Vulnerability in Oracle Cloud Infrastructure
CVE-2022-21503
Vulnerability in the Oracle Cloud Infrastructure product of Oracle Cloud Services. Easily exploitable vulnerability allows high privileged attacker with network access to compromise Oracle Cloud Infrastructure. Successful attacks of this vulnerability can result in unauthorized access to Oracle Cloud Infrastructure accessible data. All affected customers were notified of CVE-2022-21503 by Oracle. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
EPSS: 0.008 (55.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N.
Affected products
References
- secalert_us@oracle.com (Permissions Required, x_refsource_MISC)
Frequently asked questions
- What is CVE-2022-21503?
- CVE-2022-21503 is a medium-severity vulnerability in Oracle Cloud Infrastructure. CVSS score: 4.9/10. Published 2022-06-17.
- How severe is CVE-2022-21503?
- Medium severity. CVSS v3 base score is 4.9 out of 10.