CVE-2022-21497

Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware component: Web Services Security. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2022-21496

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JNDI. Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable...

CVE-2022-21493

CVE-2022-21493 affects Oracle Solaris (Kernel) on version 11. The vulnerability enables a low-privileged attacker with logon to cause a hang or crash (DoS) with user interaction required; the GPU shows an impact on availability, with a CVSS v3.1 base score of 5.9 (UI:R, A:H) and a changed scope. ...

CVE-2022-21492

CVE-2022-21492 affects Oracle Fusion Middleware’s Oracle BI Enterprise Edition (Analytics Server) with affected version 5.9.0.0.0. The vulnerability enables an unauthenticated attacker, over HTTP, to compromise Oracle BI EE. The exploit path requires user interaction and, while the flaw is in Ora...

CVE-2022-21480

Oracle Transportation Management (OTM) within Oracle Supply Chain is affected by CVE-2022-21480 in the User Interface on affected 6.4.3 and 6.5.1 deployments. The issue is exploitable via HTTP by an unauthenticated network-attacker, with the attack requiring user interaction, and may lead to unau...

CVE-2022-21479

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2022-21479

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2022-21478

CVE-2022-21478 affects Oracle MySQL’s MySQL Server, specifically the Server: Optimizer component. Affects 8.0.28 and earlier. An attacker with network access via multiple protocols and high privileges can cause the MySQL Server to hang or crash (complete DoS) and may gain unauthorized update/inse...

CVE-2022-21476

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable...

CVE-2022-21476

CVE-2022-21476 affects Oracle Java SE and Oracle GraalVM Enterprise Edition. Vulnerable components include Libraries, JAXP, ImageIO, 2D, JNDI, and serialization-related paths, with exploitation achievable by unauthenticated network access and potentially leading to data confidentiality breach or ...

CVE-2022-21471

CVE-2022-21471 affects Oracle VM VirtualBox (Core) with versions before 6.1.34. The vulnerability can be exploited by a locally logged-on, low-privilege attacker to cause a hang or a frequent crash (DoS) of VirtualBox, with potential impact on additional Oracle products. The issue is repeatedly c...

CVE-2022-21471

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.34. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2022-21471

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.34. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2022-21470

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Process Scheduler. Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterpri...

CVE-2022-21462

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2022-21458

CVE-2022-21458 affects Oracle PeopleSoft Enterprise PeopleTools (component: Navigation Pages, Portal, Query) with affected versions 8.58 and 8.59. The vulnerability is exploitable over HTTP by unauthenticated attackers and, per the sources, requires user interaction for a successful attack, poten...

CVE-2022-21452

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2022-21449

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 17.0.2 and 18; Oracle GraalVM Enterprise Edition: 21.3.1 and 22.0.0.2. Easily exploitable vulnerability allows...

CVE-2022-21442

Vulnerability in Oracle GoldenGate component: OGG Core Library. The supported version that is affected is Prior to 23.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle GoldenGate executes to compromise Oracle GoldenGate. While the...

CVE-2022-21441

CVE-2022-21441 pertains to Oracle WebLogic Server (Fusion Middleware, Core). Affected are WebLogic Server versions 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The flaw allows an unauthenticated, network-accessible attacker via T3/IIOP to cause the server to hang or crash (DoS). Root cause is described...