CVE-2022-21587: Oracle E-Business Suite Unspecified Vulnerability. Oracle

Oracle E-Business Suite Unspecified Vulnerability. Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator.

• CISA KEV-listed (remediation due 2023-02-23)
• used in ransomware campaigns
• EPSS 94.4% (100.0% percentile)

Detection rules

• Potential CVE-2022-21587 Exploitation Attempt high

Browse the CVE database

Read the full analysis on IntelFusions