CVE-2023-22093
published 2023-10-17CVE-2023-22093: Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Requisition and Vacancy). Supported versions that are affected are…
PriorityP339medium6.5CVSS 3.1
AVNACLPRNUINSUCLILAN
EPSS
0.36%
28.6th percentile
Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Requisition and Vacancy). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iRecruitment. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle iRecruitment accessible data as well as unauthorized read access to a subset of Oracle iRecruitment accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | e-business_suite | 12.2.3 – 12.2.12 | — |
| oracle_corporation | irecruitment | 12.2.3 – 12.2.12 | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
vendor_redhat7.8HIGH
vendor_oracle6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
gimp: dds buffer overflow RCE
vendor_redhat·2023-11-14·CVSS 7.8
CVE-2023-44441 [HIGH] CWE-122 gimp: dds buffer overflow RCE
gimp: dds buffer overflow RCE
GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DDS files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
. Was ZDI-CAN-22093.
A parsing vulnerability was found in the GNU Image Manipulation Program (GIMP). This flaw allows an unauthenticated, remote attacker to
Oracle
Oracle Oracle E-Business Suite Risk Matrix: Requisition and Vacancy — CVE-2023-22093
vendor_oracle·2023-10-15·CVSS 6.5
CVE-2023-22093 [MEDIUM] Oracle Oracle E-Business Suite Risk Matrix: Requisition and Vacancy — CVE-2023-22093
Oracle Oracle E-Business Suite Risk Matrix: Requisition and Vacancy vulnerability
CVE: CVE-2023-22093
CVSS: 6.5
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpuoct2023 (OCT 2023)
GHSA
GHSA-f4h9-mcvf-w57c: Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Requisition and Vacancy)
ghsa_unreviewed·2023-10-18
CVE-2023-22093 [MEDIUM] GHSA-f4h9-mcvf-w57c: Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Requisition and Vacancy)
Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Requisition and Vacancy). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iRecruitment. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle iRecruitment accessible data as well as unauthorized read access to a subset of Oracle iRecruitment accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-10-17
Published