Oracle Critical Patch Update — April 2022
Tuesday, 19 April 2022
Exploited 1
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
-
Critical 9.8
CVE-2022-21445 Exploited Public exploit Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are aff…EPSS 62%
Critical 2
-
Critical 10.0
CVE-2022-21431 Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). Suppor…EPSS 2.1%
-
Critical 9.8
CVE-2022-21420 Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 an…EPSS 1.5%
Public exploit code 1
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
All vulnerabilities 85
Critical3 ShowHide
-
Critical 9.8
CVE-2022-21445 Exploited Public exploit Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are aff…EPSS 62%
-
Critical 10.0
CVE-2022-21431 Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). Suppor…EPSS 2.1%
-
Critical 9.8
CVE-2022-21420 Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 an…EPSS 1.5%
High15 ShowHide
- High 8.8
-
High 8.5
CVE-2022-21430 Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). Suppor…EPSS 1.2%
-
High 8.3
CVE-2022-21424 Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). The su…EPSS 1.3%
-
High 8.2
CVE-2022-21446 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11. Easily exploitable vulnerabil…EPSS 1.5%
-
High 8.2
CVE-2022-21464 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). The supported version that is affected …EPSS 2.1%
-
High 8.1
CVE-2022-21404 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Reactive WebServer). Supported versions that are affected are 1.4.10 and 2.0.0-RC1…EPSS 1.9%
-
High 8.1
CVE-2022-21497 Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). Supported versions that are affected a…EPSS 1.7%
- High 7.8
-
High 7.5
CVE-2022-21449 Public exploit Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected a…EPSS 77%
-
High 7.5
CVE-2022-21421 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General). Supported versions…EPSS 1.6%
-
High 7.5
CVE-2022-21422 Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). Suppor…EPSS 1%
-
High 7.5
CVE-2022-21441 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1.…EPSS 1.4%
-
High 7.5
CVE-2022-21466 Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce (component: Tools and Frameworks). The supported version that is affected is 11.3…EPSS 1.8%
-
High 7.5
CVE-2022-21476 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected a…EPSS 4%
-
High 7.2
CVE-2022-21410 Vulnerability in the Oracle Database - Enterprise Edition Sharding component of Oracle Database Server. The supported version that is affected is 19c. Easily e…EPSS 1.2%
Medium60 ShowHide
- Medium 6.7
- Medium 6.5
-
Medium 6.5
CVE-2022-21454 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 5.7.37 and pr…EPSS 1.4%
- Medium 6.5
- Medium 6.5
- Medium 6.5
-
Medium 6.3
CVE-2022-21482 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.28 and prior. Difficult …EPSS 3.1%
-
Medium 6.3
CVE-2022-21483 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and…EPSS 3%
-
Medium 6.3
CVE-2022-21489 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and…EPSS 79%
-
Medium 6.3
CVE-2022-21490 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and…EPSS 79%
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
-
Medium 5.9
CVE-2022-21457 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin). Supported versions that are affected are 8.0.28 and prior. Diff…EPSS 1.9%
- Medium 5.9
- Medium 5.9
- Medium 5.9
- Medium 5.9
- Medium 5.9
- Medium 5.5
-
Medium 5.5
CVE-2022-21425 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.28 and prior. Easily exploitab…EPSS 1.3%
-
Medium 5.5
CVE-2022-21440 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exp…EPSS 1.1%
-
Medium 5.5
CVE-2022-21459 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exp…EPSS 1.1%
- Medium 5.5
- Medium 5.5
-
Medium 5.5
CVE-2022-21478 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exp…EPSS 1.3%
-
Medium 5.5
CVE-2022-21479 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exp…EPSS 1.6%
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.4
-
Medium 5.3
CVE-2022-21426 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Or…EPSS 3.2%
-
Medium 5.3
CVE-2022-21434 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected a…EPSS 2.6%
-
Medium 5.3
CVE-2022-21496 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are Or…EPSS 2.8%
- Medium 5.0
-
Medium 5.0
CVE-2022-21418 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.28 and prior. Difficult to exploit …EPSS 1.1%
-
Medium 4.9
CVE-2022-21412 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exp…EPSS 1.4%
-
Medium 4.9
CVE-2022-21413 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.28 and prior. Easily exploitab…EPSS 1.3%
-
Medium 4.9
CVE-2022-21414 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exp…EPSS 1.4%
-
Medium 4.9
CVE-2022-21415 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.28 and prior. Easily e…EPSS 1.4%
-
Medium 4.9
CVE-2022-21417 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. …EPSS 1.5%
-
Medium 4.9
CVE-2022-21427 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and pr…EPSS 2%
-
Medium 4.9
CVE-2022-21435 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exp…EPSS 1.3%
-
Medium 4.9
CVE-2022-21436 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exp…EPSS 1.3%
-
Medium 4.9
CVE-2022-21437 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exp…EPSS 1.3%
-
Medium 4.9
CVE-2022-21438 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exp…EPSS 1.3%
-
Medium 4.9
CVE-2022-21452 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exp…EPSS 1.3%
-
Medium 4.9
CVE-2022-21462 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exp…EPSS 1.3%
- Medium 4.7
-
Medium 4.4
CVE-2022-21444 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and pr…EPSS 1.3%
-
Medium 4.4
CVE-2022-21451 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. …EPSS 1.2%
-
Medium 4.4
CVE-2022-21460 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Logging). Supported versions that are affected are 5.7.37 and prior and 8.0.28 an…EPSS 1.3%
- Medium 4.0
Low7 ShowHide
- Low 3.8
- Low 3.8
-
Low 3.7
CVE-2022-21443 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected a…EPSS 2.7%
-
Low 2.9
CVE-2022-21484 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and…EPSS 1.7%
-
Low 2.9
CVE-2022-21485 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and…EPSS 1.8%
-
Low 2.9
CVE-2022-21486 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and…EPSS 1.7%
-
Low 2.7
CVE-2022-21423 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vu…EPSS 1.2%