CVE-2022-21511

Vulnerability in the Oracle Database - Enterprise Edition Recovery component of Oracle Database Server. For supported versions that are affected see note. Easily exploitable vulnerability allows high privileged attacker having EXECUTE ON DBMS_IR.EXECUTESQLSCRIPT privilege with network access via Oracle Net to compromise Oracle Database - Enterprise Edition Recovery. Successful attacks of this vulnerability can result in takeover of Oracle Database - Enterprise Edition Recovery. Note: None of the supported versions are affected. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

• https://www.oracle.com/security-alerts/cpujul2022.htmlVendor Advisory
• https://www.oracle.com/security-alerts/cpujul2022.htmlVendor Advisory

Published

Jul 19, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-21504The code in UEK6 U3 was missing an appropiate file descripto…5.5
• CVE-2022-21505In the linux kernel, if IMA appraisal is used with the "ima_…6.7
• CVE-2022-21508Vulnerability in Oracle Essbase (component: Security and Pro…5.8
• CVE-2022-21509Vulnerability in the MySQL Server product of Oracle MySQL (c…5.5
• CVE-2022-2151The Best Contact Management Software WordPress plugin throug…4.8
• CVE-2022-21510Vulnerability in the Oracle Database - Enterprise Edition Sh…8.8
• CVE-2022-21512Vulnerability in the PeopleSoft Enterprise PeopleTools produ…4.4
• CVE-2022-21513Vulnerability in the Oracle ZFS Storage Appliance Kit produc…8.2
• CVE-2022-21514Vulnerability in the Oracle Solaris product of Oracle System…7.5
• CVE-2022-21515Vulnerability in the MySQL Server product of Oracle MySQL (c…4.9
• CVE-2022-21516Vulnerability in the Enterprise Manager Base Platform produc…7.3
• CVE-2022-21517Vulnerability in the MySQL Server product of Oracle MySQL (c…4.9