Oracle Linux Bulletin - October 2022
Description
The Oracle Linux Bulletin lists all CVEs that had been resolved and announced in Oracle Linux Security Advisories (ELSA) in the last one month prior to the release of the bulletin. Oracle Linux Bulletins are published on the same day as Oracle Critical Patch Updates are released. These bulletins will also be updated for the following two months after their release (i.e., the two months between the normal quarterly Critical Patch Update publication dates) to cover all CVEs that had been resolved in those two months following the bulletin's publication. In addition, Oracle Linux Bulletins may also be updated for vulnerability issues deemed too critical to wait for the next scheduled bulletin publication date.
Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply Oracle Linux Bulletin security patches as soon as possible.
Patch Availability
Please see ULN Advisory https://linux.oracle.com/ol-pad-bulletin
Oracle Linux Bulletin Schedule
Oracle Linux Bulletins are released released on the third Tuesday of January, April, July, and October. The next four dates are:
- 17 January 2023
- 18 April 2023
- 18 July 2023
- 17 October 2023
References
- Oracle Critical Patch Updates, Security Alerts and Bulletins
- Oracle Critical Patch Updates and Security Alerts - Frequently Asked Questions
- Risk Matrix Definitions
- Use of Common Vulnerability Scoring System (CVSS) by Oracle
- CVRF XML version of the risk matrix
Modification History
| Date | Note |
|---|---|
| 2022-December-20 | Rev 3. New CVEs added |
| 2022-November-16 | Rev 2. New CVEs added |
| 2022-October-18 | Rev 1. Initial Release |
Oracle Linux Executive Summary
This Oracle Linux Bulletin Revision contains 220 new security patches for the Oracle Linux.
Oracle Linux Risk Matrix
Revision 3: Published on 2022-12-20
| CVE# | Product | Component | Remote Exploit without Auth.? | CVSS VERSION 3.1 RISK (see Risk Matrix Definitions) | Supported Versions Affected | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Base Score |
Attack Vector |
Attack Complex |
Privs Req'd |
User Interact |
Scope | Confid- entiality |
Inte- grity |
Avail- ability |
|||||
| CVE-2022-41853 | Oracle Linux | hsqldb | Yes | 9.8 | Network | Low | None | None | Unchanged | High | High | High | 7 |
| CVE-2021-21708 | Oracle Linux | php | Yes | 9.8 | Network | Low | None | None | Unchanged | High | High | High | 9 |
| CVE-2021-21708 | Oracle Linux | php:7.4 | Yes | 9.8 | Network | Low | None | None | Unchanged | High | High | High | 8 |
| CVE-2021-21708 | Oracle Linux | php:8.0 | Yes | 9.8 | Network | Low | None | None | Unchanged | High | High | High | 8 |
| CVE-2022-22822 | Oracle Linux | xmlrpc-c | Yes | 9.8 | Network | Low | None | None | Unchanged | High | High | High | 8 |
| CVE-2022-22823 | Oracle Linux | xmlrpc-c | Yes | 9.8 | Network | Low | None | None | Unchanged | High | High | High | 8 |
| CVE-2022-22824 | Oracle Linux | xmlrpc-c | Yes | 9.8 | Network | Low | None | None | Unchanged | High | High | High | 8 |
| CVE-2022-42919 | Oracle Linux | python3.9 | No | 9.3 | Local | Low | None | None | Changed | High | High | High | 9 |
| CVE-2022-42919 | Oracle Linux | python39:3.9 | No | 9.3 | Local | Low | None | None | Changed | High | High | High | 8 |
| CVE-2022-22624 | Oracle Linux | webkit2gtk3 | Yes | 8.8 | Network | Low | None | Required | Unchanged | High | High | High | 8,9 |
| CVE-2022-22628 | Oracle Linux | webkit2gtk3 | Yes | 8.8 | Network | Low | None | Required | Unchanged | High | High | High | 8,9 |
| CVE-2022-22629 | Oracle Linux | webkit2gtk3 | Yes | 8.8 | Network | Low | None | Required | Unchanged | High | High | High | 8,9 |
| CVE-2022-26700 | Oracle Linux | webkit2gtk3 | Yes | 8.8 | Network | Low | None | Required | Unchanged | High | High | High | 8,9 |
| CVE-2022-26709 | Oracle Linux | webkit2gtk3 | Yes | 8.8 | Network | Low | None | Required | Unchanged | High | High | High | 8,9 |
| CVE-2022-26710 | Oracle Linux | webkit2gtk3 | Yes | 8.8 | Network | Low | None | Required | Unchanged | High | High | High | 8,9 |
| CVE-2022-26716 | Oracle Linux | webkit2gtk3 | Yes | 8.8 | Network | Low | None | Required | Unchanged | High | High | High | 8,9 |
| CVE-2022-26717 | Oracle Linux | webkit2gtk3 | Yes | 8.8 | Network | Low | None | Required | Unchanged | High | High | High | 8,9 |
| CVE-2022-26719 | Oracle Linux | webkit2gtk3 | Yes | 8.8 | Network | Low | None | Required | Unchanged | High | High | High | 8,9 |
| CVE-2022-22825 | Oracle Linux | xmlrpc-c | Yes | 8.8 | Network | Low | None | Required | Unchanged | High | High | High | 8 |
| CVE-2022-22826 | Oracle Linux | xmlrpc-c | Yes | 8.8 | Network | Low | None | Required | Unchanged | High | High | High | 8 |
| CVE-2022-22827 | Oracle Linux | xmlrpc-c | Yes | 8.8 | Network | Low | None | Required | Unchanged | High | High | High | 8 |
| CVE-2022-3550 | Oracle Linux | xorg-x11-server | No | 8.8 | Network | Low | Low | None | Unchanged | High | High | High | 7 |
| CVE-2022-2132 | Oracle Linux | dpdk | Yes | 8.6 | Network | Low | None | None | Changed | None | None | High | 9 |
| CVE-2022-3787 | Oracle Linux | device-mapper-multipath | No | 8.4 | Local | Low | None | None | Unchanged | High | High | High | 8,9 |
| CVE-2022-1471 | Oracle Linux | prometheus-jmx-exporter | No | 8.3 | Network | Low | Low | None | Unchanged | High | High | Low | 8 |
| CVE-2022-21824 | Oracle Linux | nodejs:14 | Yes | 8.2 | Network | Low | None | None | Unchanged | None | Low | High | 8 |
| CVE-2022-21824 | Oracle Linux | nodejs:16 | Yes | 8.2 | Network | Low | None | None | Unchanged | None | Low | High | 8 |
| CVE-2022-42920 | Oracle Linux | bcel | Yes | 8.1 | Network | High | None | None | Unchanged | High | High | High | 7 |
| CVE-2022-23943 | Oracle Linux | httpd | Yes | 8.1 | Network | High | None | None | Unchanged | High | High | High | 9 |
| CVE-2022-23943 | Oracle Linux | httpd:2.4 | Yes | 8.1 | Network | High | None | None | Unchanged | High | High | High | 8 |
| CVE-2021-44906 | Oracle Linux | nodejs:16 | Yes | 8.1 | Network | High | None | None | Unchanged | High | High | High | 8 |
| CVE-2022-3565 | Oracle Linux | Unbreakable Enterprise kernel | No | 8.0 | Adjacent | Low | Low | None | Unchanged | High | High | High | 7,8 |
| CVE-2022-3565 | Oracle Linux | Unbreakable Enterprise kernel-container | No | 8.0 | Adjacent | Low | Low | None | Unchanged | High | High | High | 7,8 |
| CVE-2022-3565 | Oracle Linux | Unbreakable Enterprise kernel | No | 8.0 | Adjacent | Low | Low | None | Unchanged | High | High | High | 7 |
| CVE-2022-41032 | Oracle Linux | dotnet7.0 | No | 7.8 | Local | Low | Low | None | Unchanged | High | High | High | 8,9 |
| CVE-2022-26125 | Oracle Linux | frr | No | 7.8 | Local | Low | None | Required | Unchanged | High | High | High | 9 |
| CVE-2021-3497 | Oracle Linux | gstreamer1-plugins-good | No | 7.8 | Local | Low | None | Required | Unchanged | High | High | High | 8 |
| CVE-2022-1055 | Oracle Linux | kernel | No | 7.8 | Local | Low | Low | None | Unchanged | High | High | High | 8 |
| CVE-2022-2938 | Oracle Linux | kernel | No | 7.8 | Local | Low | Low | None | Unchanged | High | High | High | 8 |
| CVE-2022-29581 | Oracle Linux | kernel | No | 7.8 | Local | Low | Low | None | Unchanged | High | High | High | 8,9 |
| CVE-2022-25255 | Oracle Linux | qt5 | No | 7.8 | Local | Low | Low | None | Unchanged | High | High | High | 9 |
| CVE-2022-25255 | Oracle Linux | qt5 | No | 7.8 | Local | Low | Low | None | Unchanged | High | High | High | 8 |
| CVE-2021-46143 | Oracle Linux | xmlrpc-c | No | 7.8 | Local | Low | None | Required | Unchanged | High | High | High | 8 |
| CVE-2022-2320 | Oracle Linux | xorg-x11-server and xorg-x11-server-Xwayland | No | 7.8 | Local | Low | Low | None | Unchanged | High | High | High | 8 |
| CVE-2022-2320 | Oracle Linux | xorg-x11-server | No | 7.8 | Local | Low | Low | None | Unchanged | High | High | High | 9 |
| CVE-2022-2320 | Oracle Linux | xorg-x11-server-Xwayland | No | 7.8 | Local | Low | Low | None | Unchanged | High | High | High | 9 |
| CVE-2022-21682 | Oracle Linux | flatpak-builder | No | 7.7 | Network | Low | Low | None | Changed | None | High | None | 8 |
| CVE-2022-27404 | Oracle Linux | freetype | Yes | 7.6 | Network | Low | None | Required | Unchanged | Low | Low | High | 8,9 |
| CVE-2022-2319 | Oracle Linux | xorg-x11-server and xorg-x11-server-Xwayland | No | 7.6 | Network | Low | Low | None | Unchanged | High | Low | Low | 8 |
| CVE-2022-2319 | Oracle Linux | xorg-x11-server | No | 7.6 | Network | Low | Low | None | Unchanged | High | Low | Low | 9 |
| CVE-2022-2319 | Oracle Linux | xorg-x11-server-Xwayland | No | 7.6 | Network | Low | Low | None | Unchanged | High | Low | Low | 9 |
| CVE-2022-0918 | Oracle Linux | 389-ds-base | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2022-32189 | Oracle Linux | Image Builder | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8,9 |
| CVE-2021-33195 | Oracle Linux | buildah | Yes | 7.5 | Network | Low | None | None | Unchanged | None | High | None | 9 |
| CVE-2021-33197 | Oracle Linux | buildah | Yes | 7.5 | Network | Low | None | None | Unchanged | None | High | None | 9 |
| CVE-2021-33198 | Oracle Linux | buildah | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2022-27191 | Oracle Linux | buildah | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2022-21698 | Oracle Linux | container-tools:3.0 | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-30631 | Oracle Linux | container-tools:3.0 | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-27191 | Oracle Linux | container-tools:4.0 | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-27191 | Oracle Linux | container-tools:ol8 | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-27775 | Oracle Linux | curl | Yes | 7.5 | Network | Low | None | None | Unchanged | High | None | None | 9 |
| CVE-2022-45403 | Oracle Linux | firefox | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-45404 | Oracle Linux | firefox | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-45405 | Oracle Linux | firefox | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-45406 | Oracle Linux | firefox | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-45408 | Oracle Linux | firefox | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-45409 | Oracle Linux | firefox | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-45421 | Oracle Linux | firefox | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-46872 | Oracle Linux | firefox | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-46874 | Oracle Linux | firefox | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-46878 | Oracle Linux | firefox | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-46880 | Oracle Linux | firefox | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-46881 | Oracle Linux | firefox | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-46882 | Oracle Linux | firefox | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-21698 | Oracle Linux | grafana | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8,9 |
| CVE-2022-30631 | Oracle Linux | grafana | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8,9 |
| CVE-2022-30631 | Oracle Linux | grafana-pcp | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8,9 |
| CVE-2022-22719 | Oracle Linux | httpd | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2022-29404 | Oracle Linux | httpd | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2022-30522 | Oracle Linux | httpd | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2022-30556 | Oracle Linux | httpd | Yes | 7.5 | Network | Low | None | None | Unchanged | High | None | None | 9 |
| CVE-2022-22719 | Oracle Linux | httpd:2.4 | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-29404 | Oracle Linux | httpd:2.4 | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-30522 | Oracle Linux | httpd:2.4 | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-30556 | Oracle Linux | httpd:2.4 | Yes | 7.5 | Network | Low | None | None | Unchanged | High | None | None | 8 |
| CVE-2022-1706 | Oracle Linux | ignition | No | 7.5 | Adjacent | Low | Low | Required | Changed | High | Low | Low | 9 |
| CVE-2021-46828 | Oracle Linux | libtirpc | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2022-3517 | Oracle Linux | nodejs:16 | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-43548 | Oracle Linux | nodejs:16 | Yes | 7.5 | Network | Low | None | None | Unchanged | None | High | None | 8 |
| CVE-2022-35255 | Oracle Linux | nodejs:18 | Yes | 7.5 | Network | Low | None | None | Unchanged | High | None | None | 8 |
| CVE-2022-3517 | Oracle Linux | nodejs:18 | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-43548 | Oracle Linux | nodejs:18 | Yes | 7.5 | Network | Low | None | None | Unchanged | None | High | None | 8 |
| CVE-2022-2414 | Oracle Linux | pki-core | Yes | 7.5 | Network | Low | None | None | Unchanged | High | None | None | 7 |
| CVE-2022-2414 | Oracle Linux | pki-core:10.6 and pki-deps:10.6 | Yes | 7.5 | Network | Low | None | None | Unchanged | High | None | None | 8 |
| CVE-2020-28851 | Oracle Linux | podman | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2020-28852 | Oracle Linux | podman | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2021-33197 | Oracle Linux | podman | Yes | 7.5 | Network | Low | None | None | Unchanged | None | High | None | 9 |
| CVE-2022-27191 | Oracle Linux | podman | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2021-22570 | Oracle Linux | protobuf | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8,9 |
| CVE-2022-2309 | Oracle Linux | python-lxml | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2021-3750 | Oracle Linux | qemu-kvm | No | 7.5 | Local | High | High | None | Changed | High | High | High | 9 |
| CVE-2021-33198 | Oracle Linux | skopeo | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2022-45403 | Oracle Linux | thunderbird | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-45404 | Oracle Linux | thunderbird | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-45405 | Oracle Linux | thunderbird | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-45406 | Oracle Linux | thunderbird | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-45408 | Oracle Linux | thunderbird | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-45409 | Oracle Linux | thunderbird | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-45421 | Oracle Linux | thunderbird | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-46872 | Oracle Linux | thunderbird | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-46874 | Oracle Linux | thunderbird | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-46878 | Oracle Linux | thunderbird | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-46880 | Oracle Linux | thunderbird | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-46881 | Oracle Linux | thunderbird | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-46882 | Oracle Linux | thunderbird | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-45060 | Oracle Linux | varnish | Yes | 7.5 | Network | Low | None | None | Unchanged | None | High | None | 9 |
| CVE-2022-45060 | Oracle Linux | varnish:6 | Yes | 7.5 | Network | Low | None | None | Unchanged | None | High | None | 8 |
| CVE-2022-30293 | Oracle Linux | webkit2gtk3 | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 8,9 |
| CVE-2022-3551 | Oracle Linux | xorg-x11-server | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 7 |
| CVE-2022-3517 | Oracle Linux | nodejs:18 | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2022-43548 | Oracle Linux | nodejs:18 | Yes | 7.5 | Network | Low | None | None | Unchanged | None | High | None | 9 |
| CVE-2021-44531 | Oracle Linux | nodejs:14 | Yes | 7.4 | Network | High | None | None | Unchanged | High | High | None | 8 |
| CVE-2021-44532 | Oracle Linux | nodejs:14 | Yes | 7.4 | Network | High | None | None | Unchanged | High | High | None | 8 |
| CVE-2021-44533 | Oracle Linux | nodejs:14 | Yes | 7.4 | Network | High | None | None | Unchanged | High | High | None | 8 |
| CVE-2021-44531 | Oracle Linux | nodejs:16 | Yes | 7.4 | Network | High | None | None | Unchanged | High | High | None | 8 |
| CVE-2021-44532 | Oracle Linux | nodejs:16 | Yes | 7.4 | Network | High | None | None | Unchanged | High | High | None | 8 |
| CVE-2021-44533 | Oracle Linux | nodejs:16 | Yes | 7.4 | Network | High | None | None | Unchanged | High | High | None | 8 |
| CVE-2021-32610 | Oracle Linux | php:7.4 | Yes | 7.4 | Network | High | None | None | Unchanged | High | High | None | 8 |
| CVE-2021-28861 | Oracle Linux | python3.9 | Yes | 7.4 | Network | Low | None | Required | Changed | High | None | None | 9 |
| CVE-2022-22721 | Oracle Linux | httpd | Yes | 7.3 | Network | Low | None | None | Unchanged | Low | Low | Low | 9 |
| CVE-2022-22721 | Oracle Linux | httpd:2.4 | Yes | 7.3 | Network | Low | None | None | Unchanged | Low | Low | Low | 8 |
| CVE-2022-27405 | Oracle Linux | freetype | Yes | 7.1 | Network | Low | None | Required | Unchanged | Low | None | High | 8,9 |
| CVE-2022-27406 | Oracle Linux | freetype | Yes | 7.1 | Network | Low | None | Required | Unchanged | Low | None | High | 8,9 |
| CVE-2015-20107 | Oracle Linux | python27:2.7 | No | 7.1 | Network | Low | Low | None | Unchanged | None | High | Low | 8 |
| CVE-2015-20107 | Oracle Linux | python3.9 | No | 7.1 | Network | Low | Low | None | Unchanged | None | High | Low | 9 |
| CVE-2015-20107 | Oracle Linux | python38:3.8 and python38-devel:3.8 | No | 7.1 | Network | Low | Low | None | Unchanged | None | High | Low | 8 |
| CVE-2015-20107 | Oracle Linux | python39:3.9 and python39-devel:3.9 | No | 7.1 | Network | Low | Low | None | Unchanged | None | High | Low | 8 |
| CVE-2022-2602 | Oracle Linux | Unbreakable Enterprise kernel | No | 7.0 | Local | High | Low | None | Unchanged | High | High | High | 7,8 |
| CVE-2022-2602 | Oracle Linux | Unbreakable Enterprise kernel-container | No | 7.0 | Local | High | Low | None | Unchanged | High | High | High | 7,8 |
| CVE-2022-1304 | Oracle Linux | e2fsprogs | Yes | 7.0 | Network | High | None | None | Unchanged | Low | Low | High | 8 |
| CVE-2022-1304 | Oracle Linux | e2fsprogs | Yes | 7.0 | Network | High | None | None | Unchanged | Low | Low | High | 9 |
| CVE-2022-25308 | Oracle Linux | fribidi | No | 7.0 | Local | High | None | Required | Unchanged | High | High | High | 8,9 |
| CVE-2022-1048 | Oracle Linux | kernel | No | 7.0 | Local | High | Low | None | Unchanged | High | High | High | 8,9 |
| CVE-2022-1280 | Oracle Linux | kernel | No | 7.0 | Local | High | Low | None | Unchanged | High | High | High | 9 |
| CVE-2022-1679 | Oracle Linux | kernel | No | 7.0 | Local | High | Low | None | Unchanged | High | High | High | 9 |
| CVE-2022-20368 | Oracle Linux | kernel | No | 7.0 | Local | High | Low | None | Unchanged | High | High | High | 8,9 |
| CVE-2022-2639 | Oracle Linux | kernel | No | 7.0 | Local | High | Low | None | Unchanged | High | High | High | 8,9 |
| CVE-2022-28390 | Oracle Linux | kernel | No | 7.0 | Local | High | Low | None | Unchanged | High | High | High | 8,9 |
| CVE-2022-31625 | Oracle Linux | php | Yes | 7.0 | Network | High | None | None | Unchanged | Low | Low | High | 9 |
| CVE-2022-31625 | Oracle Linux | php:8.0 | Yes | 7.0 | Network | High | None | None | Unchanged | Low | Low | High | 8 |
| CVE-2022-37434 | Oracle Linux | rsync | Yes | 7.0 | Network | High | None | None | Unchanged | Low | Low | High | 9 |
| CVE-2022-37434 | Oracle Linux | rsync | Yes | 7.0 | Network | High | None | None | Unchanged | Low | Low | High | 8 |
| CVE-2022-3239 | Oracle Linux | Unbreakable Enterprise kernel | No | 7.0 | Local | High | Low | None | Unchanged | High | High | High | 7 |
| CVE-2022-4378 | Oracle Linux | Unbreakable Enterprise kernel | No | 7.0 | Local | High | Low | None | Unchanged | High | High | High | 7 |
| CVE-2021-25220 | Oracle Linux | bind | No | 6.8 | Network | Low | High | None | Changed | None | High | None | 8,9 |
| CVE-2021-25220 | Oracle Linux | bind9.16 | No | 6.8 | Network | Low | High | None | Changed | None | High | None | 8 |
| CVE-2022-1708 | Oracle Linux | container-tools:3.0 | No | 6.8 | Network | Low | Low | Required | Changed | None | None | High | 8 |
| CVE-2022-1708 | Oracle Linux | container-tools:4.0 | No | 6.8 | Network | Low | Low | Required | Changed | None | None | High | 8 |
| CVE-2022-1708 | Oracle Linux | container-tools:ol8 | No | 6.8 | Network | Low | Low | Required | Changed | None | None | High | 8 |
| CVE-2021-25220 | Oracle Linux | dhcp | No | 6.8 | Network | Low | High | None | Changed | None | High | None | 9 |
| CVE-2022-30550 | Oracle Linux | dovecot | No | 6.8 | Network | High | Low | None | Unchanged | High | High | None | 9 |
| CVE-2022-30550 | Oracle Linux | dovecot | No | 6.8 | Network | High | Low | None | Unchanged | High | High | None | 8 |
| CVE-2020-0256 | Oracle Linux | gdisk | No | 6.8 | Physical | Low | None | None | Unchanged | High | High | High | 8 |
| CVE-2021-0308 | Oracle Linux | gdisk | No | 6.8 | Physical | Low | None | None | Unchanged | High | High | High | 8 |
| CVE-2022-21702 | Oracle Linux | grafana | No | 6.8 | Network | Low | Low | Required | Changed | High | None | None | 8,9 |
| CVE-2022-21703 | Oracle Linux | grafana | Yes | 6.8 | Network | High | None | Required | Unchanged | High | High | None | 8,9 |
| CVE-2022-3028 | Oracle Linux | Unbreakable Enterprise kernel | No | 6.7 | Local | Low | High | None | Unchanged | High | High | High | 7,8 |
| CVE-2022-4378 | Oracle Linux | Unbreakable Enterprise kernel | No | 6.7 | Local | Low | High | None | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-3028 | Oracle Linux | Unbreakable Enterprise kernel-container | No | 6.7 | Local | Low | High | None | Unchanged | High | High | High | 7,8 |
| CVE-2022-4378 | Oracle Linux | Unbreakable Enterprise kernel-container | No | 6.7 | Local | Low | High | None | Unchanged | High | High | High | 7,8 |
| CVE-2021-3640 | Oracle Linux | kernel | No | 6.7 | Local | Low | High | None | Unchanged | High | High | High | 8,9 |
| CVE-2022-21499 | Oracle Linux | kernel | No | 6.7 | Local | Low | High | None | Unchanged | High | High | High | 8,9 |
| CVE-2022-2586 | Oracle Linux | kernel | No | 6.7 | Local | Low | High | None | Unchanged | High | High | High | 8,9 |
| CVE-2022-1355 | Oracle Linux | libtiff | No | 6.6 | Local | Low | None | Required | Unchanged | Low | Low | High | 8,9 |
| CVE-2022-2850 | Oracle Linux | 389-ds-base | No | 6.5 | Network | Low | Low | None | Unchanged | None | None | High | 9 |
| CVE-2021-20291 | Oracle Linux | buildah | Yes | 6.5 | Network | Low | None | Required | Unchanged | None | None | High | 9 |
| CVE-2022-0934 | Oracle Linux | dnsmasq | Yes | 6.5 | Network | Low | None | None | Unchanged | None | Low | Low | 8,9 |
| CVE-2022-28199 | Oracle Linux | dpdk | No | 6.5 | Network | Low | Low | None | Unchanged | None | None | High | 9 |
| CVE-2022-26377 | Oracle Linux | httpd | Yes | 6.5 | Network | High | None | None | Changed | Low | Low | Low | 9 |
| CVE-2022-28615 | Oracle Linux | httpd | Yes | 6.5 | Network | High | None | None | Unchanged | Low | None | High | 9 |
| CVE-2022-26377 | Oracle Linux | httpd:2.4 | Yes | 6.5 | Network | High | None | None | Changed | Low | Low | Low | 8 |
| CVE-2022-28615 | Oracle Linux | httpd:2.4 | Yes | 6.5 | Network | High | None | None | Unchanged | Low | None | High | 8 |
| CVE-2022-1328 | Oracle Linux | mutt | Yes | 6.5 | Network | Low | None | None | Unchanged | Low | None | Low | 8,9 |
| CVE-2022-35256 | Oracle Linux | nodejs:14 | Yes | 6.5 | Network | Low | None | None | Unchanged | Low | Low | None | 8 |
| CVE-2022-35256 | Oracle Linux | nodejs:18 | Yes | 6.5 | Network | Low | None | None | Unchanged | Low | Low | None | 8 |
| CVE-2021-20291 | Oracle Linux | podman | Yes | 6.5 | Network | Low | None | Required | Unchanged | None | None | High | 9 |
| CVE-2021-34558 | Oracle Linux | podman | Yes | 6.5 | Network | Low | None | Required | Unchanged | None | None | High | 9 |
| CVE-2022-27337 | Oracle Linux | poppler | Yes | 6.5 | Network | Low | None | Required | Unchanged | None | None | High | 8,9 |
| CVE-2021-20291 | Oracle Linux | skopeo | Yes | 6.5 | Network | Low | None | Required | Unchanged | None | None | High | 9 |
| CVE-2022-30698 | Oracle Linux | unbound | No | 6.5 | Network | Low | Low | None | Unchanged | High | None | None | 8,9 |
| CVE-2022-30699 | Oracle Linux | unbound | No | 6.5 | Network | Low | Low | None | Unchanged | High | None | None | 8,9 |
| CVE-2022-22662 | Oracle Linux | webkit2gtk3 | Yes | 6.5 | Network | Low | None | Required | Unchanged | High | None | None | 8,9 |
| CVE-2022-1998 | Oracle Linux | kernel | No | 6.4 | Local | High | High | None | Unchanged | High | High | High | 9 |
| CVE-2022-42898 | Oracle Linux | krb5 | No | 6.4 | Network | High | Low | None | Unchanged | Low | High | Low | 7,8,9 |
| CVE-2022-28131 | Oracle Linux | container-tools:3.0 | No | 6.2 | Local | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-30630 | Oracle Linux | container-tools:3.0 | No | 6.2 | Local | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-30632 | Oracle Linux | container-tools:3.0 | No | 6.2 | Local | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-30633 | Oracle Linux | container-tools:3.0 | No | 6.2 | Local | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-30067 | Oracle Linux | gimp | No | 6.2 | Local | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2022-28131 | Oracle Linux | grafana | No | 6.2 | Local | Low | None | None | Unchanged | None | None | High | 8,9 |
| CVE-2022-30630 | Oracle Linux | grafana | No | 6.2 | Local | Low | None | None | Unchanged | None | None | High | 8,9 |
| CVE-2022-30632 | Oracle Linux | grafana | No | 6.2 | Local | Low | None | None | Unchanged | None | None | High | 8,9 |
| CVE-2022-30633 | Oracle Linux | grafana | No | 6.2 | Local | Low | None | None | Unchanged | None | None | High | 8,9 |
| CVE-2022-30630 | Oracle Linux | grafana-pcp | No | 6.2 | Local | Low | None | None | Unchanged | None | None | High | 8,9 |
| CVE-2022-30632 | Oracle Linux | grafana-pcp | No | 6.2 | Local | Low | None | None | Unchanged | None | None | High | 8,9 |
| CVE-2021-30002 | Oracle Linux | kernel | No | 6.2 | Local | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-28893 | Oracle Linux | kernel | No | 6.2 | Local | Low | None | None | Unchanged | None | None | High | 8,9 |
| CVE-2022-36946 | Oracle Linux | kernel | No | 6.2 | Local | Low | None | None | Unchanged | None | None | High | 8,9 |
| CVE-2022-3500 | Oracle Linux | keylime | No | 6.2 | Local | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2021-25636 | Oracle Linux | libreoffice | No | 6.2 | Local | Low | None | None | Unchanged | None | High | None | 8 |
| CVE-2022-0865 | Oracle Linux | libtiff | No | 6.2 | Local | Low | None | None | Unchanged | None | None | High | 8,9 |
| CVE-2022-1348 | Oracle Linux | logrotate | No | 6.2 | Local | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2022-45410 | Oracle Linux | firefox | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 7,8,9 |
| CVE-2022-45411 | Oracle Linux | firefox | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 7,8,9 |
| CVE-2022-45412 | Oracle Linux | firefox | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 7,8,9 |
| CVE-2022-45416 | Oracle Linux | firefox | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 7,8,9 |
| CVE-2022-45418 | Oracle Linux | firefox | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 7,8,9 |
| CVE-2022-1353 | Oracle Linux | kernel | No | 6.1 | Local | Low | Low | None | Unchanged | Low | None | High | 9 |
| CVE-2022-21123 | Oracle Linux | kernel | No | 6.1 | Local | Low | Low | None | Unchanged | High | Low | None | 9 |
| CVE-2022-0891 | Oracle Linux | libtiff | No | 6.1 | Local | Low | None | Required | Unchanged | Low | None | High | 8,9 |
| CVE-2022-0924 | Oracle Linux | libtiff | No | 6.1 | Local | Low | None | Required | Unchanged | Low | None | High | 8,9 |
| CVE-2016-3709 | Oracle Linux | libxml2 | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 8 |
| CVE-2022-45410 | Oracle Linux | thunderbird | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 7,8,9 |
| CVE-2022-45411 | Oracle Linux | thunderbird | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 7,8,9 |
| CVE-2022-45412 | Oracle Linux | thunderbird | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 7,8,9 |
| CVE-2022-45414 | Oracle Linux | thunderbird | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 7,8,9 |
| CVE-2022-45416 | Oracle Linux | thunderbird | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 7,8,9 |
| CVE-2022-45418 | Oracle Linux | thunderbird | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 7,8,9 |
| CVE-2021-4158 | Oracle Linux | qemu-kvm | No | 6.0 | Local | Low | High | None | Changed | None | None | High | 9 |
| CVE-2021-36221 | Oracle Linux | container-tools:ol8 | Yes | 5.9 | Network | High | None | None | Unchanged | None | None | High | 8 |
| CVE-2020-36516 | Oracle Linux | kernel | No | 5.9 | Network | High | Low | None | Unchanged | None | High | Low | 8,9 |
| CVE-2021-4048 | Oracle Linux | openblas | Yes | 5.9 | Network | High | None | None | Unchanged | None | None | High | 8 |
| CVE-2021-20199 | Oracle Linux | podman | Yes | 5.9 | Network | High | None | None | Unchanged | None | High | None | 9 |
| CVE-2022-24795 | Oracle Linux | yajl | Yes | 5.9 | Network | High | None | None | Unchanged | None | None | High | 8,9 |
| CVE-2022-0996 | Oracle Linux | 389-ds-base | No | 5.7 | Network | Low | Low | Required | Unchanged | High | None | None | 9 |
| CVE-2022-29162 | Oracle Linux | container-tools:4.0 | Yes | 5.6 | Network | High | None | None | Unchanged | Low | Low | Low | 8 |
| CVE-2022-29162 | Oracle Linux | container-tools:ol8 | Yes | 5.6 | Network | High | None | None | Unchanged | Low | Low | Low | 8 |
| CVE-2022-31813 | Oracle Linux | httpd | Yes | 5.6 | Network | High | None | None | Unchanged | Low | Low | Low | 9 |
| CVE-2022-31813 | Oracle Linux | httpd:2.4 | Yes | 5.6 | Network | High | None | None | Unchanged | Low | Low | Low | 8 |
| CVE-2022-23816 | Oracle Linux | kernel | No | 5.6 | Local | High | Low | None | Changed | High | None | None | 9 |
| CVE-2022-23825 | Oracle Linux | kernel | No | 5.6 | Local | High | Low | None | Changed | High | None | None | 9 |
| CVE-2022-29900 | Oracle Linux | kernel | No | 5.6 | Local | High | Low | None | Changed | High | None | None | 9 |
| CVE-2022-29901 | Oracle Linux | kernel | No | 5.6 | Local | High | Low | None | Changed | High | None | None | 9 |
| CVE-2022-29162 | Oracle Linux | runc | Yes | 5.6 | Network | High | None | None | Unchanged | Low | Low | Low | 9 |
| CVE-2022-1184 | Oracle Linux | Unbreakable Enterprise kernel | No | 5.5 | Local | Low | Low | None | Unchanged | None | None | High | 9 |
| CVE-2022-1962 | Oracle Linux | container-tools:3.0 | No | 5.5 | Local | Low | Low | None | Unchanged | None | None | High | 8 |
| CVE-2021-0561 | Oracle Linux | flac | No | 5.5 | Local | Low | Low | None | Unchanged | High | None | None | 9 |
| CVE-2022-25310 | Oracle Linux | fribidi | No | 5.5 | Local | Low | None | Required | Unchanged | None | None | High | 8,9 |
| CVE-2022-32990 | Oracle Linux | gimp | No | 5.5 | Local | Low | None | Required | Unchanged | None | None | High | 9 |
| CVE-2022-1962 | Oracle Linux | grafana | No | 5.5 | Local | Low | Low | None | Unchanged | None | None | High | 8,9 |
| CVE-2022-30635 | Oracle Linux | grafana | No | 5.5 | Local | Low | Low | None | Unchanged | None | None | High | 8,9 |
| CVE-2022-30635 | Oracle Linux | grafana-pcp | No | 5.5 | Local | Low | Low | None | Unchanged | None | None | High | 8,9 |
| CVE-2022-2211 | Oracle Linux | guestfs-tools | No | 5.5 | Local | Low | None | Required | Unchanged | None | None | High | 9 |
| CVE-2022-33068 | Oracle Linux | harfbuzz | No | 5.5 | Local | Low | None | Required | Unchanged | None | None | High | 9 |
| CVE-2022-1016 | Oracle Linux | kernel | No | 5.5 | Local | Low | Low | None | Unchanged | High | None | None | 8,9 |
| CVE-2022-1184 | Oracle Linux | kernel | No | 5.5 | Local | Low | Low | None | Unchanged | None | None | High | 8,9 |
| CVE-2022-1852 | Oracle Linux | kernel | No | 5.5 | Local | Low | Low | None | Unchanged | None | None | High | 8,9 |
| CVE-2022-2078 | Oracle Linux | kernel | No | 5.5 | Local | Low | Low | None | Unchanged | None | None | High | 8 |
| CVE-2022-21125 | Oracle Linux | kernel | No | 5.5 | Local | Low | Low | None | Unchanged | High | None | None | 9 |
| CVE-2022-21166 | Oracle Linux | kernel | No | 5.5 | Local | Low | Low | None | Unchanged | High | None | None | 9 |
| CVE-2022-26373 | Oracle Linux | kernel | No | 5.5 | Local | Low | Low | None | Unchanged | High | None | None | 8,9 |
| CVE-2022-39190 | Oracle Linux | kernel | No | 5.5 | Local | Low | Low | None | Unchanged | None | None | High | 9 |
| CVE-2022-2211 | Oracle Linux | libguestfs | No | 5.5 | Local | Low | None | Required | Unchanged | None | None | High | 9 |
| CVE-2022-0561 | Oracle Linux | libtiff | No | 5.5 | Local | Low | None | Required | Unchanged | None | None | High | 8,9 |
| CVE-2022-0562 | Oracle Linux | libtiff | No | 5.5 | Local | Low | None | Required | Unchanged | None | None | High | 8,9 |
| CVE-2022-0908 | Oracle Linux | libtiff | No | 5.5 | Local | Low | None | Required | Unchanged | None | None | High | 8,9 |
| CVE-2022-0909 | Oracle Linux | libtiff | No | 5.5 | Local | Low | None | Required | Unchanged | None | None | High | 8,9 |
| CVE-2022-1354 | Oracle Linux | libtiff | No | 5.5 | Local | Low | None | Required | Unchanged | None | None | High | 9 |
| CVE-2022-22844 | Oracle Linux | libtiff | No | 5.5 | Local | Low | None | Required | Unchanged | None | None | High | 8,9 |
| CVE-2020-23903 | Oracle Linux | speex | No | 5.5 | Local | Low | None | Required | Unchanged | None | None | High | 9 |
| CVE-2022-23645 | Oracle Linux | swtpm | No | 5.5 | Local | Low | Low | None | Unchanged | None | None | High | 9 |
| CVE-2022-2211 | Oracle Linux | virt-v2v | No | 5.5 | Local | Low | None | Required | Unchanged | None | None | High | 9 |
| CVE-2022-40768 | Oracle Linux | Unbreakable Enterprise kernel | No | 5.5 | Local | Low | Low | None | Unchanged | High | None | None | 7 |
| CVE-2022-2211 | Oracle Linux | virt:ol and virt-devel:ol | No | 5.5 | Local | Low | None | Required | Unchanged | None | None | High | 8 |
| CVE-2022-23645 | Oracle Linux | virt:ol and virt-devel:ol | No | 5.5 | Local | Low | Low | None | Unchanged | None | None | High | 8 |
| CVE-2021-23648 | Oracle Linux | grafana | Yes | 5.4 | Network | Low | None | Required | Unchanged | Low | Low | None | 8,9 |
| CVE-2022-32746 | Oracle Linux | libldb | No | 5.4 | Network | Low | Low | None | Unchanged | None | Low | Low | 8,9 |
| CVE-2022-0396 | Oracle Linux | bind | Yes | 5.3 | Network | Low | None | None | Unchanged | None | None | Low | 9 |
| CVE-2022-0396 | Oracle Linux | bind9.16 | Yes | 5.3 | Network | Low | None | None | Unchanged | None | None | Low | 8 |
| CVE-2022-1705 | Oracle Linux | container-tools:3.0 | Yes | 5.3 | Network | Low | None | None | Unchanged | None | Low | None | 8 |
| CVE-2022-32148 | Oracle Linux | container-tools:3.0 | Yes | 5.3 | Network | Low | None | None | Unchanged | Low | None | None | 8 |
| CVE-2022-25309 | Oracle Linux | fribidi | No | 5.3 | Local | High | None | Required | Unchanged | None | Low | High | 8,9 |
| CVE-2022-1705 | Oracle Linux | grafana | Yes | 5.3 | Network | Low | None | None | Unchanged | None | Low | None | 8,9 |
| CVE-2022-32148 | Oracle Linux | grafana | Yes | 5.3 | Network | Low | None | None | Unchanged | Low | None | None | 8,9 |
| CVE-2022-1705 | Oracle Linux | grafana-pcp | Yes | 5.3 | Network | Low | None | None | Unchanged | None | Low | None | 8,9 |
| CVE-2022-32148 | Oracle Linux | grafana-pcp | Yes | 5.3 | Network | Low | None | None | Unchanged | Low | None | None | 8,9 |
| CVE-2022-28614 | Oracle Linux | httpd | Yes | 5.3 | Network | Low | None | None | Unchanged | Low | None | None | 9 |
| CVE-2022-28614 | Oracle Linux | httpd:2.4 | Yes | 5.3 | Network | Low | None | None | Unchanged | Low | None | None | 8 |
| CVE-2021-21707 | Oracle Linux | php:7.4 | Yes | 5.3 | Network | Low | None | None | Unchanged | Low | None | None | 8 |
| CVE-2021-3839 | Oracle Linux | dpdk | No | 5.2 | Local | Low | Low | None | Changed | None | Low | Low | 9 |
| CVE-2022-0854 | Oracle Linux | kernel | No | 5.1 | Local | High | None | None | Unchanged | High | None | None | 8,9 |
| CVE-2022-27950 | Oracle Linux | kernel | No | 5.1 | Local | High | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-1122 | Oracle Linux | openjpeg2 | No | 5.1 | Local | High | None | None | Unchanged | None | None | High | 8,9 |
| CVE-2021-41190 | Oracle Linux | container-tools:ol8 | No | 5.0 | Network | Low | Low | None | Changed | None | Low | None | 8 |
| CVE-2022-0897 | Oracle Linux | libvirt | No | 5.0 | Local | Low | Low | Required | Unchanged | None | None | High | 9 |
| CVE-2022-0897 | Oracle Linux | virt:ol and virt-devel:ol | No | 5.0 | Local | Low | Low | Required | Unchanged | None | None | High | 8 |
| CVE-2021-4024 | Oracle Linux | podman | Yes | 4.8 | Network | High | None | None | Unchanged | Low | None | Low | 9 |
| CVE-2022-0617 | Oracle Linux | kernel | No | 4.7 | Local | High | Low | None | Unchanged | None | None | High | 8,9 |
| CVE-2022-23960 | Oracle Linux | kernel | No | 4.7 | Local | High | Low | None | Unchanged | High | None | None | 8 |
| CVE-2021-3507 | Oracle Linux | qemu-kvm | No | 4.6 | Local | Low | High | None | Changed | Low | None | Low | 9 |
| CVE-2021-3507 | Oracle Linux | virt:ol and virt-devel:ol | No | 4.6 | Local | Low | High | None | Changed | Low | None | Low | 8 |
| CVE-2022-0168 | Oracle Linux | kernel | No | 4.4 | Local | Low | High | None | Unchanged | None | None | High | 8,9 |
| CVE-2022-45420 | Oracle Linux | firefox | Yes | 4.3 | Network | Low | None | Required | Unchanged | None | Low | None | 7,8,9 |
| CVE-2022-21673 | Oracle Linux | grafana | No | 4.3 | Network | Low | Low | None | Unchanged | Low | None | None | 8,9 |
| CVE-2022-21713 | Oracle Linux | grafana | No | 4.3 | Network | Low | Low | None | Unchanged | Low | None | None | 8,9 |
| CVE-2022-32742 | Oracle Linux | samba | No | 4.3 | Network | Low | Low | None | Unchanged | Low | None | None | 9 |
| CVE-2022-45420 | Oracle Linux | thunderbird | Yes | 4.3 | Network | Low | None | Required | Unchanged | None | Low | None | 7,8,9 |
| CVE-2020-36558 | Oracle Linux | kernel | No | 4.1 | Local | High | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-24735 | Oracle Linux | redis | No | 3.9 | Local | Low | Low | Required | Unchanged | Low | Low | None | 9 |
| CVE-2022-24735 | Oracle Linux | redis:6 | No | 3.9 | Local | Low | Low | Required | Unchanged | Low | Low | None | 8 |
| CVE-2021-3611 | Oracle Linux | qemu-kvm | No | 3.8 | Local | Low | Low | None | Changed | None | None | Low | 9 |
| CVE-2022-2989 | Oracle Linux | buildah | No | 3.6 | Local | High | Low | None | Unchanged | Low | Low | None | 9 |
| CVE-2022-2990 | Oracle Linux | buildah | No | 3.6 | Local | High | Low | None | Unchanged | Low | Low | None | 9 |
| CVE-2022-2989 | Oracle Linux | container-tools:ol8 | No | 3.6 | Local | High | Low | None | Unchanged | Low | Low | None | 8 |
| CVE-2022-2990 | Oracle Linux | container-tools:ol8 | No | 3.6 | Local | High | Low | None | Unchanged | Low | Low | None | 8 |
| CVE-2022-2989 | Oracle Linux | podman | No | 3.6 | Local | High | Low | None | Unchanged | Low | Low | None | 9 |
| CVE-2022-2990 | Oracle Linux | podman | No | 3.6 | Local | High | Low | None | Unchanged | Low | Low | None | 9 |
| CVE-2021-44269 | Oracle Linux | wavpack | No | 3.5 | Network | Low | Low | Required | Unchanged | None | None | Low | 8,9 |
| CVE-2022-24448 | Oracle Linux | kernel | No | 3.3 | Local | Low | Low | None | Unchanged | Low | None | None | 8,9 |
| CVE-2022-24736 | Oracle Linux | redis | No | 3.3 | Local | Low | Low | None | Unchanged | None | None | Low | 9 |
| CVE-2022-24736 | Oracle Linux | redis:6 | No | 3.3 | Local | Low | Low | None | Unchanged | None | None | Low | 8 |
| CVE-2021-3631 | Oracle Linux | libvirt | No | 3.0 | Local | High | High | None | Unchanged | Low | Low | None | 7 |
Revision 2: Published on 2022-11-15
| CVE# | Product | Component | Remote Exploit without Auth.? | CVSS VERSION 3.1 RISK (see Risk Matrix Definitions) | Supported Versions Affected | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Base Score |
Attack Vector |
Attack Complex |
Privs Req'd |
User Interact |
Scope | Confid- entiality |
Inte- grity |
Avail- ability |
|||||
| CVE-2022-40674 | Oracle Linux | firefox | Yes | 9.8 | Network | Low | None | None | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-40674 | Oracle Linux | thunderbird | Yes | 9.8 | Network | Low | None | None | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-3602 | Oracle Linux | openssl | Yes | 8.8 | Network | Low | None | Required | Unchanged | High | High | High | 9 |
| CVE-2022-41974 | Oracle Linux | device-mapper-multipath | No | 8.4 | Local | Low | None | None | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-3515 | Oracle Linux | libksba | Yes | 8.1 | Network | High | None | None | Unchanged | High | High | High | 7,8,9 |
| CVE-2020-35527 | Oracle Linux | sqlite | Yes | 8.1 | Network | High | None | None | Unchanged | High | High | High | 8 |
| CVE-2022-2585 | Oracle Linux | kernel | No | 7.8 | Local | Low | Low | None | Unchanged | High | High | High | 9 |
| CVE-2022-30594 | Oracle Linux | kernel | No | 7.8 | Local | Low | Low | None | Unchanged | High | High | High | 9 |
| CVE-2020-28948 | Oracle Linux | php-pear | No | 7.8 | Local | Low | None | Required | Unchanged | High | High | High | 7 |
| CVE-2020-28949 | Oracle Linux | php-pear | No | 7.8 | Local | Low | None | Required | Unchanged | High | High | High | 7 |
| CVE-2022-2393 | Oracle Linux | pki-core | No | 7.6 | Local | Low | Low | None | Changed | High | Low | None | 7 |
| CVE-2022-40959 | Oracle Linux | firefox | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7 |
| CVE-2022-40960 | Oracle Linux | firefox | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7 |
| CVE-2022-40962 | Oracle Linux | firefox | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7 |
| CVE-2022-42927 | Oracle Linux | firefox | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-42928 | Oracle Linux | firefox | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2020-28851 | Oracle Linux | git-lfs | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2020-28852 | Oracle Linux | git-lfs | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-27664 | Oracle Linux | git-lfs | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-32189 | Oracle Linux | git-lfs | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-2509 | Oracle Linux | gnutls | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-35255 | Oracle Linux | nodejs | Yes | 7.5 | Network | Low | None | None | Unchanged | High | None | None | 9 |
| CVE-2022-35255 | Oracle Linux | nodejs:16 | Yes | 7.5 | Network | Low | None | None | Unchanged | High | None | None | 8 |
| CVE-2022-3786 | Oracle Linux | openssl | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2022-30123 | Oracle Linux | pcs | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7 |
| CVE-2020-36193 | Oracle Linux | php-pear | Yes | 7.5 | Network | Low | None | None | Unchanged | None | High | None | 7 |
| CVE-2022-2414 | Oracle Linux | pki-core | Yes | 7.5 | Network | Low | None | None | Unchanged | High | None | None | 9 |
| CVE-2020-10735 | Oracle Linux | python3.9 | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2020-35525 | Oracle Linux | sqlite | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-3033 | Oracle Linux | thunderbird | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7 |
| CVE-2022-39249 | Oracle Linux | thunderbird | Yes | 7.5 | Network | Low | None | None | Unchanged | None | High | None | 7,8,9 |
| CVE-2022-39250 | Oracle Linux | thunderbird | Yes | 7.5 | Network | Low | None | None | Unchanged | None | High | None | 7,8,9 |
| CVE-2022-39251 | Oracle Linux | thunderbird | Yes | 7.5 | Network | Low | None | None | Unchanged | None | High | None | 7,8,9 |
| CVE-2022-40959 | Oracle Linux | thunderbird | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7 |
| CVE-2022-40960 | Oracle Linux | thunderbird | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7 |
| CVE-2022-40962 | Oracle Linux | thunderbird | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7 |
| CVE-2022-42927 | Oracle Linux | thunderbird | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-42928 | Oracle Linux | thunderbird | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8,9 |
| CVE-2021-35610 | Oracle Linux | mysql:8.0 | No | 7.1 | Network | Low | Low | None | Unchanged | None | Low | High | 8 |
| CVE-2022-21278 | Oracle Linux | mysql:8.0 | No | 7.1 | Network | Low | Low | None | Unchanged | None | Low | High | 8 |
| CVE-2022-21351 | Oracle Linux | mysql:8.0 | No | 7.1 | Network | Low | Low | None | Unchanged | None | Low | High | 8 |
| CVE-2022-2625 | Oracle Linux | postgresql:12 | No | 7.1 | Network | High | Low | Required | Unchanged | High | High | High | 8 |
| CVE-2022-37434 | Oracle Linux | zlib | Yes | 7.0 | Network | High | None | None | Unchanged | Low | Low | High | 7,8,9 |
| CVE-2022-21499 | Oracle Linux | Unbreakable Enterprise kernel | No | 6.7 | Local | Low | High | None | Unchanged | High | High | High | 7,8 |
| CVE-2022-3028 | Oracle Linux | Unbreakable Enterprise kernel | No | 6.7 | Local | Low | High | None | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-21499 | Oracle Linux | Unbreakable Enterprise kernel-container | No | 6.7 | Local | Low | High | None | Unchanged | High | High | High | 7,8 |
| CVE-2022-3028 | Oracle Linux | Unbreakable Enterprise kernel-container | No | 6.7 | Local | Low | High | None | Unchanged | High | High | High | 7,8 |
| CVE-2022-2588 | Oracle Linux | kernel | No | 6.7 | Local | Low | High | None | Unchanged | High | High | High | 7 |
| CVE-2022-2588 | Oracle Linux | kernel | No | 6.7 | Local | Low | High | None | Unchanged | High | High | High | 8 |
| CVE-2022-2850 | Oracle Linux | 389-ds-base | No | 6.5 | Network | Low | Low | None | Unchanged | None | None | High | 7 |
| CVE-2022-2850 | Oracle Linux | 389-ds:1.4 | No | 6.5 | Network | Low | Low | None | Unchanged | None | None | High | 8 |
| CVE-2022-33099 | Oracle Linux | lua | Yes | 6.5 | Network | Low | None | Required | Unchanged | None | None | High | 9 |
| CVE-2021-2481 | Oracle Linux | mysql:8.0 | No | 6.5 | Network | Low | Low | None | Unchanged | None | None | High | 8 |
| CVE-2021-35597 | Oracle Linux | mysql:8.0 | No | 6.5 | Network | Low | Low | None | Unchanged | None | None | High | 8 |
| CVE-2021-35607 | Oracle Linux | mysql:8.0 | No | 6.5 | Network | Low | Low | None | Unchanged | None | None | High | 8 |
| CVE-2022-21358 | Oracle Linux | mysql:8.0 | No | 6.5 | Network | Low | Low | None | Unchanged | None | None | High | 8 |
| CVE-2022-21454 | Oracle Linux | mysql:8.0 | No | 6.5 | Network | Low | Low | None | Unchanged | None | None | High | 8 |
| CVE-2022-21569 | Oracle Linux | mysql:8.0 | No | 6.5 | Network | Low | Low | None | Unchanged | None | None | High | 8 |
| CVE-2022-35256 | Oracle Linux | nodejs | Yes | 6.5 | Network | Low | None | None | Unchanged | Low | Low | None | 9 |
| CVE-2022-35256 | Oracle Linux | nodejs:16 | Yes | 6.5 | Network | Low | None | None | Unchanged | Low | Low | None | 8 |
| CVE-2022-30630 | Oracle Linux | git-lfs | No | 6.2 | Local | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-30632 | Oracle Linux | git-lfs | No | 6.2 | Local | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-40956 | Oracle Linux | firefox | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 7 |
| CVE-2022-40958 | Oracle Linux | firefox | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 7 |
| CVE-2022-42929 | Oracle Linux | firefox | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 7,8,9 |
| CVE-2022-42932 | Oracle Linux | firefox | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 7,8,9 |
| CVE-2022-1353 | Oracle Linux | kernel | No | 6.1 | Local | Low | Low | None | Unchanged | Low | None | High | 8 |
| CVE-2022-3032 | Oracle Linux | thunderbird | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 7 |
| CVE-2022-3034 | Oracle Linux | thunderbird | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 7 |
| CVE-2022-36059 | Oracle Linux | thunderbird | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 7 |
| CVE-2022-40956 | Oracle Linux | thunderbird | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 7 |
| CVE-2022-40958 | Oracle Linux | thunderbird | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 7 |
| CVE-2022-42929 | Oracle Linux | thunderbird | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 7,8,9 |
| CVE-2022-42932 | Oracle Linux | thunderbird | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 7,8,9 |
| CVE-2022-21352 | Oracle Linux | mysql:8.0 | No | 5.9 | Network | High | High | None | Unchanged | None | High | High | 8 |
| CVE-2022-21457 | Oracle Linux | mysql:8.0 | Yes | 5.9 | Network | High | None | None | Unchanged | High | None | None | 8 |
| CVE-2022-40957 | Oracle Linux | firefox | Yes | 5.8 | Network | Low | None | None | Changed | None | None | Low | 7 |
| CVE-2022-40957 | Oracle Linux | thunderbird | Yes | 5.8 | Network | Low | None | None | Changed | None | None | Low | 7 |
| CVE-2022-23816 | Oracle Linux | kernel | No | 5.6 | Local | High | Low | None | Changed | High | None | None | 7 |
| CVE-2022-23825 | Oracle Linux | kernel | No | 5.6 | Local | High | Low | None | Changed | High | None | None | 7 |
| CVE-2022-29900 | Oracle Linux | kernel | No | 5.6 | Local | High | Low | None | Changed | High | None | None | 7 |
| CVE-2022-29901 | Oracle Linux | kernel | No | 5.6 | Local | High | Low | None | Changed | High | None | None | 7 |
| CVE-2022-23816 | Oracle Linux | kernel | No | 5.6 | Local | High | Low | None | Changed | High | None | None | 8 |
| CVE-2022-23825 | Oracle Linux | kernel | No | 5.6 | Local | High | Low | None | Changed | High | None | None | 8 |
| CVE-2022-29900 | Oracle Linux | kernel | No | 5.6 | Local | High | Low | None | Changed | High | None | None | 8 |
| CVE-2022-29901 | Oracle Linux | kernel | No | 5.6 | Local | High | Low | None | Changed | High | None | None | 8 |
| CVE-2019-11358 | Oracle Linux | pcs | Yes | 5.6 | Network | High | None | None | Unchanged | Low | Low | Low | 7 |
| CVE-2022-30635 | Oracle Linux | git-lfs | No | 5.5 | Local | Low | Low | None | Unchanged | None | None | High | 8 |
| CVE-2022-26373 | Oracle Linux | kernel | No | 5.5 | Local | Low | Low | None | Unchanged | High | None | None | 7 |
| CVE-2021-35604 | Oracle Linux | mysql:8.0 | No | 5.5 | Network | Low | High | None | Unchanged | None | Low | High | 8 |
| CVE-2021-35612 | Oracle Linux | mysql:8.0 | No | 5.5 | Network | Low | High | None | Unchanged | None | Low | High | 8 |
| CVE-2022-21301 | Oracle Linux | mysql:8.0 | No | 5.5 | Network | Low | High | None | Unchanged | None | Low | High | 8 |
| CVE-2022-21367 | Oracle Linux | mysql:8.0 | No | 5.5 | Network | Low | High | None | Unchanged | None | Low | High | 8 |
| CVE-2022-21378 | Oracle Linux | mysql:8.0 | No | 5.5 | Network | Low | High | None | Unchanged | None | Low | High | 8 |
| CVE-2022-21425 | Oracle Linux | mysql:8.0 | No | 5.5 | Network | Low | High | None | Unchanged | None | Low | High | 8 |
| CVE-2022-21440 | Oracle Linux | mysql:8.0 | No | 5.5 | Network | Low | High | None | Unchanged | None | Low | High | 8 |
| CVE-2022-21459 | Oracle Linux | mysql:8.0 | No | 5.5 | Network | Low | High | None | Unchanged | None | Low | High | 8 |
| CVE-2022-21478 | Oracle Linux | mysql:8.0 | No | 5.5 | Network | Low | High | None | Unchanged | None | Low | High | 8 |
| CVE-2022-21479 | Oracle Linux | mysql:8.0 | No | 5.5 | Network | Low | High | None | Unchanged | Low | None | High | 8 |
| CVE-2022-21509 | Oracle Linux | mysql:8.0 | No | 5.5 | Network | Low | High | None | Unchanged | None | Low | High | 8 |
| CVE-2022-21527 | Oracle Linux | mysql:8.0 | No | 5.5 | Network | Low | High | None | Unchanged | None | Low | High | 8 |
| CVE-2022-21528 | Oracle Linux | mysql:8.0 | No | 5.5 | Network | Low | High | None | Unchanged | None | Low | High | 8 |
| CVE-2022-1705 | Oracle Linux | git-lfs | Yes | 5.3 | Network | Low | None | None | Unchanged | None | Low | None | 8 |
| CVE-2022-32148 | Oracle Linux | git-lfs | Yes | 5.3 | Network | Low | None | None | Unchanged | Low | None | None | 8 |
| CVE-2022-21626 | Oracle Linux | java-1.8.0-openjdk | Yes | 5.3 | Network | Low | None | None | Unchanged | None | None | Low | 7 |
| CVE-2022-21628 | Oracle Linux | java-1.8.0-openjdk | Yes | 5.3 | Network | Low | None | None | Unchanged | None | None | Low | 7 |
| CVE-2022-21626 | Oracle Linux | java-1.8.0-openjdk | Yes | 5.3 | Network | Low | None | None | Unchanged | None | None | Low | 8,9 |
| CVE-2022-21628 | Oracle Linux | java-1.8.0-openjdk | Yes | 5.3 | Network | Low | None | None | Unchanged | None | None | Low | 8,9 |
| CVE-2022-21618 | Oracle Linux | java-11-openjdk | Yes | 5.3 | Network | Low | None | None | Unchanged | None | Low | None | 7,8,9 |
| CVE-2022-21626 | Oracle Linux | java-11-openjdk | Yes | 5.3 | Network | Low | None | None | Unchanged | None | None | Low | 7,8,9 |
| CVE-2022-21628 | Oracle Linux | java-11-openjdk | Yes | 5.3 | Network | Low | None | None | Unchanged | None | None | Low | 7,8,9 |
| CVE-2022-21618 | Oracle Linux | java-17-openjdk | Yes | 5.3 | Network | Low | None | None | Unchanged | None | Low | None | 8,9 |
| CVE-2022-21626 | Oracle Linux | java-17-openjdk | Yes | 5.3 | Network | Low | None | None | Unchanged | None | None | Low | 8,9 |
| CVE-2022-21628 | Oracle Linux | java-17-openjdk | Yes | 5.3 | Network | Low | None | None | Unchanged | None | None | Low | 8,9 |
| CVE-2021-35608 | Oracle Linux | mysql:8.0 | No | 5.3 | Network | High | Low | None | Unchanged | None | None | High | 8 |
| CVE-2022-21254 | Oracle Linux | mysql:8.0 | No | 5.3 | Network | High | Low | None | Unchanged | None | None | High | 8 |
| CVE-2022-21302 | Oracle Linux | mysql:8.0 | No | 5.3 | Network | High | Low | None | Unchanged | None | None | High | 8 |
| CVE-2022-0216 | Oracle Linux | qemu | No | 5.3 | Local | High | High | None | Changed | None | None | High | 7 |
| CVE-2021-35602 | Oracle Linux | mysql:8.0 | No | 5.0 | Network | High | High | None | Unchanged | None | Low | High | 8 |
| CVE-2022-21418 | Oracle Linux | mysql:8.0 | No | 5.0 | Network | High | High | None | Unchanged | None | Low | High | 8 |
| CVE-2022-21539 | Oracle Linux | mysql:8.0 | No | 5.0 | Network | High | Low | None | Unchanged | Low | Low | Low | 8 |
| CVE-2021-2478 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-2479 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-35546 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-35575 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-35577 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-35591 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-35596 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-35622 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-35624 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | High | None | 8 |
| CVE-2021-35626 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-35627 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-35628 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-35630 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | High | None | 8 |
| CVE-2021-35631 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-35634 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-35635 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-35636 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-35637 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-35638 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-35639 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-35641 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-35642 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-35643 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-35644 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-35645 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-35646 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-35647 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2021-35648 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21253 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21256 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21264 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21270 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21297 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21303 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21304 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21339 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21342 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21344 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21348 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21362 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21370 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21374 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21379 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21412 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21413 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21414 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21415 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21417 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21427 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21435 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21436 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21437 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21438 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21452 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21462 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21515 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21517 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21525 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21526 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21529 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21530 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21531 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21534 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21537 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21547 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21553 | Oracle Linux | mysql:8.0 | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21368 | Oracle Linux | mysql:8.0 | No | 4.7 | Network | Low | High | None | Unchanged | Low | Low | Low | 8 |
| CVE-2022-0494 | Oracle Linux | kernel | No | 4.4 | Local | Low | High | None | Unchanged | High | None | None | 8 |
| CVE-2021-35632 | Oracle Linux | mysql:8.0 | No | 4.4 | Local | Low | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21444 | Oracle Linux | mysql:8.0 | No | 4.4 | Network | High | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21451 | Oracle Linux | mysql:8.0 | No | 4.4 | Network | High | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21460 | Oracle Linux | mysql:8.0 | No | 4.4 | Network | High | High | None | Unchanged | High | None | None | 8 |
| CVE-2022-21522 | Oracle Linux | mysql:8.0 | No | 4.4 | Network | High | High | None | Unchanged | None | None | High | 8 |
| CVE-2022-21245 | Oracle Linux | mysql:8.0 | No | 4.3 | Network | Low | Low | None | Unchanged | None | Low | None | 8 |
| CVE-2022-32742 | Oracle Linux | samba | No | 4.3 | Network | Low | Low | None | Unchanged | Low | None | None | 8 |
| CVE-2022-39236 | Oracle Linux | thunderbird | No | 4.3 | Network | Low | Low | None | Unchanged | None | None | Low | 7,8,9 |
| CVE-2022-21265 | Oracle Linux | mysql:8.0 | No | 3.8 | Network | Low | High | None | Unchanged | None | Low | Low | 8 |
| CVE-2022-21619 | Oracle Linux | java-1.8.0-openjdk | Yes | 3.7 | Network | High | None | None | Unchanged | None | Low | None | 7 |
| CVE-2022-21624 | Oracle Linux | java-1.8.0-openjdk | Yes | 3.7 | Network | High | None | None | Unchanged | None | Low | None | 7 |
| CVE-2022-21619 | Oracle Linux | java-1.8.0-openjdk | Yes | 3.7 | Network | High | None | None | Unchanged | None | Low | None | 8,9 |
| CVE-2022-21624 | Oracle Linux | java-1.8.0-openjdk | Yes | 3.7 | Network | High | None | None | Unchanged | None | Low | None | 8,9 |
| CVE-2022-21619 | Oracle Linux | java-11-openjdk | Yes | 3.7 | Network | High | None | None | Unchanged | None | Low | None | 7,8,9 |
| CVE-2022-21624 | Oracle Linux | java-11-openjdk | Yes | 3.7 | Network | High | None | None | Unchanged | None | Low | None | 7,8,9 |
| CVE-2022-39399 | Oracle Linux | java-11-openjdk | Yes | 3.7 | Network | High | None | None | Unchanged | None | Low | None | 7,8,9 |
| CVE-2022-21619 | Oracle Linux | java-17-openjdk | Yes | 3.7 | Network | High | None | None | Unchanged | None | Low | None | 8,9 |
| CVE-2022-21624 | Oracle Linux | java-17-openjdk | Yes | 3.7 | Network | High | None | None | Unchanged | None | Low | None | 8,9 |
| CVE-2022-39399 | Oracle Linux | java-17-openjdk | Yes | 3.7 | Network | High | None | None | Unchanged | None | Low | None | 8,9 |
| CVE-2022-21538 | Oracle Linux | mysql:8.0 | No | 3.1 | Network | High | Low | None | Unchanged | None | None | Low | 8 |
| CVE-2021-35623 | Oracle Linux | mysql:8.0 | No | 2.7 | Network | Low | High | None | Unchanged | Low | None | None | 8 |
| CVE-2021-35625 | Oracle Linux | mysql:8.0 | No | 2.7 | Network | Low | High | None | Unchanged | Low | None | None | 8 |
| CVE-2021-35633 | Oracle Linux | mysql:8.0 | No | 2.7 | Network | Low | High | None | Unchanged | None | None | Low | 8 |
| CVE-2021-35640 | Oracle Linux | mysql:8.0 | No | 2.7 | Network | Low | High | None | Unchanged | None | Low | None | 8 |
| CVE-2022-21249 | Oracle Linux | mysql:8.0 | No | 2.7 | Network | Low | High | None | Unchanged | None | None | Low | 8 |
| CVE-2022-21372 | Oracle Linux | mysql:8.0 | No | 2.7 | Network | Low | High | None | Unchanged | None | None | Low | 8 |
| CVE-2022-21423 | Oracle Linux | mysql:8.0 | No | 2.7 | Network | Low | High | None | Unchanged | None | None | Low | 8 |
Revision 1: Published on 2022-10-17
| CVE# | Product | Component | Remote Exploit without Auth.? | CVSS VERSION 3.1 RISK (see Risk Matrix Definitions) | Supported Versions Affected | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Base Score |
Attack Vector |
Attack Complex |
Privs Req'd |
User Interact |
Scope | Confid- entiality |
Inte- grity |
Avail- ability |
|||||
| CVE-2022-40674 | Oracle Linux | expat | Yes | 9.8 | Network | Low | None | None | Unchanged | High | High | High | 7,8,9 |
| CVE-2022-41318 | Oracle Linux | squid | Yes | 8.9 | Network | High | None | None | Changed | High | Low | High | 7,9 |
| CVE-2022-41318 | Oracle Linux | squid:4 | Yes | 8.9 | Network | High | None | None | Changed | High | Low | High | 8 |
| CVE-2022-32893 | Oracle Linux | webkit2gtk3 | Yes | 8.8 | Network | Low | None | Required | Unchanged | High | High | High | 8,9 |
| CVE-2022-41032 | Oracle Linux | .NET 6.0 | No | 7.8 | Local | Low | Low | None | Unchanged | High | High | High | 8,9 |
| CVE-2022-41032 | Oracle Linux | .NET Core 3.1 | No | 7.8 | Local | Low | Low | None | Unchanged | High | High | High | 8 |
| CVE-2022-2585 | Oracle Linux | Unbreakable Enterprise kernel | No | 7.8 | Local | Low | Low | None | Unchanged | High | High | High | 9 |
| CVE-2022-34918 | Oracle Linux | Unbreakable Enterprise kernel | No | 7.8 | Local | Low | Low | None | Unchanged | High | High | High | 9 |
| CVE-2022-34918 | Oracle Linux | kernel | No | 7.8 | Local | Low | Low | None | Unchanged | High | High | High | 9 |
| CVE-2022-3080 | Oracle Linux | bind | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2022-38177 | Oracle Linux | bind | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 7,8,9 |
| CVE-2022-38178 | Oracle Linux | bind | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 7,8,9 |
| CVE-2022-3080 | Oracle Linux | bind9.16 | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-38177 | Oracle Linux | bind9.16 | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-38178 | Oracle Linux | bind9.16 | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-31212 | Oracle Linux | dbus-broker | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2022-31213 | Oracle Linux | dbus-broker | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2022-40959 | Oracle Linux | firefox | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 8,9 |
| CVE-2022-40960 | Oracle Linux | firefox | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 8,9 |
| CVE-2022-40962 | Oracle Linux | firefox | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 8,9 |
| CVE-2022-2509 | Oracle Linux | gnutls and nettle | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2020-28469 | Oracle Linux | nodejs and nodejs-nodemon | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2021-33502 | Oracle Linux | nodejs and nodejs-nodemon | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2021-3807 | Oracle Linux | nodejs and nodejs-nodemon | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2022-29244 | Oracle Linux | nodejs and nodejs-nodemon | Yes | 7.5 | Network | Low | None | None | Unchanged | High | None | None | 9 |
| CVE-2022-32212 | Oracle Linux | nodejs and nodejs-nodemon | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 9 |
| CVE-2022-25857 | Oracle Linux | prometheus-jmx-exporter | Yes | 7.5 | Network | Low | None | None | Unchanged | None | None | High | 8 |
| CVE-2022-3033 | Oracle Linux | thunderbird | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 8,9 |
| CVE-2022-40959 | Oracle Linux | thunderbird | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 8,9 |
| CVE-2022-40960 | Oracle Linux | thunderbird | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 8,9 |
| CVE-2022-40962 | Oracle Linux | thunderbird | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 8,9 |
| CVE-2022-21546 | Oracle Linux | Unbreakable Enterprise kernel | Yes | 7.5 | Network | High | None | Required | Unchanged | High | High | High | 7,8 |
| CVE-2020-7788 | Oracle Linux | nodejs and nodejs-nodemon | Yes | 7.3 | Network | Low | None | None | Unchanged | Low | Low | Low | 9 |
| CVE-2022-1280 | Oracle Linux | Unbreakable Enterprise kernel-container | No | 7.0 | Local | High | Low | None | Unchanged | High | High | High | 7,8 |
| CVE-2022-1280 | Oracle Linux | Unbreakable Enterprise kernel | No | 7.0 | Local | High | Low | None | Unchanged | High | High | High | 7,8 |
| CVE-2022-2586 | Oracle Linux | Unbreakable Enterprise kernel | No | 6.7 | Local | Low | High | None | Unchanged | High | High | High | 9 |
| CVE-2022-2588 | Oracle Linux | Unbreakable Enterprise kernel | No | 6.7 | Local | Low | High | None | Unchanged | High | High | High | 9 |
| CVE-2022-21546 | Oracle Linux | Unbreakable Enterprise kernel-container | No | 6.7 | Local | Low | High | None | Unchanged | High | High | High | 7,8 |
| CVE-2022-2586 | Oracle Linux | Unbreakable Enterprise kernel-container | No | 6.7 | Local | Low | High | None | Unchanged | High | High | High | 7,8 |
| CVE-2022-21499 | Oracle Linux | Unbreakable Enterprise kernel | No | 6.7 | Local | Low | High | None | Unchanged | High | High | High | 7 |
| CVE-2022-2586 | Oracle Linux | Unbreakable Enterprise kernel | No | 6.7 | Local | Low | High | None | Unchanged | High | High | High | 7,8 |
| CVE-2022-3028 | Oracle Linux | Unbreakable Enterprise kernel | No | 6.7 | Local | Low | High | None | Unchanged | High | High | High | 7 |
| CVE-2022-21454 | Oracle Linux | mysql | No | 6.5 | Network | Low | Low | None | Unchanged | None | None | High | 9 |
| CVE-2022-21556 | Oracle Linux | mysql | No | 6.5 | Network | Low | High | None | Unchanged | None | High | High | 9 |
| CVE-2022-21569 | Oracle Linux | mysql | No | 6.5 | Network | Low | Low | None | Unchanged | None | None | High | 9 |
| CVE-2022-32213 | Oracle Linux | nodejs and nodejs-nodemon | Yes | 6.5 | Network | Low | None | None | Unchanged | Low | Low | None | 9 |
| CVE-2022-32214 | Oracle Linux | nodejs and nodejs-nodemon | Yes | 6.5 | Network | Low | None | None | Unchanged | Low | Low | None | 9 |
| CVE-2022-32215 | Oracle Linux | nodejs and nodejs-nodemon | Yes | 6.5 | Network | Low | None | None | Unchanged | Low | Low | None | 9 |
| CVE-2022-21385 | Oracle Linux | Unbreakable Enterprise kernel | No | 6.2 | Local | Low | None | None | Unchanged | None | None | High | 9 |
| CVE-2022-21385 | Oracle Linux | Unbreakable Enterprise kernel-container | No | 6.2 | Local | Low | None | None | Unchanged | None | None | High | 7,8 |
| CVE-2022-28738 | Oracle Linux | ruby | No | 6.2 | Local | Low | None | None | Unchanged | None | High | None | 9 |
| CVE-2022-28739 | Oracle Linux | ruby | No | 6.2 | Local | Low | None | None | Unchanged | None | High | None | 9 |
| CVE-2022-21385 | Oracle Linux | Unbreakable Enterprise kernel | No | 6.2 | Local | Low | None | None | Unchanged | None | None | High | 7,8 |
| CVE-2022-40956 | Oracle Linux | firefox | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 8,9 |
| CVE-2022-40958 | Oracle Linux | firefox | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 8,9 |
| CVE-2022-3032 | Oracle Linux | thunderbird | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 8,9 |
| CVE-2022-3034 | Oracle Linux | thunderbird | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 8,9 |
| CVE-2022-36059 | Oracle Linux | thunderbird | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 8,9 |
| CVE-2022-40956 | Oracle Linux | thunderbird | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 8,9 |
| CVE-2022-40958 | Oracle Linux | thunderbird | Yes | 6.1 | Network | Low | None | Required | Changed | Low | Low | None | 8,9 |
| CVE-2022-34903 | Oracle Linux | gnupg2 | Yes | 5.9 | Network | High | None | None | Unchanged | None | High | None | 9 |
| CVE-2022-21457 | Oracle Linux | mysql | Yes | 5.9 | Network | High | None | None | Unchanged | High | None | None | 9 |
| CVE-2022-40957 | Oracle Linux | firefox | Yes | 5.8 | Network | Low | None | None | Changed | None | None | Low | 8,9 |
| CVE-2022-40957 | Oracle Linux | thunderbird | Yes | 5.8 | Network | Low | None | None | Changed | None | None | Low | 8,9 |
| CVE-2021-3669 | Oracle Linux | Unbreakable Enterprise kernel-container | No | 5.5 | Local | Low | Low | None | Unchanged | None | None | High | 7,8 |
| CVE-2022-2078 | Oracle Linux | kernel | No | 5.5 | Local | Low | Low | None | Unchanged | None | None | High | 9 |
| CVE-2022-21425 | Oracle Linux | mysql | No | 5.5 | Network | Low | High | None | Unchanged | None | Low | High | 9 |
| CVE-2022-21440 | Oracle Linux | mysql | No | 5.5 | Network | Low | High | None | Unchanged | None | Low | High | 9 |
| CVE-2022-21459 | Oracle Linux | mysql | No | 5.5 | Network | Low | High | None | Unchanged | None | Low | High | 9 |
| CVE-2022-21478 | Oracle Linux | mysql | No | 5.5 | Network | Low | High | None | Unchanged | None | Low | High | 9 |
| CVE-2022-21479 | Oracle Linux | mysql | No | 5.5 | Network | Low | High | None | Unchanged | Low | None | High | 9 |
| CVE-2022-21509 | Oracle Linux | mysql | No | 5.5 | Network | Low | High | None | Unchanged | None | Low | High | 9 |
| CVE-2022-21527 | Oracle Linux | mysql | No | 5.5 | Network | Low | High | None | Unchanged | None | Low | High | 9 |
| CVE-2022-21528 | Oracle Linux | mysql | No | 5.5 | Network | Low | High | None | Unchanged | None | Low | High | 9 |
| CVE-2021-3669 | Oracle Linux | Unbreakable Enterprise kernel | No | 5.5 | Local | Low | Low | None | Unchanged | None | None | High | 7,8 |
| CVE-2022-33987 | Oracle Linux | nodejs and nodejs-nodemon | Yes | 5.3 | Network | Low | None | None | Unchanged | None | Low | None | 9 |
| CVE-2022-21418 | Oracle Linux | mysql | No | 5.0 | Network | High | High | None | Unchanged | None | Low | High | 9 |
| CVE-2022-21539 | Oracle Linux | mysql | No | 5.0 | Network | High | Low | None | Unchanged | Low | Low | Low | 9 |
| CVE-2022-21412 | Oracle Linux | mysql | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21413 | Oracle Linux | mysql | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21414 | Oracle Linux | mysql | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21415 | Oracle Linux | mysql | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21417 | Oracle Linux | mysql | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21427 | Oracle Linux | mysql | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21435 | Oracle Linux | mysql | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21436 | Oracle Linux | mysql | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21437 | Oracle Linux | mysql | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21438 | Oracle Linux | mysql | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21452 | Oracle Linux | mysql | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21455 | Oracle Linux | mysql | No | 4.9 | Network | Low | High | None | Unchanged | None | High | None | 9 |
| CVE-2022-21462 | Oracle Linux | mysql | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21515 | Oracle Linux | mysql | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21517 | Oracle Linux | mysql | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21525 | Oracle Linux | mysql | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21526 | Oracle Linux | mysql | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21529 | Oracle Linux | mysql | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21530 | Oracle Linux | mysql | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21531 | Oracle Linux | mysql | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21534 | Oracle Linux | mysql | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21537 | Oracle Linux | mysql | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21547 | Oracle Linux | mysql | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21553 | Oracle Linux | mysql | No | 4.9 | Network | Low | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21444 | Oracle Linux | mysql | No | 4.4 | Network | High | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21451 | Oracle Linux | mysql | No | 4.4 | Network | High | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21460 | Oracle Linux | mysql | No | 4.4 | Network | High | High | None | Unchanged | High | None | None | 9 |
| CVE-2022-21522 | Oracle Linux | mysql | No | 4.4 | Network | High | High | None | Unchanged | None | None | High | 9 |
| CVE-2022-21538 | Oracle Linux | mysql | No | 3.1 | Network | High | Low | None | Unchanged | None | None | Low | 9 |
| CVE-2022-21546 | Oracle Linux | Unbreakable Enterprise kernel | No | 2.7 | Network | Low | High | None | Unchanged | None | None | Low | 9 |
| CVE-2022-21423 | Oracle Linux | mysql | No | 2.7 | Network | Low | High | None | Unchanged | None | None | Low | 9 |