Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:soa_suite:12.2.1.4.0:*:*:*:*:*:*:*

part: a version: 12.2.1.4.0 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductSoa Suite (4a413982-45b6-5b98-94e3-cd795ff9d36d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-21622 vulnerable 2026-06-08 05:40:01.878509 Details available
HIGH (7.5)
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle SOA Suite accessible data. CVSS 3.1 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).
Published: 2022-10-18T00:00:00.000Z
Updated: 2024-09-24T15:04:00.204Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-21562 vulnerable 2026-06-08 05:40:01.777822 Details available
HIGH (7.5)
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle SOA Suite accessible data. CVSS 3.1 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).
Published: 2022-07-19T21:08:03.000Z
Updated: 2024-09-24T19:56:23.742Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17359 vulnerable 2026-06-08 05:13:10.347671 Details available
The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64.
Published: 2019-10-08T13:39:54.000Z
Updated: 2024-08-05T01:40:15.255Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.