CVE-2022-21388

4 documents4 sources

Severity

3.3LOW

EPSS

0.1%

top 76.12%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Corporation Communications Pricing Design Center Oracle Communications Pricing Design Center

Timeline

PublishedJan 19

Latest updateJan 20

Description

Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications Applications (component: On Premise Install). Supported versions that are affected are 12.0.0.3.0 and 12.0.0.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications Pricing Design Center executes to compromise Oracle Communications Pricing Design Center. Successful attacks of this vulnerability can result in unauthorized read …

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 1.8 | Impact: 1.4

Affected Packages2 packages

▶NVDoracle/communications_pricing_design_center12.0.0.3.0, 12.0.0.4.0+1

▶CVEListV5oracle_corporation/communications_pricing_design_center12.0.0.3.0, 12.0.0.4.0+1

🔴Vulnerability Details

GHSA

GHSA-qj27-c86p-rvm3: Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications Applications (component: On Premise Install)↗2022-01-20

▶

CVEList

CVE-2022-21388: Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications Applications (component: On Premise Install)↗2022-01-19

▶

📋Vendor Advisories

Oracle

Oracle Oracle Communications Applications Risk Matrix: On Premise Install — CVE-2022-21388↗2022-01-15

▶