← Back to browse · API

CVE-2022-21445

Severity
CRITICAL
CVSS
9.8
EPSS
0.62478
Risk score
86.07
CISA KEV
Yes
PoC
No
Published
2024-09-18
Modified
2024-09-18
First seen
2026-08-07
Aliases
EUVD-2022-26669, GHSA-7F3X-FVQF-Q6Q5
Products
Oracle Corporation:Application Development Framework (ADF) 12.2.1.3.0, Oracle Corporation:Application Development Framework (ADF) 12.2.1.4.0, Oracle:ADF Faces
Sources
euvd EUVD-2022-26669
cisa.gov CVE-2022-21445

Description

Oracle ADF Faces library, included with Oracle JDeveloper Distribution, contains a deserialization of untrusted data vulnerability leading to unauthenticated remote code execution.

References