CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–2 of 2 advisories (Page 1/1)

CVE-2022-214459.8/CRITICALEPSS 62.5%CISA KEV

2022-04-19

Oracle ADF Faces Remote Code Execution (RCE) and System Takeover Vulnerability (CVE-2022-21445) Analysis & Mitigation Guide

[Affected Scope] Oracle Fusion Middleware - Oracle Application Development Framework (ADF) versions 12.2.1.3.0 and 12.2.1.4.0

[Impact] Unauthenticated remote attackers can execute arbitrary code and completely compromise the host system via HTTP network access

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) immediately or restrict external access to vulnerable ADF endpoints

CVE-2012-17109.8/CRITICALEPSS 7.8%CISA KEV

2012-05-03

[Affected Scope] Oracle WebCenter Forms Recognition (Designer component) in Oracle Fusion Middleware 10.1.3.5

[Impact] Unauthenticated remote attackers can compromise confidentiality, integrity, and availability, leading to complete system takeover

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) immediately and restrict network access to the affected components