Rewterz Threat Advisory – Multiple Oracle Products Vulnerabilities

Severity

High

Analysis Summary

CVE-2023-22029 CVSS:6.1

An unspecified vulnerability in Oracle Commerce Guided Search related to the Workbench component could allow a remote attacker to cause low confidentiality impact, low integrity impact, and no availability impact.

CVE-2023-22102 CVSS:8.3

An unspecified vulnerability in Oracle MySQL Connectors related to the Connector/J component could allow a remote attacker to cause high confidentiality, integrity and availability impacts.

CVE-2023-22094 CVSS:7.9

An unspecified vulnerability in Oracle MySQL Installer related to the Server: Installer: General component could allow a local authenticated attacker to cause integrity and high availability impact.

Impact

• Denial of Service
• Gain Access
• Information Theft

Indicators Of Compromise

CVE

• CVE-2023-22029
• CVE-2023-22102
• CVE-2023-22094

Affected Vendors

Oracle

Affected Products

• Oracle Commerce Guided Search 11.3.2
• Oracle MySQL Connectors 8.1.0
• Oracle MySQL Installer 1.6.7

Remediation

Refer to Oracle Critical Patch Update Advisory for patch, upgrade or suggested workaround information.

Oracle Critical Patch Update Advisory