CVE-2022-21587

Severity

critical · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2023-02-02

Reference

https://nvd.nist.gov/vuln/detail/CVE-2022-21587

⌖ exploited in the wild shame 80/100 ransomwareexploited-in-wild

Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator.

Players implicated

Oracle · vendor E-Business Suite · product

Description

Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator.

Affected FedRAMP products 10 in the catalog

Product	Provider	Status	Match
Aconex for Defense	Oracle	Authorized	vendor-exact · 0.90
Federal Managed Cloud Services	Oracle	Authorized	vendor-exact · 0.90
Fusion Cloud	Oracle	Authorized	vendor-exact · 0.90
Government Cloud - Common Controls	Oracle	Authorized	vendor-exact · 0.90
Oracle Cloud Infrastructure-Government Cloud	Oracle	Authorized	vendor-exact · 0.90
Oracle Enterprise Performance Management (EPM)	Oracle	Authorized	vendor-exact · 0.90
Oracle Enterprise Performance Management (EPM) - Moderate	Oracle	In Process	vendor-exact · 0.90
Oracle Service Cloud	Oracle	Authorized	vendor-exact · 0.90
Oracle Service Cloud (DOD)	Oracle	Authorized	vendor-exact · 0.90
Taleo Cloud - U.S. Government Cloud	Oracle	Authorized	vendor-exact · 0.90