Rewterz
Rewterz Threat Update – Unpatched F5 BIG-IP Devices Under Active Attack
May 19, 2022
Rewterz
Rewterz Threat Advisory – Multiple Apple iTunes Vulnerabilities
May 20, 2022

Rewterz Threat Advisory – CVE-2022-21500 – Oracle E-Business Suite Vulnerability

Severity

High

Analysis Summary

CVE-2022-21500

Oracle E-Business Suite could allow a remote attacker to obtain sensitive information, caused by a flaw in the Manage Proxies component. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information, and use this information to launch further attacks against the affected system.

Impact

  • Information Disclosure

Indicators Of Compromise

CVE

  • CVE-2022-21500

Affected Vendors

  • Oracle

Affected Products

Oracle E-Business Suite 12.1
Oracle E-Business Suite 12.2

Remediation

Refer to Oracle Security Advisory for patch, upgrade or suggested workaround information.

Oracle Security Advisory