NVD disclosure day

Published threat advisories for October 18, 2022

CVE advisoryKnown Exploit

CVE-2022-21587

Oracle Web Applications Desktop Integrator Compromise

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

The Oracle Web Applications Desktop Integrator component within Oracle E-Business Suite is affected by a vulnerability that allows unauthenticated attackers with network access to compromise the product. This compromise can lead to a complete takeover of the system, impacting data confidentiality, integrity, and availa

NVD published: • CISA KEV
CVE advisoryKnown Exploit

CVE-2022-40684

Fortinet Products Authentication Bypass Vulnerability

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

An authentication bypass vulnerability affects Fortinet FortiOS, FortiProxy, and FortiSwitchManager products. This could allow an unauthenticated attacker to access and operate the administrative interface. The risk to organizations includes potential unauthorized access to system configurations, data exfiltration, and

NVD published: • CISA KEV