References https://nvd.nist.gov/vuln/detail/CVE-2022-21445 https://www.anquanke.com/post/id/275295 https://www.secrss.com/articles/43957 https://avd.aliyun.com/detail?id=AVD-2022-21445 https://y4er.com/posts/cve-2022-21445-oracle-adf-faces-deserialization-rce/ https://www.acunetix.com/vulnerabilities/web/oracle-adf-faces-miracle-rce-cve-2022-21445/ https://github.com/projectdiscovery/nuclei-templates/issues/8794 https://www.sentinelone.com/vulnerability-database/cve-2022-21445/ https://rivers.chaitin.cn/blog/cq950b90lnechd244fbg https://www.tenable.com/plugins/nessus/103931
Related VulnerabilitiesPoCCVE-2026-35273: Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCEPoCCVE-2020-9314: Oracle iPlanet Web Server 7.0.x - Image InjectionPoCoracle-ebs-sqllog-exposure: Oracle EBS SQL Log - ExposurePoCCVE-2021-2135: Oracle WebLogic Server - Remote Code ExecutionOracle Identity Manager /iam/governance/applicationmanagement/api/v1/applications/groovyscriptstatus;.wadl 命令执行漏洞(CVE-2025-61757)Oracle Identity Manager 访问控制不当漏洞PoCCVE-2025-61757: Oracle Identity Manager REST WebServices - Authentication BypassOracle_E_Business 存在SSRF(CVE-2025-61884)(CVE-2025-61757)Oracle Identity Manager REST WebServices远程接管漏洞(CVE-2025-61884) Oracle配置器运行时UI未授权访问漏洞Oracle E-Business Suite 存在访问控制不当漏洞(CVE-2025-61884)