Severity
High
Analysis Summary
CVE-2023-22029 CVSS:6.1
An unspecified vulnerability in Oracle Commerce Guided Search related to the Workbench component could allow a remote attacker to cause low confidentiality impact, low integrity impact, and no availability impact.
CVE-2023-22102 CVSS:8.3
An unspecified vulnerability in Oracle MySQL Connectors related to the Connector/J component could allow a remote attacker to cause high confidentiality, integrity and availability impacts.
CVE-2023-22094 CVSS:7.9
An unspecified vulnerability in Oracle MySQL Installer related to the Server: Installer: General component could allow a local authenticated attacker to cause integrity and high availability impact.
Impact
- Denial of Service
- Gain Access
- Information Theft
Indicators Of Compromise
CVE
- CVE-2023-22029
- CVE-2023-22102
- CVE-2023-22094
Affected Vendors
Oracle
Affected Products
- Oracle Commerce Guided Search 11.3.2
- Oracle MySQL Connectors 8.1.0
- Oracle MySQL Installer 1.6.7
Remediation
Refer to Oracle Critical Patch Update Advisory for patch, upgrade or suggested workaround information.