--- title: Security Announcement Regarding CVE-2022-21449 description: If you are running Java 15+, we recommend testing and deploying the latest patches from your JDK provider as soon as possible. There is a vulnerability in Java 15+ that could impact SkySpark. image: https://www.cimpro.com/hubfs/cybersecurity-2.png --- [![CimPro](https://www.cimpro.com/hs-fs/hubfs/Cimpro%20Logo_2014-1400px.jpg?width=1400&height=264&name=Cimpro%20Logo_2014-1400px.jpg "CimPro")](https://www.cimpro.com/?hsLang=nl-nl) [Zoeken](https://www.cimpro.com/hs-search-results?hsLang=nl-nl) [Zoeken](https://www.cimpro.com/hs-search-results?hsLang=nl-nl) ![](https://www.cimpro.com/hubfs/cybersecurity-2.png) ###### [SkySpark](https://www.cimpro.com/blog/tag/skyspark) • 4 min leestijd # Security Announcement Regarding CVE-2022-21449 ![](https://www.cimpro.com/hubfs/Website/BLOG/BLOG%20Author/Miguel_Mauser.png) [Miguel Mauser](https://www.cimpro.com/blog/author/miguel-mauser) 26 april 2022 If you are running Java 15+, we recommend testing and deploying the latest patches from your JDK provider as soon as possible. There is a vulnerability in Java 15+ that could impact SkySpark. Oracle's recent [April 2022 Oracle Critical Patch Update Advisory](https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.oracle.com%2Fsecurity-alerts%2Fcpuapr2022.html&data=05%7C01%7C%7Ccfc41758c7bc4ab7480d08da2763b37a%7C1f092ab0a455419a909f251b80edfd96%7C0%7C0%7C637865606426419044%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=u%2F4KJsjWung9GzfazotFIetlB1p79KmOTlxhjhGrJL8%3D&reserved=0) includes a fix for vulnerability [CVE-2022-21449](https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fnvd.nist.gov%2Fvuln%2Fdetail%2FCVE-2022-21449&data=05%7C01%7C%7Ccfc41758c7bc4ab7480d08da2763b37a%7C1f092ab0a455419a909f251b80edfd96%7C0%7C0%7C637865606426419044%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=30iJ%2FZTcFCLZut3zMgeuihf9Wl9Ep6ORg9BtGpyrMqw%3D&reserved=0) that affected Java 15+. The company that discovered and reported the vulnerability published an [article](https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fneilmadden.blog%2F2022%2F04%2F19%2Fpsychic-signatures-in-java%2F&data=05%7C01%7C%7Ccfc41758c7bc4ab7480d08da2763b37a%7C1f092ab0a455419a909f251b80edfd96%7C0%7C0%7C637865606426419044%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=pNotyiJuV2mUOaa3iy22LW4IIY6KisFAvZ2MyB81y%2FQ%3D&reserved=0) with additional explanation. It appears that the major OpenJDK providers have rolled out the fix as well, so if you are running Java 15+ we encourage you to check the release notes of your preferred Java distribution and confirm CVE-2022-21449 is mentioned in the list of fixes. This is also a good opportunity to remind the community that it is always recommended to run the latest Java updates as outlined in our [IT Operations and Maintenance App Note](https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fskyfoundry.com%2Fdoc%2FdocAppNotes%2FITOperationsAndMaintenance%23cyberSecurity&data=05%7C01%7C%7Ccfc41758c7bc4ab7480d08da2763b37a%7C1f092ab0a455419a909f251b80edfd96%7C0%7C0%7C637865606426419044%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=lUR3t4BvqfozGBs6uxij3PZGys5Zm6%2BPj6XOjQT7CtM%3D&reserved=0). Oracle publishes a schedule for patch updates which you can find more about on the [Oracle Security Alerts page](https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.oracle.com%2Fsecurity-alerts%2F&data=05%7C01%7C%7Ccfc41758c7bc4ab7480d08da2763b37a%7C1f092ab0a455419a909f251b80edfd96%7C0%7C0%7C637865606426419044%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=shXV32XJKML%2F37gCB7woi7yjE%2B2qUqZsBzCjLq%2FBbt8%3D&reserved=0). ![Picture of Miguel Mauser](https://www.cimpro.com/hubfs/Website/BLOG/BLOG%20Author/Miguel_Mauser.png) #### Miguel Mauser Commercieel manager Miguel Mauser heeft zijn sporen verdiend in de snel veranderende wereld van water- en gebouwmanagement en Smart Industry. Zo combineerde hij tijdens zijn lange carrière sales succesvol met automatisering en infra. En deed dat bij gerenommeerde, internationale bedrijven. Dat maakt dat hij niet alleen kennis heeft van systemen, maar ook van processen en hoe deze succesvol in organisaties te integreren. ## Gerelateerde blogs ###### [Opleiding](https://www.cimpro.com/blog/tag/opleiding), [SkySpark](https://www.cimpro.com/blog/tag/skyspark) • 2 min leestijd ## [SkySpark Essential training 9, 10 en 11 juni 2026 Op deze driedaagse training leren cursisten de basisvaardigheden om SkySpark toe te passen en te ...](https://www.cimpro.com/blog/skyspark-essential-training-04-05-2026?hsLang=nl-nl) ![](https://www.cimpro.com/hubfs/Website/BLOG/BLOG%20Author/Miguel_Mauser.png) [Miguel Mauser](https://www.cimpro.com/blog/author/miguel-mauser) 1 oktober 2024 ###### [Opleiding](https://www.cimpro.com/blog/tag/opleiding), [SkySpark](https://www.cimpro.com/blog/tag/skyspark) • 2 min leestijd ## [SkySpark Essential Training 8 t/m 10 oktober 2024 Op deze driedaagse training leren cursisten de basisvaardigheden om SkySpark toe te passen en te ...](https://www.cimpro.com/blog/skyspark_essential-2024-10-08?hsLang=nl-nl) ![](https://www.cimpro.com/hubfs/Website/BLOG/BLOG%20Author/Miguel_Mauser.png) [Miguel Mauser](https://www.cimpro.com/blog/author/miguel-mauser) 1 oktober 2024 ###### [Opleiding](https://www.cimpro.com/blog/tag/opleiding), [SkySpark](https://www.cimpro.com/blog/tag/skyspark), [Training](https://www.cimpro.com/blog/tag/training) • 1 min leestijd ## [SkySpark Advanced Training 10 en 11 september 2024 Deze tweedaagse training is speciaal voor gebruikers, die betrokken zijn bij het ontwikkelen van Axonfuncties ...](https://www.cimpro.com/blog/skyspark_advanced_training-2024-09?hsLang=nl-nl) ![](https://www.cimpro.com/hubfs/Website/BLOG/BLOG%20Author/Miguel_Mauser.png) [Miguel Mauser](https://www.cimpro.com/blog/author/miguel-mauser) 1 oktober 2024 ## Contact informatie - ##### Nederland - De Waal 18J 5684 PH Best - [ +31 88 246 77 00 ](tel:%20%20%20%20%20%20%20%20%20+31%2088%20246%2077%2000) - [ cimpro@cimpro.com ](mailto:%20%20%20%20%20%20%20%20%20cimpro@cimpro.com) - ##### België - Europark Oost 34 9100, Sint-Niklaas - [ +32 3 765 09 53 ](tel:%20%20%20%20%20%20%20%20%20+32%203%20765%2009%2053) - [ cimpro@cimpro.com ](mailto:%20%20%20%20%20%20%20%20%20cimpro@cimpro.com) This website is developed with the support of: ![](https://www.cimpro.com/hubfs/fit.png) [Oplossingen](https://www.cimpro.com/oplossingen) - [Gebouwen](https://www.cimpro.com/oplossingen/gebouwen) - [Industrie](https://www.cimpro.com/oplossingen/industrie) - [Cyber security](https://www.cimpro.com/oplossingen/cyber-security) Kenniscentrum - [Blog](https://www.cimpro.com/blog) - [Knowledgebase](https://www.cimpro.com/kenniscentrum/knowledgebase) - [Opleidingen](https://www.cimpro.com/producten/trainingen) - [Advies](https://www.cimpro.com/kenniscentrum/advies) [Over Cimpro](https://www.cimpro.com/over_cimpro) - [Ons Team](https://www.cimpro.com/over_cimpro/ons-team) - [Partners](https://www.cimpro.com/over_cimpro/partners) - [Vacatures](https://www.cimpro.com/vacatures) - [ PRIVACY POLICY ](https://www.cimpro.com/privacy_verklaring?hsLang=nl-nl) - [ TERMS AND CONDITIONS ](https://www.cimpro.com/contact?hsLang=nl-nl) volg ons