Oracle Critical Patch Update — October 2022
Tuesday, 18 October 2022
Exploited 1
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
-
Critical 9.8
CVE-2022-21587 Exploited Public exploit Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected ar…EPSS 98%
Critical 1
Public exploit code 1
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
All vulnerabilities 79
Critical2 ShowHide
-
Critical 9.8
CVE-2022-21587 Exploited Public exploit Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected ar…EPSS 98%
-
Critical 9.8
CVE-2022-39428 Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected ar…EPSS 38%
High22 ShowHide
- High 8.8
- High 8.8
-
High 8.1
CVE-2022-39425 Public exploit Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.40. Difficu…EPSS 2.1%
- High 8.1
- High 8.1
-
High 8.1
CVE-2022-39424 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.40. Difficu…EPSS 1.6%
-
High 8.1
CVE-2022-39426 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.40. Difficu…EPSS 1.4%
- High 7.6
- High 7.5
-
High 7.5
CVE-2022-21614 Vulnerability in the Oracle Enterprise Data Quality product of Oracle Fusion Middleware (component: Dashboard). Supported versions that are affected are 12.2.1…EPSS 1.1%
- High 7.5
- High 7.5
- High 7.5
-
High 7.5
CVE-2022-21634 Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: LLVM Interpreter). Supported versions that are affected are Oracle…EPSS 1.8%
-
High 7.5
CVE-2022-39412 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Admin Console). The supported version that is affected is 12.2.1.4.0…EPSS 2.2%
- High 7.5
- High 7.4
- High 7.3
-
High 7.2
CVE-2022-21596 Vulnerability in the Oracle Database - Advanced Queuing component of Oracle Database Server. The supported version that is affected is 19c. Easily exploitable …EPSS 1%
-
High 7.2
CVE-2022-21600 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.27 and prior. Easily exp…EPSS 1.4%
-
High 7.2
CVE-2022-21603 Vulnerability in the Oracle Database - Sharding component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable v…EPSS 1%
- High 7.1
Medium49 ShowHide
- Medium 6.5
-
Medium 6.5
CVE-2022-21635 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vu…EPSS 1.2%
- Medium 6.5
-
Medium 6.5
CVE-2022-39408 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exp…EPSS 1.5%
-
Medium 6.5
CVE-2022-39410 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exp…EPSS 1.5%
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.0
- Medium 6.0
- Medium 5.7
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.3
- Medium 5.3
-
Medium 5.3
CVE-2022-21618 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Or…EPSS 2.8%
-
Medium 5.3
CVE-2022-21626 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected ar…EPSS 2.4%
-
Medium 5.3
CVE-2022-21628 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that …EPSS 2.9%
-
Medium 5.3
CVE-2022-39405 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). The supported version that is affected is 12…EPSS 1.3%
- Medium 5.2
-
Medium 4.9
CVE-2022-21594 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exp…EPSS 1.5%
-
Medium 4.9
CVE-2022-21599 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.30 and prior. Eas…EPSS 1.5%
-
Medium 4.9
CVE-2022-21604 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vu…EPSS 1.5%
-
Medium 4.9
CVE-2022-21605 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary). Supported versions that are affected are 8.0.28 and prior. Easi…EPSS 1.2%
-
Medium 4.9
CVE-2022-21607 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exp…EPSS 1.2%
-
Medium 4.9
CVE-2022-21608 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.39 and prior and 8.0.30 …EPSS 1.7%
-
Medium 4.9
CVE-2022-21617 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are 5.7.39 and prior a…EPSS 1.7%
-
Medium 4.9
CVE-2022-21632 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.30 and prior.…EPSS 1.5%
-
Medium 4.9
CVE-2022-21633 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.30 and prior. Easily e…EPSS 1.5%
-
Medium 4.9
CVE-2022-21637 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vu…EPSS 1.5%
-
Medium 4.9
CVE-2022-21638 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exp…EPSS 1.1%
-
Medium 4.9
CVE-2022-21640 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exp…EPSS 1.5%
-
Medium 4.9
CVE-2022-21641 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exp…EPSS 1.3%
-
Medium 4.9
CVE-2022-39400 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exp…EPSS 1.5%
- Medium 4.9
-
Medium 4.4
CVE-2022-21595 Vulnerability in the MySQL Server product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. D…EPSS 1.2%
-
Medium 4.4
CVE-2022-21625 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Difficult …EPSS 1.4%
- Medium 4.4
-
Medium 4.3
CVE-2022-21589 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.39 and prior …EPSS 1.1%
- Medium 4.3
- Medium 4.3
- Medium 4.3
- Medium 4.2
- Medium 4.1
Low6 ShowHide
- Low 3.9
-
Low 3.7
CVE-2022-21619 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected ar…EPSS 3.3%
-
Low 3.7
CVE-2022-21624 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are Or…EPSS 2%
-
Low 3.7
CVE-2022-39399 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected …EPSS 2%
- Low 3.3
- Low 2.7