Lucene search
+L

98 matches found

OSV
OSV
added 2022/10/18 9:15 p.m.5 views

CVE-2022-39428

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: Upload. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web...

9.8CVSS5.8AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/10/18 9:15 p.m.5 views

CVE-2022-39428

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: Upload. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web...

9.8CVSS5.8AI score0.36455EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2022/10/18 9:15 p.m.20 views

CVE-2022-39428

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: Upload. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web...

9.8CVSS0.36455EPSS
SaveExploits0References1
NVD
NVD
added 2022/10/18 9:15 p.m.26 views

CVE-2022-21587

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: Upload. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web...

9.8CVSS0.98342EPSS
SaveExploits7References3
OSV
OSV
added 2022/10/18 9:15 p.m.5 views

CVE-2022-21587

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: Upload. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web...

9.8CVSS5.8AI score0.98342EPSS
SaveExploits7References3
Prion
Prion
added 2022/10/18 9:15 p.m.30 views

Code injection

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: Upload. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web...

7.5CVSS9.4AI score0.98342EPSS
SaveExploits7References2Affected Software1
Prion
Prion
added 2022/10/18 9:15 p.m.17 views

Code injection

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: Upload. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web...

7.5CVSS9.2AI score0.36455EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/10/18 12:0 a.m.62 views

CVE-2022-21587

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: Upload. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web...

9.8CVSS9.5AI score0.98342EPSS
SaveExploits7References2
Positive Technologies
Positive Technologies
added 2022/10/18 12:0 a.m.4 views

PT-2022-6231

Name of the Vulnerable Software and Affected Versions Oracle Web Applications Desktop Integrator versions 12.2.3 through 12.2.11 Description A flaw exists in the Upload component of Oracle Web Applications Desktop Integrator within Oracle E-Business Suite. This issue allows an unauthenticated...

9.8CVSS7.8AI score0.98342EPSS
SaveExploits7References55
Cvelist
Cvelist
added 2022/10/18 12:0 a.m.31 views

CVE-2022-39428

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: Upload. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web...

9.8CVSS9.5AI score0.36455EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/10/18 12:0 a.m.31 views

CVE-2022-21587

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: Upload. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web...

9.8CVSS7.6AI score0.98342EPSS
SaveExploits7References2
CVE
CVE
added 2022/10/18 12:0 a.m.65 views

CVE-2022-39428

CVE-2022-39428 affects Oracle Web Applications Desktop Integrator, a component of Oracle E-Business Suite. The vulnerability is in the Upload module and affects supported versions 12.2.3–12.2.11. An unauthenticated attacker with network access over HTTP can compromise the component, potentially l...

9.8CVSS9.3AI score0.36455EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/10/18 12:0 a.m.865 views

CVE-2022-21587

CVE-2022-21587 : An unauthenticated remote code execution in Oracle Web Applications Desktop Integrator (Upload) affects Oracle E-Business Suite 12.2.3–12.2.11. The vulnerability permits network-access via HTTP to compromise the Web Apps Desktop Integrator and can lead to full takeover, with CVSS...

9.8CVSS9.4AI score0.98342EPSS
SaveIn wildExploits7References3Affected Software1
Vulnrichment
Vulnrichment
added 2022/10/18 12:0 a.m.13 views

CVE-2022-39428

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: Upload. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web...

9.8CVSS7.5AI score0.36455EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/06/15 12:0 a.m.13 views

The vulnerability of the Application Service component of the software for working with Oracle Web Applications Desktop Integrator allows a perpetrator to gain access to modify, add, or delete data, or to gain unauthorized access to protected information.

The vulnerability of the Application Service component of the Oracle Web Applications Desktop Integrator software exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, or gain unauthorized...

8.5CVSS7.6AI score0.00987EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2021/07/21 3:16 p.m.23 views

CVE-2021-2434

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: Application Service. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

8.1CVSS0.00987EPSS
SaveExploits0References1
OSV
OSV
added 2021/07/21 3:16 p.m.10 views

CVE-2021-2434

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: Application Service. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

8.1CVSS7.3AI score0.00987EPSS
SaveExploits0References1
Prion
Prion
added 2021/07/21 3:16 p.m.20 views

Design/Logic Flaw

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: Application Service. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

5.5CVSS8AI score0.00987EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2021/07/21 12:0 a.m.43 views

Oracle E-Business Suite Unauthorized Access Vulnerability (CNVD-2021-57441)

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on, a collection of management software, is a seamless integration of a management suite. Oracle Workflow...

8.1CVSS7.8AI score0.00987EPSS
SaveExploits0References1
CVE
CVE
added 2021/07/20 10:44 p.m.67 views

CVE-2021-2434

CVE-2021-2434 affects Oracle E-Business Suite’s Oracle Web Applications Desktop Integrator (component: Application Service). Affected versions are 12.1.3 and 12.2.3–12.2.10. The vulnerability allows a low-privileged, unauthenticated attacker with network access via HTTP to compromise the Oracle W...

8.1CVSS7.8AI score0.00987EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder