References https://nvd.nist.gov/vuln/detail/cve-2022-21445 https://www.cve.org/CVERecord?id=CVE-2022-21445 https://www.acunetix.com/vulnerabilities/web/oracle-adf-faces-miracle-rce-cve-2022-21445/ https://peterjson.medium.com/miracle-one-vulnerability-to-rule-them-all-c3aed9edeea2 https://access.redhat.com/security/cve/cve-2022-21445 https://www.sentinelone.com/vulnerability-database/cve-2022-21445/ https://www.oracle.com/security-alerts/cpuapr2022.html https://github.com/NeCr00/CVE-2022-21445 https://www.hhs.gov/sites/default/files/miracle-exploit-analyst-note-tlpclear.pdf https://y4er.com/posts/cve-2022-21445-oracle-adf-faces-deserialization-rce/ https://cvefeed.io/vuln/detail/CVE-2022-21445
Related VulnerabilitiesPoCCVE-2026-35273: Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCEPoCCVE-2026-21445: Langflow - Broken Access ControlPoCCVE-2020-9314: Oracle iPlanet Web Server 7.0.x - Image InjectionPoCoracle-ebs-sqllog-exposure: Oracle EBS SQL Log - ExposurePoCCVE-2021-2135: Oracle WebLogic Server - Remote Code ExecutionOracle Identity Manager /iam/governance/applicationmanagement/api/v1/applications/groovyscriptstatus;.wadl 命令执行漏洞(CVE-2025-61757)Oracle Identity Manager 访问控制不当漏洞PoCCVE-2025-61757: Oracle Identity Manager REST WebServices - Authentication BypassOracle_E_Business 存在SSRF(CVE-2025-61884)(CVE-2025-61757)Oracle Identity Manager REST WebServices远程接管漏洞(CVE-2025-61884) Oracle配置器运行时UI未授权访问漏洞