EIP-2026-104039

The exploit demonstrates an arbitrary XML file disclosure vulnerability in Oracle Reports Server via a crafted HTTP GET request. The attack leverages improper access controls to read sensitive XML files by manipulating the 'CUSTOMIZE' parameter.