SID 1:49899

Rule Category

SERVER-WEBAPP -- Snort has detected traffic exploiting vulnerabilities in web based applications on servers.

Alert Message

SERVER-WEBAPP Oracle Business Intelligence and XML Publisher XML external entity injection attempt

Rule Explanation

This event is generated when an Oracle Business Intelligence and XML Publisher XML external entity injection attempt is detected. Using this, an attacker can inject any arbitrary XML file and access data unauthorized. Impact: Web Application Attack Details: Ease of Attack:

What To Look For

No information provided

Known Usage

No public information

False Positives

No known false positives

Contributors

Cisco Talos Intelligence Group