CVE detail
CVE-2022-21587 — Oracle E-Business Suite Unspecified Vulnerability
Published 2023-02-02 · Modified 2023-02-02 · Source kev
HIGH
severity
CVSS-derived band
0.9834
EPSS probability
exploitation probability, 30d
100.0%
EPSS percentile
percentile vs all CVEs
LISTED
CISA KEV
due 2023-02-23
⚠ Actively exploited in the wild — CISA KEV listed 2023-02-02, federal remediation due 2023-02-23. RANSOMWARE
Description
Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator.
Remediation
No vendor-published fix data in our corpus for this CVE. Check the references below or the vendor's PSIRT / security advisories page.
References