OracleOTM

OracleOTM Python tool for exploiting CVE-2021-35616 The script works in modules, which I implemented in the following order: ► Username enumeration ► Search for default credentials ► Run an SQL query using DBXML servlet ► Full exploitation and JSP execution The syntax of the script is as follows:...

Oracle Transportation Management Privilege Escalation (CVE-2021-35616)

A privilege escalation exists in Oracle Transportation Management. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

CVE-2021-35616

creationtimestamp| type| source ---|---|--- 2021-12-03 14:04:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/899 2021-12-03 15:07:24+00:00| published-proof-of-concept| https://t.me/hackertrick/513 2021-12-03 15:27:03+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/126...

CVE-2021-35616

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: UI Infrastructure. The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation...

CVE-2021-35616

CVE-2021-35616 affects Oracle Transportation Management (OTM), UI Infrastructure, version 6.4.3. A low-privilege, network-based attacker can exploit via HTTP to achieve unauthorized read, update, insert or delete of data, as described in the CVE. The base impact includes Confidentiality and Integ...