CVE-2022-21587
Oracle E-Business Suite Unspecified Vulnerability
CVSS
—
Sem CVSS
EPSS
98.3%
p100
KEV
SIM
2 de fev. de 2023
Exploit Today
80
0-100
Publicado: — · Última mod.: —
98.3%EPSS · 30 dias98.3%
2026-10-082026-11-05
Produto
Oracle / E-Business Suite
Vulnerabilidade
Oracle E-Business Suite Unspecified Vulnerability
Adicionado ao KEV
2 de fev. de 2023
Corrigir até
23 de fev. de 2023
Uso conhecido em ransomware
Sim
Descrição resumida
Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator.
Ação necessária
Apply updates per vendor instructions.
Notas
https://www.oracle.com/security-alerts/cpuoct2022.html; https://nvd.nist.gov/vuln/detail/CVE-2022-21587
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-468179.8 CRÍ96.2%
KEV—79Oracle E-Business Suite Improper Privilege Management Vulnerability108dCVE-2025-618847.5 ALT99.9%
KEV—80Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability28dCVE-2025-618829.8 CRÍ100.0%
KEV—80Oracle E-Business Suite Unspecified Vulnerability28d