.. / CVE-2022-21587

• RCE
• Nuclei
• Web

Exploit for Oracle E-Business Suite 12.2.3 -12.2.11 - Remote Code Execution (CVE-2022-21587)

Description:

Oracle E-Business Suite 12.2.3 through 12.2.11 is susceptible to remote code execution via the Oracle Web Applications Desktop Integrator product, Upload component. An attacker with HTTP network access can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials.

Nuclei Template

View the template here CVE-2022-21587.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-21587.yaml

References: