Lucene search

OracleORACLE:CPUJUL2022

HistoryJul 19, 2022 - 12:00 a.m.

Oracle Critical Patch Update Advisory - July 2022

2022-07-1900:00:00

www.oracle.com

1015

oracle

critical patch update

security patches

vulnerabilities

security advisories

oracle e-business suite

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.975

Percentile

100.0%

JSON

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. These patches address vulnerabilities in Oracle code and in third-party components included in Oracle products. These patches are usually cumulative, but each advisory describes only the security patches added since the previous Critical Patch Update Advisory. Thus, prior Critical Patch Update advisories should be reviewed for information regarding earlier published security patches. Refer to “Critical Patch Updates, Security Alerts and Bulletins” for information about Oracle Security advisories.

Oracle continues to periodically receive reports of attempts to maliciously exploit vulnerabilities for which Oracle has already released security patches. In some instances, it has been reported that attackers have been successful because targeted customers had failed to apply available Oracle patches. Oracle therefore strongly recommends that customers remain on actively-supported versions and apply Critical Patch Update security patches without delay.

This Critical Patch Update contains 349 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at July 2022 Critical Patch Update: Executive Summary and Analysis.

Please note that since the release of the April 2022 Critical Patch Update, Oracle has released a Security Alert for Oracle E-Business SuiteCVE-2022-21500 (May 19, 2022). Customers are strongly advised to apply the July 2022 Critical Patch Update for Oracle E-Business Suite, which includes patches for this Alert as well as additional patches.

Affected configurations

Vulners

Node

oraclebig_data_spatial_and_graphRange≤23.1

oracleessbaseRange≤21.3

oracleglobal_lifecycle_management_opatchRange≤12.2.0.1.30

oraclegoldengateRange≤21c

oraclestream_analyticsRange≤19c

oraclegraph_server_and_clientRange≤22.2.0

oraclerest_data_servicesRange≤22.1.1

oraclespatial_studioRange≤22.1.0

oracletimesten_in-memory_databaseRange≤22.1.1.1.0

oraclecommerce_guided_searchRange≤11.3.2

oraclecommerce_platformRange≤11.3.1

oraclecommerce_platformRange≤11.3.0

oraclecommerce_platformRange≤11.3.2

oraclecommerce_merchandisingRange≤11.3.2

oraclecommunications_instant_messaging_serverRange≤10.0.1.5.0

oraclecommunications_offline_mediation_controllerRange≤12.0.0.4.4

oraclecommunications_offline_mediation_controllerRange≤12.0.0.5.1

oraclecommunications_unified_inventory_managementRange≤7.4.2

oraclecommunications_unified_inventory_managementRange≤7.5.0

oraclecommunications_unified_inventory_managementRange≤7.4.1

oraclecommunications_billing_and_revenue_managementRange≤12.0.0.4.0

oraclecommunications_brm_-_elastic_charging_engineRange≤12.0.0.4.6

oraclecommunications_brm_-_elastic_charging_engineRange≤12.0.0.5.1

oraclecommunications_asapRange≤7.3

oraclecommunications_design_studioRange≤7.4.2

oraclecommunications_cloud_native_core_binding_support_functionRange≤22.1.3

oraclecommunications_cloud_native_core_binding_support_functionRange≤22.2.0

oraclecommunications_cloud_native_core_consoleRange≤22.1.2

oraclecommunications_cloud_native_core_consoleRange≤22.2.0

oraclecommunications_cloud_native_core_network_repository_functionRange≤22.1.2

oraclecommunications_cloud_native_core_network_repository_functionRange≤22.2.0

oraclecommunications_cloud_native_core_security_edge_protection_proxyRange≤22.1.1

oraclecommunications_cloud_native_core_network_exposure_functionRange≤22.1.1

oraclecommunications_cloud_native_core_network_function_cloud_native_environmentRange≤22.1.2

oraclecommunications_cloud_native_core_network_function_cloud_native_environmentRange≤22.1.0

oraclecommunications_cloud_native_core_network_function_cloud_native_environmentRange≤22.2.0

oraclecommunications_cloud_native_core_policyRange≤22.1.3

oraclecommunications_cloud_native_core_policyRange≤22.2.0

oraclecommunications_cloud_native_core_unified_data_repositoryRange≤22.2.0

oracleenterprise_operations_monitorRange≤5.0

oracleenterprise_operations_monitorRange≤4.4

oracleenterprise_operations_monitorRange≤4.3

oraclecommunications_operations_monitorRange≤5.0

oraclecommunications_operations_monitorRange≤4.4

oraclecommunications_operations_monitorRange≤4.3

oraclecommunications_cloud_native_core_network_slice_selection_functionRange≤22.1.1

oraclecommunications_cloud_native_core_service_communication_proxyRange≤22.2.0

oraclecommunications_session_route_managerRange≤8.2.5

oraclecommunications_session_route_managerRange≤8.4.5

oraclecommunications_session_border_controllerRange≤8.4

oraclecommunications_session_border_controllerRange≤9.1

oraclecommunications_session_border_controllerRange≤9.0

oraclecommunications_unified_session_managerRange≤8.2.5

oracleenterprise_communications_brokerRange≤3.3

oracleenterprise_session_border_controllerRange≤8.4

oracleenterprise_session_border_controllerRange≤9.1

oracleenterprise_session_border_controllerRange≤9.0

oraclesd-wan_edgeRange≤9.1

oraclesd-wan_edgeRange≤9.0

oraclecrystal_ballRange≤11.1.2.0.000

oracleprimavera_gatewayRange≤21.12.0

oracleprimavera_gatewayRange≤19.12.0

oracleprimavera_gatewayRange≤18.8.0

oracleprimavera_gatewayRange≤17.12.0

oracleprimavera_gatewayRange≤20.12.0

oracleprimavera_unifierRange≤18.8

oracleprimavera_unifierRange≤19.12

oracleprimavera_unifierRange≤21.12

oracleprimavera_unifierRange≤17.7

oracleprimavera_unifierRange≤20.12

oracleprimavera_p6_enterprise_project_portfolio_managementRange≤18.8.0.0

oracleprimavera_p6_enterprise_project_portfolio_managementRange≤19.12.0.0

oracleprimavera_p6_enterprise_project_portfolio_managementRange≤21.12.0.0

oracleprimavera_p6_enterprise_project_portfolio_managementRange≤20.12.0.0

oracleprimavera_p6_enterprise_project_portfolio_managementRange≤17.12.0.0

oraclee-business_suite_information_discoveryRange≤12.2.3

oracleapplications_frameworkRange≤12.2.9

oracleuser_managementRange≤12.2.4

oracleworkflowRange≤12.2.3

oracleireceivablesRange≤12.2.3

oracleirecruitmentRange≤12.2.3

oracleenterprise_manager_ops_centerRange≤12.4.0.0

oracleenterprise_manager_base_platformRange≤13.4.0.0

oracleenterprise_manager_base_platformRange≤13.5.0.0

oracleapplication_testing_suiteRange≤13.3.0.1

oraclebanking_branchRange≤14.5

oraclebanking_cash_managementRange≤14.5

oraclebanking_corporate_lending_process_managementRange≤14.5

oraclebanking_credit_facilities_process_managementRange≤14.5

oraclebanking_electronic_data_exchange_for_corporatesRange≤14.5

oraclebanking_liquidity_managementRange≤14.2

oraclebanking_liquidity_managementRange≤14.5

oraclebanking_originationRange≤14.5

oraclebanking_supply_chain_financeRange≤14.5

oraclebanking_trade_finance_process_managementRange≤14.5

oraclebanking_virtual_account_managementRange≤14.5

oraclefinancial_services_crime_and_compliance_management_studioRange≤8.0.8.3.0

oraclefinancial_services_crime_and_compliance_management_studioRange≤8.0.8.2.0

oraclefinancial_services_analytical_applications_infrastructureRange≤8.1.1.0

oraclefinancial_services_analytical_applications_infrastructureRange≤8.0.7.0

oraclefinancial_services_analytical_applications_infrastructureRange≤8.1.2.1

oraclefinancial_services_analytical_applications_infrastructureRange≤8.1.2.0

oraclefinancial_services_behavior_detection_platformRange≤8.1.1.0

oraclefinancial_services_behavior_detection_platformRange≤8.0.7.0

oraclefinancial_services_behavior_detection_platformRange≤8.0.8.0

oraclefinancial_services_enterprise_case_managementRange≤8.0.8.1

oraclefinancial_services_enterprise_case_managementRange≤8.0.7.2

oraclefinancial_services_enterprise_case_managementRange≤8.1.1.0

oraclefinancial_services_enterprise_case_managementRange≤8.0.7.1

oraclefinancial_services_enterprise_case_managementRange≤8.0.8.0

oraclefinancial_services_trade-based_anti_money_launderingRange≤8.0.7.0enterprise

oraclefinancial_services_trade-based_anti_money_launderingRange≤8.0.8.0enterprise

oracleflexcube_private_bankingRange≤12.1

oracleflexcube_universal_bankingRange≤12.3

oracleflexcube_universal_bankingRange≤12.1

oracleflexcube_universal_bankingRange≤14.0

oracleflexcube_universal_bankingRange≤14.5

oracleflexcube_universal_bankingRange≤12.4

oraclebanking_trade_financeRange≤14.5

oraclebanking_deposits_and_lines_of_credit_servicingRange≤2.7

oraclebanking_party_managementRange≤2.7

oraclebanking_platformRange≤2.6.2

oraclebanking_platformRange≤2.9

oraclebanking_platformRange≤2.12

oraclefinancial_services_revenue_management_and_billingRange≤2.9.0.1.0

oraclefinancial_services_revenue_management_and_billingRange≤2.9.0.0.0

oraclefinancial_services_revenue_management_and_billingRange≤4.0.0.0.0

oraclefinancial_services_revenue_management_and_billingRange≤3.0.0.0.0

oracleflexcube_core_bankingRange≤5.2

oracleflexcube_core_bankingRange≤11.10

oracleflexcube_core_bankingRange≤11.6

oraclehospitality_inventory_managementRange≤9.1

oraclehospitality_materials_controlRange≤18.1

oraclemiddleware_common_libraries_and_toolsRange≤12.2.1.3.0

oraclemiddleware_common_libraries_and_toolsRange≤12.2.1.4.0

oracleweblogic_serverRange≤12.2.1.3.0

oracleweblogic_serverRange≤12.2.1.4.0

oracleweblogic_serverRange≤14.1.1.0.0

oraclehttp_serverRange≤12.2.1.3.0

oraclehttp_serverRange≤12.2.1.4.0

oraclesecurity_serviceRange≤12.2.1.3.0

oraclesecurity_serviceRange≤12.2.1.4.0

oracleweblogic_server_proxy_plug-inRange≤12.2.1.3.0

oracleweblogic_server_proxy_plug-inRange≤12.2.1.4.0

oraclewebcenter_portalRange≤12.2.1.3.0

oraclewebcenter_portalRange≤12.2.1.4.0

oraclebi_publisherRange≤12.2.1.3.0

oraclebi_publisherRange≤12.2.1.4.0

oraclecoherenceRange≤3.7.1.0

oraclecoherenceRange≤12.2.1.3.0

oraclecoherenceRange≤12.2.1.4.0

oraclecoherenceRange≤14.1.1.0.0

oracleglobal_lifecycle_management_nextgen_oui_frameworkRange≤13.9.4.2.10

oraclemanaged_file_transferRange≤12.2.1.3.0

oraclemanaged_file_transferRange≤12.2.1.4.0

oraclesoa_suiteRange≤12.2.1.3.0

oraclesoa_suiteRange≤12.2.1.4.0

oraclewebcenter_contentRange≤12.2.1.3.0

oraclewebcenter_contentRange≤12.2.1.4.0

oraclebusiness_intelligenceRange≤5.9.0.0.0enterprise

oraclewebcenter_sites_support_toolsRange≤4.4.2

oraclehealth_sciences_empirica_signalRange≤9.2.0.52

oraclehealth_sciences_empirica_signalRange≤9.1.0.52

oraclehealth_sciences_data_management_workbenchRange≤2.5.2.1

oraclehealth_sciences_data_management_workbenchRange≤2.4.8.7

oraclehealth_sciences_data_management_workbenchRange≤3.1.0.3

oraclehealth_sciences_data_management_workbenchRange≤3.0.0.0

oraclehealthcare_foundationRange≤8.2.0

oraclehealthcare_foundationRange≤8.2.1

oraclehealthcare_foundationRange≤8.1.0

oraclehealth_sciences_information_managerRange≤3.0.1.0

oraclehealth_sciences_information_managerRange≤3.0.0.1

oraclehospitality_opera_5Range≤5.6

oraclehospitality_cruise_shipboard_property_management_systemRange≤20.2.1

oraclejava_seRange≤22.1.0

oraclejava_seRange≤11.0.15.1

oraclejava_seRange≤17.0.3.1

oraclejava_seRange≤8u333

oraclejava_seRange≤21.3.2

oraclejava_seRange≤18.0.1.1

oraclejava_seRange≤7u343

oraclegraalvmRange≤20.3.6enterprise

oraclegraalvmRange≤21.3.2enterprise

oraclegraalvmRange≤22.1.0enterprise

oraclejd_edwards_enterpriseone_toolsRange≤9.2.6.3

oraclejd_edwards_enterpriseone_toolsRange≤9.2.6.1

oraclejd_edwards_enterpriseone_orchestratorRange≤9.2.6.3

oraclemysql_enterprise_monitorRange≤8.0.30

oraclemysql_enterprise_monitorRange≤8.0.25

oraclemysql_enterprise_monitorRange≤8.0.29

mysqlmysql_serverRange≤5.7.38

mysqlmysql_serverRange≤8.0.29

mysqlmysql_serverRange≤8.0.28

oraclemysql_workbenchRange≤8.0.29

oraclemysql_clusterRange≤7.4.36

oraclemysql_clusterRange≤7.5.26

oraclemysql_clusterRange≤7.6.22

oraclemysql_clusterRange≤8.0.29

oraclemysql_shellRange≤1.1.8visual_studio_code

oraclemysql_shellRange≤8.0.28

oraclepeoplesoft_enterprise_peopletoolsRange≤8.58

oraclepeoplesoft_enterprise_peopletoolsRange≤8.59

oraclepolicy_automationRange≤12.2.0

oraclepolicy_automation_for_mobile_devicesRange≤12.2.0

oracleretail_bulk_data_integrationRange≤16.0.3

oracleretail_customer_management_and_segmentation_foundationRange≤17.0

oracleretail_customer_management_and_segmentation_foundationRange≤18.0

oracleretail_customer_management_and_segmentation_foundationRange≤19.0

oracleretail_extract_transform_and_loadRange≤13.2.5

oracleretail_financial_integrationRange≤14.1.3.2

oracleretail_financial_integrationRange≤15.0.3.1

oracleretail_financial_integrationRange≤16.0.3

oracleretail_financial_integrationRange≤19.0.1

oracleretail_integration_busRange≤14.1.3.2

oracleretail_integration_busRange≤15.0.3.1

oracleretail_integration_busRange≤16.0.3

oracleretail_integration_busRange≤19.0.1

oracleretail_merchandising_systemRange≤16.0.3

oracleretail_merchandising_systemRange≤19.0.1

oracleretail_customer_insightsRange≤15.0.2

oracleretail_customer_insightsRange≤16.0.2

oracleretail_order_brokerRange≤19.1

oracleretail_order_brokerRange≤18.0

oracleretail_sales_auditRange≤15.0.3.1

oracleretail_sales_auditRange≤16.0.3

oracleretail_allocationRange≤15.0.3.1

oracleretail_allocationRange≤16.0.3

oracleretail_xstore_point_of_serviceRange≤18.0.3

oracleretail_xstore_point_of_serviceRange≤19.0.2

oracleretail_xstore_point_of_serviceRange≤21.0.1

oracleretail_xstore_point_of_serviceRange≤17.0.4

oracleretail_xstore_point_of_serviceRange≤20.0.1

oracleretail_pricingRange≤19.0.1

oraclesiebel_apps_-_marketingRange≤22.6

oracleagile_engineering_data_managementRange≤6.2.1.0

oracletransportation_managementRange≤1.4.4

oracleagile_plmRange≤9.3.6

oracleagile_product_lifecycle_management_for_processRange≤6.2.2

oracleagile_product_lifecycle_management_for_processRange≤6.2.3

oracleproduct_lifecycle_analyticsRange≤3.6.1

oracleautovue_for_agile_product_lifecycle_managementRange≤21.0.2

oraclezfs_storage_appliance_kitRange≤8.8

oraclesolarisRange≤10

oraclesolarisRange≤11

oracleutilities_frameworkRange≤4.4.0.0.0

oracleutilities_frameworkRange≤4.5.0.0.0

oracleutilities_frameworkRange≤4.4.0.2.0

oracleutilities_frameworkRange≤4.3.0.6.0

oracleutilities_frameworkRange≤4.4.0.3.0

oracleutilities_frameworkRange≤4.3.0.5.0

oraclevm_virtualboxRange≤6.1.36

VendorProductVersionCPE
oraclebig_data_spatial_and_graph*cpe:2.3:a:oracle:big_data_spatial_and_graph:*:*:*:*:*:*:*:*
oracleessbase*cpe:2.3:a:oracle:essbase:*:*:*:*:*:*:*:*
oracleglobal_lifecycle_management_opatch*cpe:2.3:a:oracle:global_lifecycle_management_opatch:*:*:*:*:*:*:*:*
oraclegoldengate*cpe:2.3:a:oracle:goldengate:*:*:*:*:*:*:*:*
oraclestream_analytics*cpe:2.3:a:oracle:stream_analytics:*:*:*:*:*:*:*:*
oraclegraph_server_and_client*cpe:2.3:a:oracle:graph_server_and_client:*:*:*:*:*:*:*:*
oraclerest_data_services*cpe:2.3:a:oracle:rest_data_services:*:*:*:*:*:*:*:*
oraclespatial_studio*cpe:2.3:a:oracle:spatial_studio:*:*:*:*:*:*:*:*
oracletimesten_in-memory_database*cpe:2.3:a:oracle:timesten_in-memory_database:*:*:*:*:*:*:*:*
oraclecommerce_guided_search*cpe:2.3:a:oracle:commerce_guided_search:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	big_data_spatial_and_graph	*	cpe:2.3:a:oracle:big_data_spatial_and_graph::::::::
oracle	essbase	*	cpe:2.3:a:oracle:essbase::::::::
oracle	global_lifecycle_management_opatch	*	cpe:2.3:a:oracle:global_lifecycle_management_opatch::::::::
oracle	goldengate	*	cpe:2.3:a:oracle:goldengate::::::::
oracle	stream_analytics	*	cpe:2.3:a:oracle:stream_analytics::::::::
oracle	graph_server_and_client	*	cpe:2.3:a:oracle:graph_server_and_client::::::::
oracle	rest_data_services	*	cpe:2.3:a:oracle:rest_data_services::::::::
oracle	spatial_studio	*	cpe:2.3:a:oracle:spatial_studio::::::::
oracle	timesten_in-memory_database	*	cpe:2.3:a:oracle:timesten_in-memory_database::::::::
oracle	commerce_guided_search	*	cpe:2.3:a:oracle:commerce_guided_search::::::::