Critical severity9.8NVD Advisory· Published Oct 18, 2022· Updated Jun 17, 2026

CVE-2022-39428

Description

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Web Applications Desktop Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected products

Oracle Corporation/Web Applications Desktop Integratorllm-fuzzy2 versions
12.2.3-12.2.11+ 1 more
- (no CPE)range: 12.2.3-12.2.11
- (no CPE)range: 12.2.3-12.2.11

Patches

Vulnerability mechanics

References

www.oracle.com/security-alerts/cpuoct2022.htmlnvdPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.029
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000