Description
Oracle PeopleSoft是一款功能强大的企业级应用软件，主要用于支持企业的核心业务流程，包括人力资源管理、财务管理、供应链管理、客户关系管理等多个领域，该产品OraclePeopleSoft HttpListeningConnector接口存在XXE漏洞，攻击者可以有效对系统业务进行信息探索
Oracle PeopleSoft HttpListeningConnector接口存在XXE漏洞(CVE-2013-3821)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2013-3821
https://github.com/shadowsock5/notes/blob/master/Attacking-Oracle-PeopleSoft.md
https://blog.lexfo.fr/oracle-peoplesoft-xxe-to-rce.html
https://www.exploit-db.com/exploits/41925
https://www.oracle.com/security-alerts/cpujuly2013.html
https://www.ddpoc.com/DVB-2025-8810.html
https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2013-3821
https://cve.imfht.com/detail/CVE-2013-3821?lang=en