Oracle, SugarCRM vulnerabilities added to CISA catalog

Ongoing active exploitation of two security vulnerabilities impacting Oracle's E-Business suite, tracked as CVE-2022-21587, and SugarCRM offerings, tracked as CVE-2023-22952, have prompted their inclusion in the Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities Catalog, reports The Record, a news site by cybersecurity firm Recorded Future.

agency business catalog cisa cve cve-2022-21587 cve-2023-22952 cybersecurity exploitation exploited future inclusion infrastructure infrastructure security known exploited vulnerabilities known exploited vulnerabilities catalog oracle recorded future reports security sugarcrm the record threat intelligence vulnerabilities vulnerability management