Strike ID:
E19-0sld1
CVSS:
2.6 (AV:N/AC:H/Au:N/C:N/I:N/A:P)
False Positive:
t
Variants:
1
Year:
2019

Description

This strike exploits an arbitrary file deletion vulnerability in Oracle SE 8. The vulnerability is due to improper filtering of jlnp URL variable. An attacker can entice the victim to click the malicious link. Successful exploitation may lead to file deletion on client side.

CVE

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-%7B2019-2449%7D

References

https://support.ixiacom.com/%7B%7D

MSB

https://technet.microsoft.com/en-us/library/security/MS{}

BID

http://www.securityfocus.com/bid/{106597}

ExploitDB

http://www.exploit-db.com/exploits/{}

Secunia

http://secunia.com/advisories/{}

Security Tracker

http://securitytracker.com/id?%7B%7D

Metasploit

https://github.com/rapid7/metasploit-framework/blob/master/modules/{}

ZDI

http://www.zerodayinitiative.com/advisories/ZDI-{}

Google

https://code.google.com/p/google-security-research/issues/detail?id=%7B%7D

OSVDB

{}