Name: CVE-2022-21545: Undefined Security Weakness
Creator: Rapid7
Published: 2022-07-19T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2022-21545, CVSS 5.3, EPSS 0.00686

Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Candidate Self Service Registration). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iRecruitment. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle iRecruitment accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

CVSS Details

CVSS 3.1 Base Score: 5.3
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Oracle Ebs	—	Apply patch 34197137 for Oracle E-Business Suite version 12.2.11Apply patch 29747091 for Oracle E-Business Suite version 12.2.5Apply patch 32980025 for Oracle E-Business Suite version 12.2.10Apply patch 34196316 for Oracle E-Business Suite version 12.2.9Apply patch 34212478 for Oracle E-Business Suite version 12.2.9Apply patch 34164667 for Oracle E-Business Suite version 12.2.8Apply patch 33625264 for Oracle E-Business Suite version 12.2.8Apply patch 33625264 for Oracle E-Business Suite version 12.2.11Apply patch 33908186 for Oracle E-Business Suite version 12.2.6Apply patch 22261731 for Oracle E-Business Suite version 12.2.4Apply patch 26282050 for Oracle E-Business Suite version 12.2.9Apply patch 33245199 for Oracle E-Business Suite version 12.2.7Apply patch 34196316 for Oracle E-Business Suite version 12.2.10Apply patch 23708596 for Oracle E-Business Suite version 12.2.5Apply patch 30515569 for Oracle E-Business Suite version 12.2.5Apply patch 34212478 for Oracle E-Business Suite version 12.2.11Apply patch 33286000 for Oracle E-Business Suite version 12.2.10Apply patch 32979944 for Oracle E-Business Suite version 12.2.4Apply patch 34164667 for Oracle E-Business Suite version 12.2.10Apply patch 34164667 for Oracle E-Business Suite version 12.2.5Apply patch 33908189 for Oracle E-Business Suite version 12.2.7Apply patch 32980025 for Oracle E-Business Suite version 12.2.8Apply patch 34197573 for Oracle E-Business Suite version 12.2.10Apply patch 34212478 for Oracle E-Business Suite version 12.2.8Apply patch 33168623 for Oracle E-Business Suite version 12.2.4Apply patch 26282050 for Oracle E-Business Suite version 12.2.6Apply patch 34196316 for Oracle E-Business Suite version 12.2.11Apply patch 31206584 for Oracle E-Business Suite version 12.2.9Apply patch 31206584 for Oracle E-Business Suite version 12.2.8Apply patch 23708498 for Oracle E-Business Suite version 12.2.4Apply patch 32979959 for Oracle E-Business Suite version 12.2.5Apply patch 34212478 for Oracle E-Business Suite version 12.2.10Apply patch 30980446 for Oracle E-Business Suite version 12.2.7Apply patch 33625264 for Oracle E-Business Suite version 12.2.5Apply patch 33245199 for Oracle E-Business Suite version 12.2.8Apply patch 33625264 for Oracle E-Business Suite version 12.2.3Apply patch 34196316 for Oracle E-Business Suite version 12.2.8Apply patch 26924701 for Oracle E-Business Suite version 12.2.8Apply patch 33245199 for Oracle E-Business Suite version 12.2.9Apply patch 34212478 for Oracle E-Business Suite version 12.2.7Apply patch 30980446 for Oracle E-Business Suite version 12.2.8Apply patch 34164667 for Oracle E-Business Suite version 12.2.4Apply patch 34164667 for Oracle E-Business Suite version 12.2.9Apply patch 32979890 for Oracle E-Business Suite version 12.2.6Apply patch 33625264 for Oracle E-Business Suite version 12.2.9Apply patch 33908216 for Oracle E-Business Suite version 12.2.11Apply patch 31206584 for Oracle E-Business Suite version 12.2.6Apply patch 25949132 for Oracle E-Business Suite version 12.2.5Apply patch 33908189 for Oracle E-Business Suite version 12.2.8Apply patch 34164667 for Oracle E-Business Suite version 12.2.6Apply the jul-2022 Critical Patch Update (CPU) (Patch 34127951) for Oracle E-Business SuiteApply patch 31206584 for Oracle E-Business Suite version 12.2.7Apply patch 33625264 for Oracle E-Business Suite version 12.2.6Apply patch 33168635 for Oracle E-Business Suite version 12.2.5Apply patch 30980446 for Oracle E-Business Suite version 12.2.6Apply patch 30980446 for Oracle E-Business Suite version 12.2.9Apply patch 33908208 for Oracle E-Business Suite version 12.2.10Apply patch 31206584 for Oracle E-Business Suite version 12.2.5Apply patch 33625264 for Oracle E-Business Suite version 12.2.10Apply patch 32980025 for Oracle E-Business Suite version 12.2.7Apply patch 26527007 for Oracle E-Business Suite version 12.2.4Apply patch 33625264 for Oracle E-Business Suite version 12.2.4Apply patch 33625264 for Oracle E-Business Suite version 12.2.7Apply patch 34196316 for Oracle E-Business Suite version 12.2.7Apply patch 32980025 for Oracle E-Business Suite version 12.2.9Apply patch 34164667 for Oracle E-Business Suite version 12.2.11Apply patch 34197714 for Oracle E-Business Suite version 12.2.9Apply patch 34164667 for Oracle E-Business Suite version 12.2.7Apply patch 33207251 for Oracle E-Business Suite version 12.2.10Apply patch 33862025 for Oracle E-Business Suite version 12.2.11Apply patch 26282050 for Oracle E-Business Suite version 12.2.8Apply patch 33568131 for Oracle E-Business Suite version 12.2.11Apply patch 33908199 for Oracle E-Business Suite version 12.2.9Apply patch 26282050 for Oracle E-Business Suite version 12.2.7	Jul 28, 2022	Jul 19, 2022

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence