漏洞描述 Oracle E-Business Suite以一套整合的技术为您提供市场领先的 Oracle 数据库和应用服务器产品。通过与 OracleEnterprise Manager 10g Grid Control 等 Oracle 基础架构管理工具相集成,Oracle E-Business Suite提供企业级的可伸缩性、性能和高可用性,可为任何规模的企业降低总拥有成本。其bscpgraph.jsp存在文件读取漏洞, 攻击者通过漏洞可以读取服务器上的文件
相关漏洞推荐 Oracle_E_Business 存在SSRF(CVE-2025-61884) Oracle E-Business Suite 未授权访问漏洞(CVE-2025-61882) Oracle E-Business Suite 远程代码执行漏洞 Oracle E-Business Suite /OA_HTML/jtfwrepo.xml 敏感信息泄漏漏洞 Oracle PeopleSoft /PSIGW/PeopleSoftServiceListeningConnector XML 外部实体注入漏洞(CVE-2017-3548) POC CVE-2012-3153: Oracle Forms & Reports RCE (CVE-2012-3152 & CVE-2012-3153) POC CVE-2014-4210: Oracle Weblogic - Server-Side Request Forgery POC CVE-2017-1000028: Oracle GlassFish Server Open Source Edition 4.1 - Local File Inclusion POC CVE-2017-1000029: Oracle GlassFish Server Open Source Edition 3.0.1 - Local File Inclusion POC CVE-2017-10075: Oracle Content Server - Cross-Site Scripting POC CVE-2017-10271: Oracle WebLogic Server - Remote Command Execution POC CVE-2017-3506: Oracle Fusion Middleware Weblogic Server - Remote OS Command Execution POC CVE-2017-3528: Oracle E-Business Suite 12.1.3/12.2.x - Open Redirect