CVE-2022-21500

Vulnerability in Oracle E-Business Suite (component: Manage Proxies). The supported version that is affected is 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle E-Business Suite. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle E-Business Suite accessible data. Note: Authentication is required for successful attack, however the user may be self-registered. <br> <br>Oracle E-Business Suite 12.1 is not impacted by this vulnerability. Customers should refer to the Patch Availability Document for details. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

• https://www.oracle.com/security-alerts/alert-cve-2022-21500.htmlVendor Advisory
• https://www.oracle.com/security-alerts/cpujul2022.htmlPatch, Third Party Advisory
• https://www.oracle.com/security-alerts/alert-cve-2022-21500.htmlVendor Advisory
• https://www.oracle.com/security-alerts/cpujul2022.htmlPatch, Third Party Advisory

Published

May 20, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-21493Vulnerability in the Oracle Solaris product of Oracle System…5.9
• CVE-2022-21494Vulnerability in the Oracle Solaris product of Oracle System…4
• CVE-2022-21496Vulnerability in the Oracle Java SE, Oracle GraalVM Enterpri…5.3
• CVE-2022-21497Vulnerability in the Oracle Web Services Manager product of …8.1
• CVE-2022-21498Vulnerability in the Java VM component of Oracle Database Se…6.5
• CVE-2022-21499KGDB and KDB allow read and write access to kernel memory, a…6.7
• CVE-2022-21503Vulnerability in the Oracle Cloud Infrastructure product of …4.9
• CVE-2022-21504The code in UEK6 U3 was missing an appropiate file descripto…5.5
• CVE-2022-21505In the linux kernel, if IMA appraisal is used with the "ima_…6.7
• CVE-2022-21508Vulnerability in Oracle Essbase (component: Security and Pro…5.8
• CVE-2022-21509Vulnerability in the MySQL Server product of Oracle MySQL (c…5.5
• CVE-2022-2151The Best Contact Management Software WordPress plugin throug…4.8