Detections
Analytics

Alpine: openjdk7: security update to 7.301.2.6.26-r0

medium Tenable Cloud Security Plugin ID 405961

Description

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

 - Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java
 SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16;
 Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2. Difficult to
 exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to
 compromise Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Successful attacks of this
 vulnerability can result in unauthorized creation, deletion or modification access to critical data or all
 Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability
 applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and
 rely on the Java sandbox for security. It can also be exploited by supplying untrusted data to APIs in the
 specified Component. (CVE-2021-2161)

 - Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java
 SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16;
 Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2. Difficult to
 exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to
 compromise Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Successful attacks require human
 interaction from a person other than the attacker. Successful attacks of this vulnerability can result in
 unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded,
 Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments
 that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox
 for security. (CVE-2021-2163)

See Also

https://security.alpinelinux.org/vuln/CVE-2021-2161

https://security.alpinelinux.org/vuln/CVE-2021-2163

Plugin Details

Severity: Medium

ID: 405961

Version: Revision 1.31

Type: Local

Published: 10/31/2023

Updated: 7/2/2026

Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.18

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.2

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS Score Source: CVE-2021-2161

CVSS v3

Risk Factor: Medium

Base Score: 5.9

Temporal Score: 5.2

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 4/20/2021

Reference Information

CVE: CVE-2021-2161, CVE-2021-2163