CVE-2022-39428critical

CVE-2022-39428: critical vulnerability in Oracle Corporation Web Applications Desktop…

Published · Updated

Follow this CVE+ Monitor Web Applications Desktop Integrator

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

40Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 37%
Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Web Applications Desktop Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Oracle Corporation · Web Applications Desktop Integrator
Related CVEs — Oracle Corporation Web Applications Desktop…

In the same product, most dangerous first.

CVE-2022-21587CRITICALCVE-2022-21587EPSS 98.3%KEVCVE-2017-10323—CVE-2017-10323EPSS 1.9%CVE-2020-2591HIGHCVE-2020-2591EPSS 1.3%CVE-2021-2434HIGHCVE-2021-2434EPSS 1.0%CVE-2024-21048MEDIUMCVE-2024-21048EPSS 0.4%CVE-2023-21847MEDIUMCVE-2023-21847EPSS 0.4%