CVE-2022-21562

4 documents4 sources
Severity
7.5HIGH
EPSS
1.1%
top 21.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation SOA SuiteOracle SOA Suite
Timeline
PublishedJul 19
Latest updateJul 20

Description

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle SOA Suite accessible data. CVSS 3.1 Base Score 7.5 (Integrity im…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶NVDoracle/soa_suite12.2.1.3.0, 12.2.1.4.0+1
▶CVEListV5oracle_corporation/soa_suite12.2.1.3.0, 12.2.1.4.0+1

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-263v-2h45-xhrp: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)↗2022-07-20
▶
CVEList
CVE-2022-21562: Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer)↗2022-07-19
▶

📋Vendor Advisories

1
Oracle
Oracle Oracle Fusion Middleware Risk Matrix: Fabric Layer — CVE-2022-21562↗2022-07-15
▶
CVE-2022-21562 (HIGH CVSS 7.5) | Vulnerability in the Oracle SOA Sui | cvebase.io