CVE-2022-2142

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

The affected product is vulnerable to a SQL injection with high attack complexity, which may allow an unauthorized attacker to disclose information.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jul 22, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-214209.8Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1CVE-2022-214217.5Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General).CVE-2022-214227.5Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: ConnectiCVE-2022-214232.7Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.28 and prior. EaCVE-2022-214248.3Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: ConnectiCVE-2022-214255.5Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.28 and prioCVE-2022-214265.3Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that CVE-2022-214274.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.7.37 and prioCVE-2022-214286.7Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). SupporCVE-2022-214298.1Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Billing CVE-2022-21439.8The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code.CVE-2022-214308.5Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connecti
CVE-2022-2142: Medium severity, CVSS 5.9 | Vulnix