CVE Advisory – Oracle BI Publisher – Unauthenticated Remote Code Execution
Tags
cmtmf-attack-pattern: Code Injection
attack-pattern: Data Code Injection - T1540 Credential Stuffing - T1110.004 Exploits - T1587.004 Exploits - T1588.005 Javascript - T1059.007 Server - T1583.004 Server - T1584.004 Vulnerabilities - T1588.006 Brute Force - T1110 Scripting - T1064 Scripting
Show in Graph
Common Information
Type Value
UUID ad1cb309-b223-4211-8fb4-4cfbcf1a105c
Fingerprint 35399dbb9a7a35c5
Analysis status DONE
Considered CTI value 2
Text language
Published May 5, 2024, 7:42 p.m.
Added to db Oct. 1, 2024, 1:19 p.m.
Last updated Nov. 11, 2024, 8:23 a.m.
Headline CVE Advisory – Oracle BI Publisher – Unauthenticated Remote Code Execution
Title CVE Advisory – Oracle BI Publisher – Unauthenticated Remote Code Execution
Detected Hints/Tags/Attributes 42/2/12
Source URLs
Redirection Url
Details Source https://yoroi.blog/2024/05/05/cve-advisory-partial-disclosure-oracle-bi-publisher-multiple-vulnerabilities/
URL Provider
Details Provider Source level domain
Details yoroi.blog yoroi.blog
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 409 ✔ Yoroi https://yoroi.company/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 2 
cve-2024-21082
Details CVE 2 
cve-2024-21083
Details CVE 2 
cve-2024-21084
Details Domain 157 
www.oracle.com
Details File 2 
cpujan2024.html
Details File 4 
cpuapr2024.html
Details File 2 
cpuapr2024verbose.html
Details IPv4 27 
7.0.0.0
Details IPv4 70 
12.2.1.4
Details Url 2 
https://www.oracle.com/security-alerts/cpujan2024.html
Details Url 4 
https://www.oracle.com/security-alerts/cpuapr2024.html
Details Url 2 
https://www.oracle.com/security-alerts/cpuapr2024verbose.html