CVE-2022-21616

MEDIUM Year: 2022
CVSS v3 Score
5.2
Medium
Weakness Type
NVD-CWE-Other
View all →

Vulnerability Description

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle WebLogic Server executes to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server as well as unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data and unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 5.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H).

Related Vulnerabilities

CVE-2017-10209

MEDIUM
CVSS:5.2(Medium)

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows lo...

NVD-CWE-Other2017

CVE-2017-18702

MEDIUM
CVSS:5.2(Medium)

NETGEAR R6220 devices before 1.1.0.60 are affected by incorrect configuration of security settings.

NVD-CWE-Other2017

CVE-2018-21230

MEDIUM
CVSS:5.2(Medium)

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before 1.0.0.57, D6220 before 1.0.0.40, D6400 befo...

NVD-CWE-Other2018

CVE-2018-21231

MEDIUM
CVSS:5.2(Medium)

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before 1.0.0.57, D6220 before 1.0.0.40, D6400 befo...

NVD-CWE-Other2018

CVE-2019-6337

MEDIUM
CVSS:5.2(Medium)

For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.

NVD-CWE-Other2019

CVE-2021-2347

MEDIUM
CVSS:5.2(Medium)

Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management). The supported version that is affected is 11.2.5.0. Easily exploitable vulnerabili...

NVD-CWE-Other2021