oracle_ebs_xss Oracle E-Business Suite - Cross-Site Scripting · CloudMap

中危oracle_ebs_xss

Oracle E-Business Suite - Cross-Site Scripting

披露于 2024/01/15 · 更新于 2026/01/13

CVSS 评分—/ 10.0

EPSS 概率—利用概率预测

漏洞描述

Oracle E-Business Suite is vulnerable to Cross Site Scripting.

影响产品

oraclee-business_suite查看产品 →

修复建议

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

参考链接

www.blackhat.comhttps://www.blackhat.com/docs/us-16/materials/us-16-Litchfield-Hackproofing-Oracle-eBusiness-Suite.pdf↗www.davidlitchfield.comhttp://www.davidlitchfield.com/AssessingOraclee-BusinessSuite11i.pdf↗

RELATED INTELLIGENCE

同产品关联漏洞

与 e-business_suite 相关的其他公开漏洞。

查看全部 →

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
oracle_ebs_sqllog_exposure Oracle EBS SQL Log - Exposure e-business_suite	中危	—	—	PoCEXP	2026/01/14
CVE-2025-61884KEV Oracle E-Business Suite - Server-Side Request Forgery e-business_suite	高危	7.5	—	PoCEXP	2025/10/12
CVE-2025-61882KEVRCE Oracle E-Business Suite 12.2.3–12.2.14 – Remote Code Execution e-business_suite	严重	9.8	—	PoCEXP	2025/10/05
oracle_ebs_credentials Oracle E-Business System Credentials Page - Detect e-business_suite	高危	7.5	—	PoCEXP	2023/10/20
oracle_ebs_bispgrapgh_file_read Oracle eBusiness Suite - Improper File Access e-business_suite	严重	—	—	PoCEXP	2023/10/20
oracle_ebs_sqllog_disclosure Oracle EBS - SQL Log Disclosure e-business_suite	中危	5.3	—	PoCEXP	2023/10/20