Critical severity9.8CISA KEVNVD Advisory· Published Oct 18, 2022· Updated Jun 17, 2026
CVE-2022-21587
CVE-2022-21587
Description
Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Web Applications Desktop Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:oracle:e-business_suite:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oracle:e-business_suite:*:*:*:*:*:*:*:*range: >=12.2.3,<=12.2.11
- (no CPE)range: 12.2.3-12.2.11
12.2.3-12.2.11+ 1 more
- (no CPE)range: 12.2.3-12.2.11
- (no CPE)range: 12.2.3-12.2.11
Patches
Vulnerability mechanics
References
3- www.oracle.com/security-alerts/cpuoct2022.htmlnvdPatchVendor Advisory
- packetstormsecurity.com/files/171208/Oracle-E-Business-Suite-EBS-Unauthenticated-Arbitrary-File-Upload.htmlnvdExploitThird Party AdvisoryVDB Entry
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.