Lucene search
+L

Oracle Critical Patch Update Advisory - October 2022

🗓️ 18 Oct 2022 00:00:00Reported by OracleType 
oracle
 oracle
🔗 www.oracle.com👁 272 Views

Oracle Critical Patch Update Advisory - October 2022, 370 new security patches, Oracle code, third-party component

Related
Detection
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC
The vulnerability of the JNDI component of the Apache Log4j2 logging library allows a perpetrator to execute arbitrary code.
13 Dec 202100:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of the WS-Addressing plugin in the gSOAP software development environment allows a perpetrator to execute arbitrary code.
16 Dec 202100:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of the Advanced Networking Option component of the Oracle Database Server allows a attacker to execute a “man-in-the-middle” attack and gain full control over the system.
20 Dec 202100:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of the userauth_keyboard_interactive() function in the userauth.c component of the libssh2 library allows a hacker to execute arbitrary code.
24 Dec 202100:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of the Apache HTTP server, related to the occurrence of out-of-bound operations in memory, allows attackers to execute arbitrary code.
28 Dec 202100:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of the NSS cryptographic libraries in the Amazon Linux AMI operating system allows a hacker to execute arbitrary code.
4 Jan 202200:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of the JMSAppender class implementation in the Log4j logging library allows a perpetrator to execute arbitrary code.
4 Jan 202200:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of the Java-programming logging library Apache Log4j2 lies in the lack of additional JNDI control elements, allowing attackers to execute arbitrary code.
10 Jan 202200:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of the ap_escape_quotes() function in the Apache HTTP Server, related to writing beyond the buffer limit in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.
17 Jan 202200:00
bdu_fstec
bdu_fstec
BDU FSTEC
The vulnerability of the Java Velocity template mechanism, related to improper code generation control, allows attackers to access confidential data, compromise its integrity, and cause service failures.
17 Jan 202200:00
bdu_fstec
Rows per page
Vulners
Node
OR
oracleaccess_managerMatch12.2.1.4.0
oracleaccess_managerMatch12.2.1.3.0
oracleagile_plmMatch9.3.6
oracleapplication_management_packMatch13.4.1.0.0oracle_e-business_suite
oracleapplications_frameworkRange12.2.612.2.11
oracleautovueMatch21.0.2
oraclebi_publisherMatch5.9.0.0
oraclebi_publisherMatch6.4.0.0.0
oraclebi_publisherMatch12.2.1.3.0
oraclebi_publisherMatch12.2.1.4.0
oraclebusiness_intelligenceMatch5.9.0.0enterprise
oraclecoherenceMatch12.2.1.4.0
oraclecoherenceMatch14.1.1.0.0
oraclecommerce_platformRange11.3.011.3.2
oraclecommunications_pricing_design_centerRange12.0.0.5.012.0.0.7.0
oraclecommunications_pricing_design_centerRange12.0.0.4.012.0.0.7.0
oraclecommunications_pricing_design_centerRange12.0.0.4.012.0.0.6.0
mysqlconnectorsMatch8.0.30
oracledata_integratorMatch12.2.1.4.0
oracledata_integratorMatch12.2.1.3.0
oracledocumakerRange12.612.7enterprise
oracleenterprise_managerMatch13.4.0.0virtualization
oracleessbaseMatch21.3
oraclegraalvmMatch20.3.7enterprise
oraclegraalvmMatch21.3.3
oraclegraalvmMatch22.2.0
oraclehttp_serverMatch12.2.1.3.0
oraclehttp_serverMatch12.2.1.4.0
oraclehuman_resourcesRange12.2.312.2.11
mysqlinstallerMatch1.6.3
oraclejava_seMatch8u341
oraclejava_seMatch17.0.4.1
oraclejava_seMatch11.0.16.1
oraclemapviewerMatch12.2.1.3.0
oraclemapviewerMatch12.2.1.4.0
oracleoracle_graalvmMatch20.3.7enterprise
oracleoracle_graalvmMatch21.3.3enterprise
oracleoracle_graalvmMatch22.2.0enterprise
oracleoracle_java_seMatch8u345-perf
oracleoracle_java_seMatch11.0.16.1
oracleprimavera_gatewayRange18.8.018.8.15
oracleprimavera_gatewayRange19.12.019.12.14
oracleprimavera_gatewayRange20.12.020.12.9
oracleprimavera_gatewayRange21.12.021.12.7
oraclesd-wan_awareMatch9.0.1.3.0
oraclesd-wan_edgeMatch9.1.1.2.0
oraclesecure_backupMatch18.1.0.2.0
mysqlserverMatch8.0.27
mysqlserverMatch8.0.29
mysqlserverMatch8.0.30
mysqlserverMatch5.7.39
mysqlserverMatch8.0.28
mysqlserverMatch5.7.36
mysqlserverMatch8.0.16
mysqlshellMatch8.0.30
oraclesoa_suiteMatch12.2.1.3.0
oraclesoa_suiteMatch12.2.1.4.0
oraclewebcenter_portalMatch12.2.1.3.0
oraclewebcenter_portalMatch12.2.1.4.0
oraclewebcenter_sitesMatch12.2.1.3.0
oraclewebcenter_sitesMatch12.2.1.4.0
oracleweblogic_serverMatch12.2.1.3.0
oracleweblogic_serverMatch12.2.1.4.0
oracleweblogic_serverMatch14.1.1.0.0
mysqlworkbenchMatch8.0.30

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

12 Dec 2022 00:00Current
9.5High risk
Vulners AI Score9.5
CVSS 210
CVSS 3.110
CVSS 39.1 - 9.8
EPSS0.99999
SSVC
272