CGA-522F-PR8V-3G9W","CGA-CC5X-2X6X-4VJ5","CGA-FXJW-943R-M24G","CGA-PJJJ-77RV-QMP4","CGA-Q5QP-M2R4-767W","SUSE-SU-2021:3007-1","SUSE-SU-2022:0166-1","SUSE-SU-2022:14875-1","SUSE-SU-2022:14876-1"]},"timeline":[{"kind":"published","date":"2021-07-20T22:44:41.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-09-25T19:44:47.488Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":18,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T23:06:23.881Z","stale":false,"partial":false}}