openjdk-11-demo: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Editionproduct of Oracle Java SE (component: Libraries)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Editionproduct of Oracle Java SE (component: Libraries). Supported versions thatare affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; OracleGraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitablevulnerability allows unauthenticated attacker with network access viamultiple protocols to compromise Oracle Java SE, Oracle GraalVM EnterpriseEdition. Successful attacks of this vulnerability can result inunauthorized access to critical data or complete access to all Oracle JavaSE, Oracle GraalVM Enterprise Edition accessible data. Note: Thisvulnerability applies to Java deployments, typically in clients runningsandboxed Java Web Start applications or sandboxed Java applets, that loadand run untrusted code (e.g., code that comes from the internet) and relyon the Java sandbox for security. This vulnerability can also be exploitedby using APIs in the specified Component, e.g., through a web service whichsupplies data to the APIs. CVSS 3.1 Base Score 7.5 (Confidentialityimpacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Where it's fixed