Feb 2, 2023

Started

• Closed✓Patched

  Oracle E-Business Suite: Unspecified (CVE-2022-21587)

  Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Added to CISA KEV on 2023-02-02. CISA lists known use in ransomware campaigns.

  Oracle E-Business Suite·Closed Feb 2, 2023·updated Feb 2, 2023

• Closed✓Patched

  SugarCRM Multiple Products: Remote Code Execution (CVE-2023-22952)

  Multiple SugarCRM products contain a remote code execution vulnerability in the EmailTemplates. Using a specially crafted request, custom PHP code can be injected through the EmailTemplates. Added to CISA KEV on 2023-02-02.

  SugarCRM Multiple Products·Closed Feb 2, 2023·updated Feb 2, 2023