PT-2022-3364 · Oracle · Oracle Jdeveloper

Publicado 2022-04-19 · Atualizado 2022-04-19 · CVE-2022–21445

PT · AI

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Oracle Jdeveloper (affected versions not specified)

Description: The issue is related to the ADF Faces component of Oracle Jdeveloper, which is vulnerable to a memory corruption flaw. This flaw can be exploited by a remote attacker to execute arbitrary code or gain full control of the application using the HTTP protocol.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Deserialization of Untrusted Data

Enumeração de Fraquezas

CWE-502

Identificadores relacionados

BDU:2022-04130

CVE-2022–21445

Produtos afetados

Oracle Jdeveloper

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-21445 · Nota de Segurança
• https://oracle.com/security-alerts/cpuapr2022.html · Nota
• https://peterjson.medium.com/miracle-one-vulnerability-to-rule-them-all-c3aed9edeea2 · Nota
• https://bdu.fstec.ru/vul/2022-04130 · Nota de Segurança