Description

Due to insecure handling of XML DTD, Oracle EBS lcmServiceController script allows remote attackers to interact with internal network resources via Blind Server Side Request Forgery (SSRF).

Remediation

Upgrade to the latest version of Oracle E-Business Suite

References

Oracle Critical Patch Update Advisory - October 2018

Related Vulnerabilities

WordPress Plugin Print My Blog-Print, PDF, & eBook Converter Server-Side Request Forgery (1.6.5)

Apache Unomi MVEL RCE (CVE-2020-13942)

Oracle Access Manager 'opensso' Deserialization RCE (CVE-2021-35587)

WordPress Server-Side Request Forgery (SSRF) Vulnerability (CVE-2016-4029)

Apache Log4j socket receiver deserialization vulnerability

Severity

Medium

Classification

CVE-2018-3167 CWE-918 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Acumonitor SSRF