Full title: Oracle CTI Web Service - (EBS_ASSET_HISTORY_OPERATIONS) XML Entity Injection Exploit Category: web applications Platform: java # 0day.today @ http://0day.today/