Description
Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.
Remediation
References
Related Vulnerabilities
OpenSSL Other Vulnerability (CVE-2014-3510)
MySQL CVE-2019-2481 Vulnerability (CVE-2019-2481)
Jenkins Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2020-2105)
WordPress Plugin AnyMind Widget Cross-Site Request Forgery (1.1)
WordPress Plugin Photospace Responsive Gallery Unspecified Vulnerability (1.1.7)