← KEV catalog
CISA known exploited vulnerability

CVE-2022-21587

Oracle E-Business Suite Unspecified Vulnerability

SOURCE FACT

Oracle · E-Business Suite

Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator.

Required action

Apply updates per vendor instructions.

CISA notes

https://www.oracle.com/security-alerts/cpuoct2022.html; https://nvd.nist.gov/vuln/detail/CVE-2022-21587

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

Could this product be present?