CVE Jan 2022

[big]

Hi,
On R12.2.4 and R12.2.9

Where can I find the patches for these vulnerabilities:

CVE-2022-21250
CVE-2022-21251
CVE-2022-21255
CVE-2022-21273
CVE-2022-21274
CVE-2022-21354
CVE-2022-21373

Thanks and regards.

[ErmanArslansOracleBlog]

"Patch 33487428: ORACLE APPLICATIONS RELEASE 12.2: CPU PATCH FOR JAN 2022" should address these...
Note that: For this CPU; minimum required Oracle E-Business Suite code level: 12.2.3 Release Update Patch along with the R12.AD.C.Delta.12 and R12.TXK.C.Delta.12 roll-up patches.

But! follow the MOS doc below for applying it;

Oracle E-Business Suite Release 12.2 Critical Patch Update Availability Document (January 2022) (Doc ID 2815550.1)
 
Note:

Ref: https://www.oracle.com/security-alerts/cpujan2022.html#AppendixEBS 

Additional Ref:

Identifying the Latest Critical Patch Update for Oracle E-Business Suite Release 12 (Doc ID 2484000.1)
Oracle E-Business Suite Release 12.2 Critical Patch Update Availability Document (January 2022) (Doc ID 2815550.1)

[big]

Thanks.
Really useful.