¡¾Îó²îͨ¸æ¡¿Oracle Scripting iSurveyÄ£¿£¿£¿ £¿£¿£¿éÔ¶³Ì´úÂëÖ´ÐÐÎó²î(CVE-2025-30727)

Ðû²¼Ê±¼ä 2025-04-16

Ò»¡¢Îó²î¸ÅÊö


Îó²îÃû³Æ

Oracle Scripting iSurveyÄ£¿£¿£¿ £¿£¿£¿éÔ¶³Ì´úÂëÖ´ÐÐÎó²î

CVE   ID

CVE-2025-30727

Îó²îÀàÐÍ

´úÂëÖ´ÐÐ

·¢Ã÷ʱ¼ä

2025-04-16

Îó²îÆÀ·Ö

9.8

Îó²îÆ·¼¶

ÑÏÖØ

¹¥»÷ÏòÁ¿

ÍøÂç

ËùÐèȨÏÞ

ÎÞ

ʹÓÃÄѶÈ

µÍ

Óû§½»»¥

²»ÐèÒª

PoC/EXP

δ¹ûÕæ

ÔÚҰʹÓÃ

δ·¢Ã÷


Oracle ScriptingÊÇOracle E-Business SuiteÖеÄÒ»¸ö×é¼þ£¬ £¬£¬ÓÃÓÚ½¨ÉèºÍÖÎÀíÔÚÏßÊӲ졢±íµ¥¼°¶¯Ì¬¾ç±¾¡£¡£¡£¡£¡£ËüÔÊÐíÆóҵͨ¹ý¿É¶¨ÖƵľ籾ÍøÂçÓû§Êý¾Ý£¬ £¬£¬Ö§³ÖÓªÒµÁ÷³Ì×Ô¶¯»¯ºÍ¾öÒéÖ§³Ö¡£¡£¡£¡£¡£Oracle ScriptingÌṩÁËÎÞаµÄÎʾíÉè¼Æ¹¤¾ß£¬ £¬£¬Äܹ»ÓëÆäËûE-Business SuiteÄ£¿£¿£¿ £¿£¿£¿é¼¯³É£¬ £¬£¬ÊµÏÖÊý¾ÝµÄ×Ô¶¯»¯ÍøÂçÓë´¦Öóͷ£¡£¡£¡£¡£¡£¸ÃÄ£¿£¿£¿ £¿£¿£¿éÆÕ±éÓ¦ÓÃÓÚ¿Í»§ÊӲ졢·´ÏìÍøÂç¡¢ºÏ¹æÐÔÆÀ¹ÀµÈ³¡¾°¡£¡£¡£¡£¡£


2025Äê4ÔÂ16ÈÕ£¬ £¬£¬¼øºÚµ£±£Íø¼¯ÍÅVSRC¼à²âµ½OracleÐû²¼µÄCVE-2025-30727Ç徲ͨ¸æ¡£¡£¡£¡£¡£Í¨¸æÖ¸³ö£¬ £¬£¬Oracle E-Business Suite µÄ Oracle Scripting ²úÆ·£¨×é¼þ£ºiSurvey Module£©±£´æÒ»ÏîÑÏÖØÎó²î£¬ £¬£¬Î´ÈÏÖ¤µÄ¹¥»÷Õß¿Éͨ¹ýHTTPÍøÂç»á¼ûÔ¶³ÌʹÓøÃÎó²î£¬ £¬£¬¿ÉÄܵ¼ÖÂOracle ScriptingÔâµ½¿ØÖÆ¡£¡£¡£¡£¡£ÀÖ³ÉʹÓôËÎó²îµÄ¹¥»÷¿ÉÄܵ¼ÖÂOracle Scripting±»ÍêÈ«¹¥ÏÝ¡£¡£¡£¡£¡£Îó²îÆÀ·Ö9.8·Ö£¬ £¬£¬Îó²î¼¶±ðΪÑÏÖØ¡£¡£¡£¡£¡£


¶þ¡¢Ó°Ïì¹æÄ£


12.2.3 ¡Ü Oracle E-Business Suite ¡Ü 12.2.14


Èý¡¢Çå¾²²½·¥


3.1 Éý¼¶°æ±¾


¹Ù·½ÒÑÐû²¼Çå¾²²¹¶¡£¡£¡£¡£¡£¬ £¬£¬½¨ÒéÊÜÓ°ÏìÓû§¾¡¿ì¸üС£¡£¡£¡£¡£


ÏÂÔØÁ´½Ó£ºhttps://www.oracle.com/security-alerts/cpuapr2025.html/


3.2 ÔÝʱ²½·¥


ÔÝÎÞ¡£¡£¡£¡£¡£


3.3 ͨÓý¨Òé


? °´ÆÚ¸üÐÂϵͳ²¹¶¡£¡£¡£¡£¡£¬ £¬£¬ïÔ̭ϵͳÎó²î£¬ £¬£¬ÌáÉýЧÀÍÆ÷µÄÇå¾²ÐÔ¡£¡£¡£¡£¡£
? ÔöǿϵͳºÍÍøÂçµÄ»á¼û¿ØÖÆ£¬ £¬£¬Ð޸ķÀ»ðǽսÂÔ£¬ £¬£¬¹Ø±Õ·ÇÐëÒªµÄÓ¦Óö˿ڻòЧÀÍ£¬ £¬£¬ïÔÌ­½«Î£ÏÕЧÀÍ£¨ÈçSSH¡¢RDPµÈ£©Ì»Â¶µ½¹«Íø£¬ £¬£¬ïÔÌ­¹¥»÷Ãæ¡£¡£¡£¡£¡£
? Ê¹ÓÃÆóÒµ¼¶Çå¾²²úÆ·£¬ £¬£¬ÌáÉýÆóÒµµÄÍøÂçÇå¾²ÐÔÄÜ¡£¡£¡£¡£¡£
? ÔöǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬ £¬£¬ÆôÓöàÒòËØÈÏÖ¤»úÖƺÍ×îСȨÏÞÔ­Ôò£¬ £¬£¬Óû§ºÍÈí¼þȨÏÞÓ¦¼á³ÖÔÚ×îµÍÏ޶ȡ£¡£¡£¡£¡£
? ÆôÓÃÇ¿ÃÜÂëÕ½ÂÔ²¢ÉèÖÃΪ°´ÆÚÐ޸ġ£¡£¡£¡£¡£


3.4 ²Î¿¼Á´½Ó


https://www.oracle.com/security-alerts/cpuapr2025.html
https://nvd.nist.gov/vuln/detail/CVE-2025-30727