Oracle ADF CVE-2022–21445 Impact on Oracle Global Trade and Transportation Management (Doc ID 2880481.1)

Last updated on JULY 20, 2024

Applies to:

Details

This document provides details on the impact of CVE-2022–21445 on Oracle Global Trade and Transportation Management 

Actions

The Oracle Global Trade and Transportation Management application is vulnerable due to use of ADF.  In addition, dependent products used with the Oracle Global Trade and Transportation Management are too.  Please refer to the Fusion Middleware Critical Patch Update (CPU) Program April 2022 Patch Availability Document (PAD)) - <Note 2853458.2>

Apply the Oracle JDeveloper and Oracle ADF Patch for CVE-2022-21445 for your version of Fusion Middleware.

CVE                                 Product Release/Patch Name

CVE-2022-21445                Oracle JDeveloper and Oracle ADF            12.2.1.4.0 (Patch 33958532)
CVE-2022-21445                Oracle JDeveloper and Oracle ADF            12.2.1.3.0 (Patch 33949366)

Oracle Global Trade and Transportation Management has dependencies on the following Oracle Products.

    Oracle WebLogic Server [Product ID 5242]
    Oracle Analytics Server [Product ID 2025] (6.5.1 On-Premise)
    Business Intelligence Enterprise Edition [Product ID 2025] (6.4.3 On-Premise)
    Oracle HTTP Server
    Oracle Java SE
    Oracle Database Server

Oracle strongly recommends applying the relevant Critical patch Updates for Oracle Global Trade and Transportation Management and dependent Oracle Products.

Note: On-Premise customers are responsible for the installation and patching of dependent products based on the products used and the versions installed. Oracle will automatically handle the patching of dependent products for Oracle Global Trade Cloud and Transportation Management Cloud Services.  It is not necessary for Cloud customers to contact Oracle Support to request these patches.

Contacts

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.