2022-10-17

2022-10-18

2022-10-19

All (55) Critical (15) High (55) Medium (87) Low (7)

CVE-2022-21600 Oct 18, 21:15 HIGH This Week

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure MySQL Oracle Oncommand Insight Oncommand Workflow Automation +1

NVD

CVSS 3.1

7.2

EPSS

1.2%

CVE-2022-21596 Oct 18, 21:15 HIGH PATCH This Week

Vulnerability in the Oracle Database - Advanced Queuing component of Oracle Database Server. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Oracle Database

NVD

CVSS 3.1

7.2

EPSS

0.8%

CVE-2022-35844 Oct 18, 14:15 HIGH This Week

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Fortinet Command Injection Fortitester

NVD

CVSS 3.1

7.2

EPSS

0.3%

CVE-2022-39057 Oct 18, 06:15 HIGH This Week

RAVA certificate validation system has insufficient filtering for special parameter of the web page input field. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Rava Certificate Validation System Changingtec

NVD

CVSS 3.1

7.2

EPSS

0.7%

CVE-2022-21593 Oct 18, 21:15 HIGH PATCH This Week

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OHS Config MBeans). Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Oracle Http Server

NVD

CVSS 3.1

7.1

EPSS

0.6%

Prev Page 2 of 2