Auto Generated CVE annotations [Fri May 20 12:37:37 UTC 2022] 🤖

patch-1
GitHub Action 2022-05-20 12:37:37 +00:00
parent af81407b19
commit 386b86878c
1 changed files with 6 additions and 1 deletions

View File

@ -10,9 +10,14 @@ info:
- https://orwaatyat.medium.com/my-new-discovery-in-oracle-e-business-login-panel-that-allowed-to-access-for-all-employees-ed0ec4cad7ac
- https://twitter.com/GodfatherOrwa/status/1514720677173026816
- https://nvd.nist.gov/vuln/detail/CVE-2022-21500
- https://www.oracle.com/security-alerts/alert-cve-2022-21500.html
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 7.5
cve-id: CVE-2022-21500
metadata:
verified: true
shodan-query: http.title:"Login" "X-ORACLE-DMS-ECID" 200
verified: "true"
tags: oracle,misconfig,cve,cve2022
requests: