---
id: 7334
title: "CVE-2022-21587 (Oracle E-Business Suite Unauthenticated RCE)"
cve: CVE-2022-21587
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/cve-2022-21587-oracle-e-business-suite-unauth-rce/"
published_at: "2023-01-16T08:13:34Z"
tags: ["rce", "vulnerability-analysis", "patch-analysis", "cve-2022-21587", "oracle-ebs", "erp-security"]
phying_url: "https://phying.com/item/7334"
lang: en
---

# CVE-2022-21587 (Oracle E-Business Suite Unauthenticated RCE)

## Summary

A walkthrough of CVE-2022-21587, unauthenticated RCE (CVSS 9.8) in Oracle EBS Web Applications Desktop Integrator's upload component, covering lab setup, EBS architecture and the vulnerable path.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **CVE:** CVE-2022-21587
- **Published:** 2023-01-16T08:13:34Z
- **Original:** https://blog.viettelcybersecurity.com/cve-2022-21587-oracle-e-business-suite-unauth-rce/
- **Phying News:** https://phying.com/item/7334