.. / CVE-2019-2588

• LFI
• Nuclei
• Web

Exploit for Oracle Business Intelligence - Path Traversal (CVE-2019-2588)

Description:

Oracle Business Intelligence versions 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0 are vulnerable to path traversal in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).

Nuclei Template

View the template here CVE-2019-2588.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2019/CVE-2019-2588.yaml

References: