module

Oracle E-Business Suite (EBS) Unauthenticated Arbitrary File Upload

Disclosed
Oct 1, 2022

Description

This module exploits an unauthenticated arbitrary file upload vulnerability in Oracle Web Applications
Desktop Integrator, as shipped with Oracle EBS versions 12.2.3 through to 12.2.11, in
order to gain remote code execution as the oracle user.
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.