POLICY-OTHER --
POLICY-OTHER Oracle E-Business Suite TCF Server arbitrary SQL execution attempt
This rule blocks potential SQL injection attempts leveraging an arbitrary SQL execution vulnerability in the custom protocol between the Forms Java client and the EBS webserver.
Rule fires on any external traffic accessing the gVLOOP function in Oracle E-Business Suite TCF Server. $EXTERNAL_NET must be defined as !$HOME_NET for this to detect only external attempts.
No public information
No known false positives
Cisco Talos Intelligence Group
No rule groups
Authentication Bypass
An Authentication Bypass occurs when there is a way to avoid providing user credentials to a system before performing restricted operations on said system.
CVE-2019-2633 |
Loading description
|
CVE-2019-2638 |
Loading description
|
Tactic: Initial Access
Technique: Exploit Public-Facing Application
For reference, see the MITRE ATT&CK vulnerability types here: https://attack.mitre.org