Oracle Hyperion Planning 11.1.2.3 - XML External Entity Vulnerability

Exploit for multiple platform in category web applications - Exploit Title: XXE Injection Oracle Hyperion - Exploit Author: Lucas Dinucci email protected - Twitter: @identik1t - Vendor Homepage: https://www.oracle.com/applications/performance-management - Affected Product: Oracle Hyperion...

Oracle Hyperion Planning 11.1.2.3 - XML External Entity

Oracle Hyperion Planning 11.1.2.3 - XML External Entity - Exploit Title: XXE Injection Oracle Hyperion - Exploit Author: Lucas Dinucci [email protected] - Twitter: @identik1t - Vendor Homepage: https://www.oracle.com/applications/performance-management - Date: 02/11/2019 - Affected Product:...

CVE-2019-2861

creationtimestamp| type| source ---|---|--- 2019-07-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47196...

Oracle Hyperion Planning 11.1.2.3 - XML External Entity

Exploit Title: XXE Injection Oracle Hyperion - Exploit Author: Lucas Dinucci [email protected] - Twitter: @identik1t - Vendor Homepage: https://www.oracle.com/applications/performance-management - Date: 02/11/2019 - Affected Product: Oracle Hyperion Enterprise Performance Management System -...

CVE-2019-2861

CVE-2019-2861 affects Oracle Hyperion Planning (Security subcomponent) with affected version 11.1.2.4; multiple sources describe an XML External Entity (XXE) vulnerability that could disclose internal files, with exploitation demonstrated for Hyperion Planning 11.1.2.3. The attacks require authen...