CVE-2022-21587

Oracle E-Business Suite Unspecified Vulnerability

E-Business Suite

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Web Applications Desktop Integrator. CVSS 3.1 Base Score 9.8…

18. Okt 2022

Ausgewertete Quellen

• Hersteller
  https://www.oracle.com/security-alerts/cpuoct2022.html
• Hinweis
  http://packetstormsecurity.com/files/171208/Oracle-E-Business-Suite-EBS-Unauthenticated-Arbitrary-File-Upload.html
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-21587
• CISA
  Oracle E-Business Suite Unspecified Vulnerability
• NVD
  CVE-2022-21587