---
id: "CVE-2022-21587"
kind: "vulnerability"
aliases: ["CVE-2022-21587"]
title: "Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload)"
severity: "critical"
cvss: 9.8
epss: null
exploited: true
status: "open"
category: "vendor"
products: [{"name": "Oracle E-Business Suite", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "oracle e-business suite", "fixed": [], "affected": ">= 12.2.3, <= 12.2.11", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "oracle-ebs", "ransomware", "self-hosted", "vendor"]
not_affected_if: ["managed-hosting"]
published_at: "2022-10-18T21:15:10+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T22:29:04+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-21587", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-21587", "first_seen_at": "2026-10-23T22:29:04+00:00"}]
---

# Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload)

Oracle E-Business Suite has an unspecified flaw in Oracle Web Applications Desktop Integrator that an unauthenticated attacker can reach over HTTP. CISA lists it as actively exploited, with ransomware use noted in the catalog.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Oracle E-Business Suite affected ? fixed ?
- vendor:oracle e-business suite affected >= 12.2.3, <= 12.2.11 fixed ?

## How to check

Check whether Oracle E-Business Suite is running and which patch level is installed; the sources do not give a file or command.

## Fix

Apply Oracle's security updates for this CVE per vendor instructions, as CISA requires.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-21587
- 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2022-21587

## From the sources

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Web Applications Desktop Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_