CVE-2022-21445 — Oracle ADF Faces Deserialization of Untrusted Data Vulnerability

CISA KEVExploited: confirmedOracle

Oracle ADF Faces library, included with Oracle JDeveloper Distribution, contains a deserialization of untrusted data vulnerability leading to unauthenticated remote code execution.

Vulnerability details

Affected productsADF Faces
KEV remediation due2024-10-09