CVE Watch—

CVE-2022-21587

Oracle E-Business Suite Unspecified Vulnerability

CVSS

—

No CVSS

EPSS

98.3%

p100

KEV

YES

Feb 2, 2023

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

98.3%EPSS · 30 days98.3%

2026-09-162026-10-14

KEV catalog record

Product

Oracle / E-Business Suite

Vulnerability

Oracle E-Business Suite Unspecified Vulnerability

Added to KEV

Feb 2, 2023

Remediate by

Feb 23, 2023

Known ransomware use

Yes

Summary description

Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator.

Required action

Apply updates per vendor instructions.

Notes

https://www.oracle.com/security-alerts/cpuoct2022.html; https://nvd.nist.gov/vuln/detail/CVE-2022-21587

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-468179.8 CRI

56.1%

KEV—67Oracle E-Business Suite Improper Privilege Management Vulnerability86d CVE-2025-618847.5 HIG

99.9%

KEV—80Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability7d CVE-2025-618829.8 CRI

100.0%

KEV—80Oracle E-Business Suite Unspecified Vulnerability6d