CISA Alert: Oracle E-Business Suite and SugarCRM Vulnerabilities Under Attack

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on February 2 added two security flaws to its Known Exploited Vulnerabilities (KEV) Catalog, citing evidence of active exploitation.
The first of the two vulnerabilities is CVE-2022-21587 (CVSS score: 9.8), a critical issue impacting versions 12.2.3 to 12.2.11 of the Oracle Web Applications Desktop Integrator product.
"Oracle

agency alert applications attack business catalog cisa cisa alert critical cve cve-2022-21587 cvss cybersecurity desktop exploitation exploited february flaws infrastructure infrastructure security issue kev known exploited vulnerabilities oracle oracle e-business suite product score security security flaws sugarcrm under vulnerabilities web web applications