Oracle Siebel CRM: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• Critical 9.8
  CVE-2022-2274 Public exploit EPSS 48%

  RSA implementation bug in AVX512IFMA instructions

  The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions. This issue makes the RSA implementation with 2048 bit private keys incorrect on such machines and memory corruption will happe…

  OpenSSL OpenSSL openssl edk2 Debian Ubuntu crates.io
  Jul 1, 2022
• Medium 6.6
  CVE-2021-44832 Public exploit EPSS 98%

  Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration

  Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control o…

  Apache Software Foundation Apache Log4j2 apache-log4j2 org.apache.logging.log4j:log4j-core Debian Ubuntu Maven
  Dec 28, 2021

Revision history

1. 2023-01-17 #1

   Initiale Fassung

References

• Oracle Critical Patch Update Advisory - January 2023 - Appendix Oracle Siebel CRM vom 2023-01-17
  https://www.oracle.com/security-alerts/cpujan2023.html#AppendixSECR