# Oracle Java SE vulnerabilities patched

Published: 2021-10-19 · Severity: elevated
Canonical: https://vorant.io/reports/27bedc24-7a3e-5b63-a3f9-b98849e8a38a/oracle-java-se-vulnerabilities-patched

> Oracle released patches for multiple Java SE vulnerabilities with high attack impact; immediate patching recommended.

The Japanese Information-technology Promotion Agency (IPA) issued a security alert on October 20, 2021, regarding vulnerabilities in Oracle Java SE. Oracle announced that these flaws carry significant impact if exploited and recommended immediate patching. The alert applies to supported Oracle Java SE products and directs users to update to the latest version provided by Oracle.

The alert references CVE-2021-3517 among other CVEs in the October 2021 Oracle Critical Patch Update. IPA emphasizes that organizations should apply patches as soon as possible due to the severity of potential attacks. The alert also notes that Oracle changed its licensing terms as of April 16, 2019, and commercial users should verify their license compliance and engage vendor support as appropriate.

## Mentioned in this report

- Vulnerabilities: CVE-2021-3517

Source reporting: https://www.ipa.go.jp/archive/security/security-alert/2021/20211020-jre.html

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/27bedc24-7a3e-5b63-a3f9-b98849e8a38a/oracle-java-se-vulnerabilities-patched.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup