Description
Oracle Fusion Middleware中的WebLogic Server组件12.1.3.0版本和12.2.1.3版本的WLS - Web Services子组件存在安全漏洞。攻击者可利用该漏洞未授权访问数据，影响数据的保密性。
Oracle WebLogic Server组件 XXE 漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.ksyun.com/cms/notice/189.html
https://www.cnblogs.com/afanti/p/10274497.html
https://stack.chaitin.com/vuldb/detail/2b7c70ad-bab8-4cb7-acee-d449e702d6e3
https://www.venustech.com.cn/new_type/aqldfx/20201022/21898.html
https://www.shangyun51.com/articledetail?id=4778
https://scanv.yunaq.com/news/5bd6e64a46494d0a4015fd8e.html
https://qkl.seebug.org/vuldb/ssvid-98209
https://juejin.cn/post/6844903833911443469
https://www.acunetix.com/vulnerabilities/web/oracle-weblogic-t3-xxe-cve-2019-2647/
https://medium.com/@knownsec404team/weblogic-ejbtaglibdescriptor-xxe-vulnerability-analysis-cve-2019-2888-bd649f5fcfa6
https://threatprotect.qualys.com/2018/10/30/oracle-weblogic-server-xml-external-entity-vulnerability-cve-2018-3246/