CVE-2022-21262
Reported by oracle · Published January 19, 2022
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corporation | WebLogic Server | 12.2.1.4.0, 14.1.1.0.0 |
| Oracle Corporation | WebLogic Server | 12.2.1.4.0, 14.1.1.0.0 |
Timeline
- Jan 17, 2022 CVE Published
- Feb 8, 2022 EPSS Score (30 in total, the first dated here)
- Jun 1, 2026 Security Advisory
- Jun 17, 2026 CVE Updated
- Jul 8, 2026 Coalition ESS Score
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2022-21262
vulnetix vdb fixes CVE-2022-21262Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2022-21262/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart