References https://avd.aliyun.com/detail?id=AVD-2022-21636 https://cve.imfht.com/detail/CVE-2015-2615 https://zone.ci/aliyun/ali_nvd/204384.html https://www.nsfocus.net/vulndb/36512 https://avd.aliyun.com/detail?id=AVD-2020-14625 https://www.netentsec.com/support/show-loopholeupgrade-5237.html https://github.com/advisories/GHSA-jpw8-46mw-jgq7 https://cve.imfht.com/detail/CVE-2025-50071?lang=en https://www.resecurity.com/ar/blog/article/cve-2025-61882-mass-exploitation-oracle-e-business-suite-ebs-under-attack-by-cl0p-ransomware https://www.oracle.com/security-alerts/alert-cve-2025-61882.html https://soc.cyber.wa.gov.au/advisories/20251006001-Oracle-Ebusiness-Vulnerability/ https://dbugs.ptsecurity.com/vulnerability/PT-2023-3623
Related VulnerabilitiesPoCCVE-2026-35273: Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCEPoCCVE-2026-39352: Frappe Framework < 16.15.0 - Arbitrary File Read via render_include Path TraversalPoCfrappe-default-login: Frappe Framework - Default Login CredentialsPoCCVE-2025-41242: Spring Framework - Path TraversalPoCCVE-2024-38819: Spring Framework Path Traversal in Functional Web FrameworksPoCCVE-2020-9314: Oracle iPlanet Web Server 7.0.x - Image InjectionPoCoracle-ebs-sqllog-exposure: Oracle EBS SQL Log - ExposureServerless Framework 未授权 命令注入漏洞PoCCVE-2021-2135: Oracle WebLogic Server - Remote Code ExecutionAstro Web Framework Cloudflare /_image 服务器端请求伪造漏洞(CVE-2025-58179)Spring Framework路径遍历漏洞(CVE-2024-38819)Oracle Identity Manager /iam/governance/applicationmanagement/api/v1/applications/groovyscriptstatus;.wadl 命令执行漏洞(CVE-2025-61757)