Unrated severityCISA KEVNVD Advisory· Published Oct 18, 2022· Updated Oct 21, 2025
CVE-2022-21587
CVE-2022-21587
Description
Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Web Applications Desktop Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
212.2.3-12.2.11+ 1 more
- (no CPE)range: 12.2.3-12.2.11
- (no CPE)range: 12.2.3-12.2.11
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.