CVE-2022-39428

critical · 9.8

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Web Applications Desktop Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

9.8

CVSS

36.5%

EPSS (exploit prob.)

98th

EPSS percentile

2022-10-18

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Vendor	Product	Affected versions
oracle	web_applications_desktop_integrator	>= 12.2.3, <= 12.2.11

Check a specific version with /api/v1/cve/match.

References

https://www.oracle.com/security-alerts/cpuoct2022.html
https://www.oracle.com/security-alerts/cpuoct2022.html

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2022-39428