CVE-2022-21587 — Oracle E-Business Suite Unspecified Vulnerability

provenance: imported · CVE: CVE-2022-21587

CVE-2022-21587: Oracle E-Business Suite Unspecified Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Oracle
Product	E-Business Suite
Date added	2023-02-02
Due date	2023-02-23
Ransomware campaign use	Known

Description

Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://www.oracle.com/security-alerts/cpuoct2022.html; https://nvd.nist.gov/vuln/detail/CVE-2022-21587

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-21587
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog