CISA KEV

CVE-2022-21445

Oracle ADF Faces Deserialization of Untrusted Data Vulnerability

Oracle ADF Faces library, included with Oracle JDeveloper Distribution, contains a deserialization of untrusted data vulnerability leading to unauthenticated remote code execution.

VendorOracle

ProductADF Faces

EPSS62.5%

Added to KEVSep 18, 2024

Remediation DueOct 09, 2024

Known Ransomware UseUnknown

CWECWE-502

Required Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

From Disclosure to Action

Know how quickly you need to move.

For CVE-2022-21445, added to the catalogue on Sep 18, 2024 with a remediation deadline of Oct 09, 2024.

Added to KEVSep 18, 2024

Seraph AlertSame day

Remediation DueOct 09, 2024

ValidationOngoing

Overdue749 days overdue

Recommended action: Apply vendor remediation guidance.

Seraph Context

Technology Watch Match

Available for technologies you monitor inside Seraph CTI.

Relevant Threat Actors

Surfaced automatically when a tracked actor is linked to this CVE.

Sector Context

Shown when this vendor/product is relevant to your industry.

Exploitation Context

Campaign and indicator context, where Seraph analysts have published it.

References

More from Oracle in the KEV catalogue.

CVE-2026-21962HTTP Server and Oracle Weblogic Server Proxy Plug-inAdded Aug 24, 2026 CVE-2026-46817E-Business SuiteAdded Jul 15, 2026 CVE-2026-35273 PeopleSoft Enterprise PeopleToolsAdded Jun 12, 2026

Does this affect technology you run?

Declare your technology stack inside Seraph CTI and get notified the moment a KEV entry matches it.

Explore Seraph CTI Back to KEV Catalogue