CISA Alert: Oracle E-Business Suite and SugarCRM Vulnerabilities Under Attack

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on February 2 extra two security flaws to its Acknowledged Exploited Vulnerabilities (KEV) Catalog, citing proof of lively exploitation.

The first of the two vulnerabilities is CVE-2022-21587 (CVSS rating: 9.8), a critical issue impacting versions 12.2.3 to 12.2.11 of the Oracle Web Apps Desktop Integrator merchandise.

“Oracle E-Company Suite is made up of an unspecified vulnerability that permits an unauthenticated attacker with network access by using HTTP to compromise Oracle Web Programs Desktop Integrator,” CISA reported.

✔ Approved Seller From Our Partners

Protect your privacy by Mullvad VPN. Mullvad VPN is one of the famous brands in the security and privacy world. With Mullvad VPN you will not even be asked for your email address. No log policy, no data from you will be saved. Get your license key now from the official distributor of Mullvad with discount: SerialCart® (Limited Offer).

➤ Get Mullvad VPN with 12% Discount

The issue was addressed by Oracle as part of its Critical Patch Update produced in October 2022. Not substantially is recognised about the character of the attacks exploiting the vulnerability.

The 2nd security flaw to be additional to the KEV catalog is CVE-2023-22952 (CVSS rating: 8.8), which relates to a situation of missing enter validation in SugarCRM that could consequence in the injection of arbitrary PHP code. The bug has been mounted in SugarCRM variations 11..5 and 12..2.

The advancement will come a 7 days after CISA also additional CVE-2017-11357 (CVSS rating: 9.8), a extreme security vulnerability impacting Telerik UI that could facilitate arbitrary file uploads or distant code execution.

In mild of active exploitation makes an attempt, Federal Civilian Executive Branch (FCEB) businesses in the U.S. are necessary to utilize the patches by February 23, 2023.

Found this article exciting? Stick to us on Twitter  and LinkedIn to read through more exceptional written content we article.