'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

web_app:oracle_ebs_rce（Rule ID：1070210535）

Release Date：2025/9/15

Rule Name：CVE-2022-21587:Oracle E-Business Suite Remote Command Execution Vulnerability

Severity：critical

CVE ID：CVE-2022-21587

 

Descripiton：

Oracle E-Business Suite is a set of fully integrated global business management software of Oracle. The software provides customer relationship management, service management, financial management and other functions. There is a security vulnerability in Oracle Web Applications Desktop Integrator 12.2.3-12.2.11 of Oracle E-Business Suite. An unauthenticated attacker accesses the network via HTTP, thus destroying Oracle Web Applications Desktop Integrator. Successful exploitation of this vulnerability can lead to the takeover of Oracle Web Applications Desktop Integrator. This rule supports to defend the A6: Vulnerabe and Outdated Components of OWASP Top 10 - 2021.
Other reference：None

 

Solution：

Update vendor patches.