[CVE-2022-21449] Oracle Java unauthorized access

Security Issue: On April 19, 2022, a security vulnerability was was identified in Java that could lead to unauthorized access to Java components.

Affected packages:

• Oracle Java Oracle Java SE: 17.0.2, 18 and Oracle GraalVM Enterprise Edition: 21.3.1 and 22.0.0.2

CVE: CVE-2022-21449

04/27/2022

According to current information (as of 04/27/2022), no DRACOON product is affected. Specifically, we confirm that neither our DRACOON Cloud nor our on-premises variants DRACOON Server nor DRACOON LTS are affected: The deployed Java versions are not affected by the security vulnerability.

According to published information, only Java versions from version 15 on are affected.

No action is required.