exploit/multi/http/oracle_reports_rce

weaponized

Oracle Forms and Reports Remote Code Execution

view exploit source metasploittype exploitpublished 2014-01-15catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2012-3153US	medium6.4	98.2% (100th)	Exploit	2012-10-16
Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality a…
CVE-2012-3152US	critical9.1OT critical	98.8% (100th)	KEV	2012-10-16
Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality a…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.