CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Oracle ADF Faces Remote Code Execution (RCE) and System Takeover Vulnerability (CVE-2022-21445) Analysis & Mitigation Guide
[Affected Scope] Oracle Fusion Middleware - Oracle Application Development Framework (ADF) versions 12.2.1.3.0 and 12.2.1.4.0
[Impact] Unauthenticated remote attackers can execute arbitrary code and completely compromise the host system via HTTP network access
[Mitigation] Apply the official Oracle Critical Patch Update (CPU) immediately or restrict external access to vulnerable ADF endpoints
Oracle Business Intelligence Enterprise Edition (OBIEE) Directory Traversal & Local File Inclusion (LFI) Vulnerability (CVE-2020-14864) Analysis and Mitigation Guide
[Affected Scope] Oracle Business Intelligence Enterprise Edition (OBIEE) versions 5.5.0.0.0, 12.2.1.3.0, and 12.2.1.4.0
[Impact] Unauthenticated remote attackers can access sensitive system files and configuration data via crafted HTTP requests
[Mitigation] Apply the official Oracle Critical Patch Update (CPU) or implement path traversal blocking rules on Web Application Firewalls (WAF)
Oracle Fusion Middleware BI Publisher Security Bypass and Data Modification/Disclosure Vulnerability (CVE-2019-2616) Analysis and Mitigation Guide
[Affected Scope] Oracle Fusion Middleware BI Publisher (formerly XML Publisher) versions 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0
[Impact] Unauthenticated remote attackers can read, update, insert, or delete sensitive data via HTTP, potentially impacting connected downstream systems
[Mitigation] Apply the official Oracle Critical Patch Update (CPU) immediately and restrict access to BI Publisher endpoints using a WAF or reverse proxy
Oracle WebCenter Forms Recognition Remote Code Execution Vulnerability (CVE-2012-1710) Security Advisory
[Affected Scope] Oracle WebCenter Forms Recognition (Designer component) in Oracle Fusion Middleware 10.1.3.5
[Impact] Unauthenticated remote attackers can compromise confidentiality, integrity, and availability, leading to complete system takeover
[Mitigation] Apply the official Oracle Critical Patch Update (CPU) immediately and restrict network access to the affected components