WEB_MISC oracle portal demo access

 

Code: p1493

Severity: Warning

 

Description: This event is generated when an attempt is made to access a demonstration application which may contain vulnerabilties on a server using the Oracle database system for the application.

Impact: Information gathering and system integrity compromise. Possible unauthorized administrative access to the server. Possible execution of arbitrary code of the attackers choosing in some cases.

Corrective: Remove the demo set of scripts Ensure the system is using an up to date version of the software and has had all vendor supplied patches applied. Check the host logfiles and application logs for signs of compromise.