EIP-2026-104027
PRE-CVEOracle 11g - Multiple Privilege Escalation Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-104027. PoCs published by David Litchfield.
AI-analyzed exploit summary This Metasploit module exploits a privilege escalation flaw in Oracle Database 11g R1/R2 by abusing the DBMS_JVM_EXP_PERMS package to grant Java IO privileges, enabling arbitrary OS command execution. It leverages SQL injection to manipulate policy permissions and execute system commands via Java.
Description
Oracle 11g - Multiple Privilege Escalation Vulnerabilities
Exploits (1)
This Metasploit module exploits a privilege escalation flaw in Oracle Database 11g R1/R2 by abusing the DBMS_JVM_EXP_PERMS package to grant Java IO privileges, enabling arbitrary OS command execution. It leverages SQL injection to manipulate policy permissions and execute system commands via Java.