A vulnerability classified as very critical was found in Oracle BAM 12.2.1.4.0. This vulnerability affects unknown code of the component General. The manipulation leads to out-of-bounds write.
This vulnerability was named CVE-2022-42920. The attack can be initiated remotely. There is no exploit available.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2022-42920 | Oracle BAM 12.2.1.4.0 General out-of-bounds write (Nessus ID 211110)
A vulnerability classified as very critical was found in Oracle BAM 12.2.1.4.0. This vulnerability affects unknown code of the component General. The…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
BSI-Warnung (Deutschland)CVE-2022-42920
Oracle Enterprise Manager: Mehrere Schwachstellen16.04.2024Oracle Systems: Mehrere Schwachstellen16.04.2024Oracle Retail Applications: Mehrere Schwachstellen16.04.2024
Advisory Radar
Offizielles Hersteller-Update verfügbar
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Hersteller hat ein verifiziertes Patch-Release herausgegeben. Sofortiges Rollout auf Test- und Produktivsystemen empfohlen.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
Apache Security Advisory Verifiziertapache.org
-
Web Referencewww.openwall.com
-
Web Referencelists.fedoraproject.org
-
Web Referencelists.fedoraproject.org
-
Web Referencelists.fedoraproject.org