- Vendor / Project
- Oracle
- Product
- Fusion Middleware
- Date added
- Nov 28, 2022
- Due date
- Dec 19, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-502, CWE-790
Description
Oracle Fusion Middleware Access Manager allows an unauthenticated attacker with network access via HTTP to takeover the Access Manager product.
Required action
Apply updates per vendor instructions.