CVE-2022-21445

Produto

Oracle / ADF Faces

Vulnerabilidade

Oracle ADF Faces Deserialization of Untrusted Data Vulnerability

Adicionado ao KEV

18 de set. de 2024

Corrigir até

9 de out. de 2024

Uso conhecido em ransomware

Não

Descrição resumida

Oracle ADF Faces library, included with Oracle JDeveloper Distribution, contains a deserialization of untrusted data vulnerability leading to unauthenticated remote code execution.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://www.oracle.com/security-alerts/cpuapr2022.html ; https://nvd.nist.gov/vuln/detail/CVE-2022-21445