CVE-2022-26345: 
NixOS vulnerability analysis and mitigation

An uncontrolled search path element vulnerability (CVE-2022-26345) was identified in the Intel(R) oneAPI Toolkit OpenMP component of Oracle Database Data Mining before version 2022.1. This vulnerability affects Oracle Database Server versions 19.3-19.25 and 21.3-21.16 (Oracle CPU).

The vulnerability has been assigned a CVSS 3.1 Base Score of 6.7, indicating a high severity level. The vulnerability requires an authenticated user with logon privileges to the infrastructure where Oracle Database Data Mining executes. The attack complexity is considered high, and successful exploitation requires human interaction from someone other than the attacker. The CVSS Vector is (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) (Oracle CPU).

Successful exploitation of this vulnerability can result in complete takeover of Oracle Database Data Mining (Intel oneAPI Toolkit OpenMP), potentially compromising the confidentiality, integrity, and availability of the affected system (Oracle CPU).

Oracle has released patches to address this vulnerability as part of their Critical Patch Update (CPU) program. Users are strongly recommended to apply the relevant security patches without delay to affected Oracle Database Server versions 19.3-19.25 and 21.3-21.16 (Oracle CPU).