{"uuid": "e9ad6562-2fdc-498c-a2c4-751c0cd2ef9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21587", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/oracle_ebs_rce_cve_2022_21587.rb", "content": "{\"aliases\": [], \"arch\": \"java\", \"author\": [\"sf \", \"HMs\", \"l1k3beef\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated arbitrary file upload vulnerability in Oracle Web Applications\\n          Desktop Integrator, as shipped with Oracle EBS versions 12.2.3 through to 12.2.11, in\\n          order to gain remote code execution as the oracle user.\", \"disclosure_date\": \"2022-10-01\", \"fullname\": \"exploit/linux/http/oracle_ebs_rce_cve_2022_21587\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 13:20:20 +0000\", \"name\": \"Oracle E-Business Suite (EBS) Unauthenticated Arbitrary File Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/oracle_ebs_rce_cve_2022_21587.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/oracle_ebs_rce_cve_2022_21587\", \"references\": [\"CVE-2022-21587\", \"URL-https://attackerkb.com/topics/Bkij5kK1qK/cve-2022-21587/rapid7-analysis\", \"URL-https://blog.viettelcybersecurity.com/cve-2022-21587-oracle-e-business-suite-unauth-rce/\", \"URL-https://github.com/hieuminhnv/CVE-2022-21587-POC\"], \"rport\": 8000, \"session_types\": false, \"targets\": [\"Oracle EBS on Linux (OVA Install)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:50.029457Z"}