[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fksddS8NeMsLznBMlLvPgsY51TUTVK-2uVnh4VeHPM1w":3,"g5a-risk:CVE-2022-21587":118},{"success":4,"data":5,"meta":115},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":27,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":41,"references":42,"referencesCount":65,"weaknesses":66,"weaknessesCount":41,"isActivelyExploited":4,"cisaInfo":75,"otxData":27,"relatedBlogPosts":76,"seoMetadata":77,"configurations":102,"relatedVendorCves":113,"notableEvents":114},"CVE-2022-21587","What is CVE-2022-21587?","Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Web Applications Desktop Integrator.","Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected ...","2022-10-18T21:15:10.96","2025-10-27T17:09:18.74",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":31,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"secalert_us@oracle.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[],[],0.98342,[32,32,32,32,32,32,32],"Critical",[36],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"oracle","e-business_suite","*","cpe:2.3:a:oracle:e-business_suite:*:*:*:*:*:*:*:*",1,[43,50,56,58,60],{"url":44,"source":45,"tags":46},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F171208\u002FOracle-E-Business-Suite-EBS-Unauthenticated-Arbitrary-File-Upload.html","Packetstormsecurity",[47,48,49],"Exploit","Third Party Advisory","VDB Entry",{"url":51,"source":52,"tags":53},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpuoct2022.html","Oracle",[54,55],"Patch","Vendor Advisory",{"url":44,"source":45,"tags":57},[47,48,49],{"url":51,"source":52,"tags":59},[54,55],{"url":61,"source":62,"tags":63},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2022-21587","CISA",[64],"US Government Resource",5,[67],{"id":68,"name":69,"description":70,"extendedDescription":71,"status":72,"abstraction":73,"structure":74},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","","Draft","Base","Simple",{"shortDescription":71,"requiredAction":71,"vulnerabilityName":71,"dateAdded":27},[],{"title":78,"metaDescription":79,"keywords":80,"canonicalUrl":81,"structuredData":82},"What is CVE-2022-21587? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-21587, a critical severity cyber security vulnerability from 2022. High exploit probability (98.3%). Vulnerability in the ...","CVE-2022-21587, CVE-2022-21587 vulnerability, CVE-2022-21587 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, oracle security, e-business_suite vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2022-21587",{"@context":83,"@type":84,"headline":78,"description":79,"datePublished":10,"dateModified":11,"author":85,"publisher":89,"about":93,"mainEntityOfPage":97,"articleSection":100,"keywords":101},"https:\u002F\u002Fschema.org","TechArticle",{"@type":86,"name":87,"url":88},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":86,"name":87,"url":88,"logo":90},{"@type":91,"url":92},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":94,"name":6,"description":95,"additionalType":96},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":98,"@id":99},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-21587","Cybersecurity","CVE-2022-21587, CVE-2022-21587 vulnerability, CVE-2022-21587 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[103],{"Operator":27,"Negate":27,"Nodes":104},[105],{"Operator":106,"Negate":107,"CPEMatch":108},"OR",false,[109],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":110,"VersionStartExcluding":27,"VersionStartIncluding":111,"VersionEndExcluding":27,"VersionEndIncluding":112},"7E6DF81E-E392-49E5-ADF4-510A3737A5CE","12.2.3","12.2.11",[],[],{"lastModified":11,"cacheTime":116,"version":117},1792353303369,"2.0",{"score":119,"band":34,"action":120,"scoredAt":121},90,"Emergency patch","2026-10-16T06:55:59.146467+00:00"]