VulnSocial

CVE-2022-21476Patch(azul / active_iq_unified_manager)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch azul active_iq_unified_manager systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

azul CVEsBack to dashboard
1.5/ 10 priority

Sources & remediation

Patch / fix
Vendor / third-party advisories
Weakness type (CWE)
CWE-284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • active_iq_unified_manager
  • bootstrap_os
  • cloud_insights_acquisition_unit
  • cloud_secure_agent

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
azuldebiannetapporacle
Products
active_iq_unified_managerbootstrap_oscloud_insights_acquisition_unitcloud_secure_agentdebian_linuxe-series_santricity_os_controllere-series_santricity_storage_managere-series_santricity_web_serviceselement_softwaregraalvm

20 versions affected across 18 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-01: 1Patch / Workaround · 2026-06-01: 1Technical Details · 2026-06-01: 106-01
Signal classification1 categories
Patch
1100.0%
Full discourse1 post
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH: CVE-2022-21476 (CVSS 7.5) affects Oracle Java SE & GraalVM. Unauthenticated attackers can gain unauthorized access to critical data via network protocols. Patch immediately if running affected versions. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/vf5NDqzxf8

    Post summary

    The tweet announces a high‑severity vulnerability (CVE‑2022‑21476) affecting Oracle Java SE and GraalVM, and urges users to apply patches immediately to mitigate unauthorized data access.

    0000045
    35 followersView on X
CPE platform detail152 entries

152 of 152 entries

PartVendorProductVersionTarget SWTarget HW
Appazulzulu11.54--
Appazulzulu13.46--
Appazulzulu15.38--
Appazulzulu17.32--
Appazulzulu7.52--
Appazulzulu8.60--
OSdebiandebian_linux10.0--
OSdebiandebian_linux11.0--
OSdebiandebian_linux9.0--
Appnetappactive_iq_unified_manager-vmware_vsphere-
Appnetappactive_iq_unified_manager-windows-
OSnetappbootstrap_os---
Appnetappcloud_insights_acquisition_unit---
Appnetappcloud_secure_agent---
Appnetappe-series_santricity_os_controller---
Appnetappe-series_santricity_storage_manager---
Appnetappe-series_santricity_web_services-web_services_proxy-
Appnetappelement_software---
HWnetapphci_compute_node---
Appnetapphci_management_node---
Appnetapponcommand_insight---
Appnetappsantricity_unified_manager---
Appnetappsolidfire---
Apporaclegraalvm20.3.5--
Apporaclegraalvm21.3.1--
Apporaclegraalvm22.0.0.2--
Apporaclejdk11.0.14--
Apporaclejdk17.0.2--
Apporaclejdk18--
Apporaclejdk7.0--
Apporaclejdk8.0--
Apporacleopenjdk---
Apporacleopenjdk18--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk7--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--
Apporacleopenjdk8--

Explore more

Back to dashboardazul CVEsdebian CVEsnetapp CVEsactive_iq_unified_manager vulnerabilities