[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fA94LGeU05ROFb3UjfmzpBmOjIcl-_11xWrSTdNnS-9Q":3,"g5a-risk:CVE-2022-39412":96},{"success":4,"data":5,"meta":93},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":26,"epssTimeSeries":30,"severity":32,"affectedProducts":33,"affectedProductsCount":39,"references":40,"referencesCount":39,"weaknesses":47,"weaknessesCount":39,"isActivelyExploited":56,"cisaInfo":26,"otxData":26,"relatedBlogPosts":57,"seoMetadata":58,"configurations":83,"relatedVendorCves":91,"notableEvents":92},"CVE-2022-39412","What is CVE-2022-39412?","Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Admin Console). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Access Manager accessible data.","Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Admin Console). The supported version that is affected is 12.2.1.4...","2022-10-18T21:15:15.45","2024-09-23T18:35:01.947",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"secalert_us@oracle.com","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,0.02213,[31,31,31,31,29,29,29],0.01938,"High",[34],{"vendor":35,"product":36,"version":37,"criteria":38,"vulnerable":4},"oracle","access_manager","12.2.1.4.0","cpe:2.3:a:oracle:access_manager:12.2.1.4.0:*:*:*:*:*:*:*",1,[41],{"url":42,"source":43,"tags":44},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpuoct2022.html","Oracle",[45,46],"Patch","Vendor Advisory",[48],{"id":49,"name":50,"description":51,"extendedDescription":52,"status":53,"abstraction":54,"structure":55},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","","Draft","Base","Simple",false,[],{"title":59,"metaDescription":60,"keywords":61,"canonicalUrl":62,"structuredData":63},"What is CVE-2022-39412? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-39412, a high severity cyber security vulnerability from 2022. Vulnerability in the Oracle Access Manager product of Oracl...","CVE-2022-39412, CVE-2022-39412 vulnerability, CVE-2022-39412 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, oracle security, access_manager vulnerability","\u002Fwhat-is\u002Fcve-2022-39412",{"@context":64,"@type":65,"headline":59,"description":60,"datePublished":10,"dateModified":11,"author":66,"publisher":70,"about":74,"mainEntityOfPage":78,"articleSection":81,"keywords":82},"https:\u002F\u002Fschema.org","TechArticle",{"@type":67,"name":68,"url":69},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":67,"name":68,"url":69,"logo":71},{"@type":72,"url":73},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":75,"name":6,"description":76,"additionalType":77},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":79,"@id":80},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-39412","Cybersecurity","CVE-2022-39412, CVE-2022-39412 vulnerability, CVE-2022-39412 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[84],{"Operator":26,"Negate":26,"Nodes":85},[86],{"Operator":87,"Negate":26,"CPEMatch":88},"OR",[89],{"Vulnerable":4,"Criteria":38,"MatchCriteriaID":90,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"20EB3430-0FF2-4668-BB20-A5611ACC73F6",[],[],{"lastModified":11,"cacheTime":94,"version":95},1792368019277,"2.0",{"score":97,"band":98,"action":99,"scoredAt":100},49,"Medium","Plan remediation","2026-10-16T06:56:03.567711+00:00"]