POLICY-OTHER --
POLICY-OTHER Oracle E-Business Suite TCF Server vulnerable function access attempt
This rule blocks attempts to access a vulnerable function in Oracle's E-Business Suite TCF Server. In doing so, this rule will block potential SQL injection attempts leveraging an arbitrary SQL injection vulnerability in the custom protocol between the Forms Java client and the EBS webserver.
Rule fires on any external traffic to the vulnerable Oracle E-Business Suite TCF Server. $EXTERNAL_NET must be defined as !$HOME_NET for this to detect only external access.
No public information
No known false positives
Cisco Talos Intelligence Group
No rule groups
N/A
Not Applicable
CVE-2019-2633 |
Loading description
|
Tactic: Initial Access
Technique: Exploit Public-Facing Application
For reference, see the MITRE ATT&CK vulnerability types here: https://attack.mitre.org