.. / CVE-2019-2616

• XXE
• Nuclei
• Web

Exploit for Oracle Business Intelligence/XML Publisher - XML External Entity Injection (CVE-2019-2616)

Description:

Oracle Business Intelligence and XML Publisher 11.1.1.9.0 / 12.2.1.3.0 / 12.2.1.4.0 are vulnerable to an XML external entity injection attack.

Nuclei Template

View the template here CVE-2019-2616.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2019/CVE-2019-2616.yaml

References: