Advisory: XXE Injection in Oracle Database (CVE-2014-6577)

This blog dives into the XML Parser module in Oracle Database being vulnerable to XML External Entity (XXE) Injection.

NetSPI