{"id":"CVE-2022-21587","aliases":["EUVD-2022-26811","GHSA-64x7-wh2p-524g"],"status":"published","title":"Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business...","description":"Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Web Applications Desktop Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.98342,"percentile":0.99917,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-306"],"published":"2022-10-18T00:00:00Z","modified":"2026-06-17T04:26:34Z","kev":{"date_added":"2023-02-02","due_date":"2023-02-23","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Known"},"exploitation":[{"source":"euvd","since":"2023-02-02"},{"source":"kev","since":"2023-02-02"}],"exploits":[{"source":"metasploit","id":"exploit/linux/http/oracle_ebs_rce_cve_2022_21587","title":"Oracle E-Business Suite (EBS) Unauthenticated Arbitrary File Upload","type":"exploit","platform":"Linux","date":"2022-10-01","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/http/oracle_ebs_rce_cve_2022_21587"},{"source":"pocgithub","id":"hieuminhnv/CVE-2022-21587-POC","title":"hieuminhnv/CVE-2022-21587-POC","date":"2023-02-06","url":"https://github.com/hieuminhnv/CVE-2022-21587-POC"},{"source":"pocgithub","id":"rockmelodies/Oracle-E-BS-CVE-2022-21587-Exploit","title":"rockmelodies/Oracle-E-BS-CVE-2022-21587-Exploit","date":"2023-02-22","url":"https://github.com/rockmelodies/Oracle-E-BS-CVE-2022-21587-Exploit"},{"source":"pocgithub","id":"sahabrifki/CVE-2022-21587-Oracle-EBS-","title":"sahabrifki/CVE-2022-21587-Oracle-EBS-","date":"2023-03-03","url":"https://github.com/sahabrifki/CVE-2022-21587-Oracle-EBS-"},{"source":"nuclei","id":"CVE-2022-21587","title":"Oracle E-Business Suite 12.2.3 -12.2.11 - Remote Code Execution","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-21587.yaml"}],"products":[{"vendor":"oracle","product":"e-business suite"},{"vendor":"oracle","product":"e-business_suite"},{"vendor":"oracle corporation","product":"web applications desktop integrator"}],"references":[{"url":"https://www.oracle.com/security-alerts/cpuoct2022.html","tags":["x_transferred","Patch","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/171208/Oracle-E-Business-Suite-EBS-Unauthenticated-Arbitrary-File-Upload.html","tags":["x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-21587","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21587"},{"url":"https://github.com/advisories/GHSA-64x7-wh2p-524g"}],"sources":{"cve":[{"id":"CVE-2022-21587","description":"Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Web Applications Desktop Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).","status":"published","published":"2022-10-18T00:00:00Z","modified":"2025-10-21T23:15:33.318Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:34:29.478363Z"}],"euvd":[{"id":"EUVD-2022-26811","description":"Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Web Applications Desktop Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).","status":"published","published":"2022-10-18T00:00:00Z","modified":"2025-10-21T23:15:33Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"exploited_since":"2023-02-02","updated_at":"2026-11-02T20:31:26.48918Z"}],"ghsa":[{"id":"GHSA-64x7-wh2p-524g","title":"Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business...","description":"Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Web Applications Desktop Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).","status":"published","published":"2022-10-19T12:00:21Z","modified":"2025-10-22T00:32:38Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T15:04:05.954742Z"}],"kev":[{"id":"CVE-2022-21587","title":"Oracle E-Business Suite Unspecified Vulnerability","description":"Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator.","cwes":["CWE-306"],"kev":{"date_added":"2023-02-02","due_date":"2023-02-23","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Known"},"updated_at":"2026-11-02T17:00:16.234141Z"}],"nvd":[{"id":"CVE-2022-21587","description":"Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Web Applications Desktop Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).","status":"published","published":"2022-10-18T21:15:10.96Z","modified":"2026-06-17T04:26:34.01Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:07:30.6869Z"}]}}