Vulnerability CVE-2022-21587

Vulnerability CVE-2022-21587

Published: 2022-10-18

Description:

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Web Applications Desktop Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

See advisories in our WLB2 database:

	Topic	Author	Date
High	Oracle E-Business Suite (EBS) Unauthenticated Arbitrary File Upload	sf	01.03.2023

Type:

CWE-264

(Permissions, Privileges, and Access Controls)

References:

https://www.oracle.com/security-alerts/cpuoct2022.html

Copyright 2024, cxsecurity.com