CVE-2022-21445

Oracle ADF Faces Deserialization of Untrusted Data Vulnerability

Application Development Framework

Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Development Framework (ADF). Successful attacks of this vulnerability can result in takeover of Oracle Application Development Framework (ADF). Note: Oracle…

19. Apr 2022

Ausgewertete Quellen

• Hersteller
  https://www.oracle.com/security-alerts/cpuapr2022.html
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-21445
• CISA
  Oracle ADF Faces Deserialization of Untrusted Data Vulnerability
• NVD
  CVE-2022-21445