Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2022-21587
HistoryOct 18, 2022 - 9:15 p.m.

CVE-2022-21587

2022-10-1821:15:10
CWE-306
[email protected]
web.nvd.nist.gov
7
oracle web applications desktop integrator
e-business suite
vulnerability
upload
takeover
cvss 3.1

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.97

Percentile

99.8%

JSON

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Web Applications Desktop Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected configurations

Nvd
Node
oraclee-business_suiteRange12.2.3–12.2.11
VendorProductVersionCPE
oraclee-business_suite*cpe:2.3:a:oracle:e-business_suite:*:*:*:*:*:*:*:*

Related

cisa_kev 1
vulnrichment 1
ics 1
cvelist 1
cve 1
prion 1
rapid7blog 3
githubexploit 5
packetstorm 1
attackerkb 1
zdt 1
metasploit 1
nuclei 1
thn 1
nessus 1
oracle 1
cisa_kev
cisa_kev
Oracle E-Business Suite Unspecified Vulnerability
2023-02-02 00:00:00
vulnrichment
vulnrichment
CVE-2022-21587
2022-10-18 00:00:00
ics
ics
CISA Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth
2024-07-11 12:00:00
cvelist
cvelist
CVE-2022-21587
2022-10-18 00:00:00
cve
cve
CVE-2022-21587
2022-10-18 21:15:10
prion
prion
Code injection
2022-10-18 21:15:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-03-03 20:51:02
CVE-2022-21587: Rapid7 Observed Exploitation of Oracle E-Business Suite Vulnerability
2023-02-07 17:27:49
What’s New in InsightVM and Nexpose: Q1 2023 in Review
2023-03-31 15:44:29
githubexploit
githubexploit
Exploit for Missing Authentication for Critical Function in Oracle E-Business Suite
2023-03-03 12:56:58
Exploit for Missing Authentication for Critical Function in Oracle E-Business Suite
2023-02-06 04:18:24
Exploit for Missing Authentication for Critical Function in Oracle E-Business Suite
2023-02-12 14:37:56
packetstorm
packetstorm
Oracle E-Business Suite (EBS) Unauthenticated Arbitrary File Upload
2023-03-01 00:00:00
attackerkb
attackerkb
CVE-2022-21587
2022-10-18 00:00:00
zdt
zdt
Oracle E-Business Suite (EBS) Unauthenticated Arbitrary File Upload Exploit
2023-03-02 00:00:00
metasploit
metasploit
Oracle E-Business Suite (EBS) Unauthenticated Arbitrary File Upload
2023-02-09 16:22:30
nuclei
nuclei
Oracle E-Business Suite 12.2.3 -12.2.11 - Remote Code Execution
2023-01-20 14:15:46
thn
thn
CISA Alert: Oracle E-Business Suite and SugarCRM Vulnerabilities Under Attack
2023-02-03 05:23:00
nessus
nessus
Oracle E-Business Suite (Oct 2022 CPU)
2022-10-20 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.97

Percentile

99.8%

JSON
Related for NVD:CVE-2022-21587
cisa_kev1vulnrichment1ics1cvelist1cve1prion1rapid7blog3githubexploit5packetstorm1attackerkb1zdt1metasploit1nuclei1thn1nessus1oracle1