Oracle HTTP Server 12c

What is the Oracle HTTP Server 12c?

The Oracle HTTP Server 12c module is designed to detect the presence of the Oracle HTTP Server 12c software. This module is used to perform scanning and identify misconfigurations, vulnerabilities, or fingerprint the software. It targets the Oracle HTTP Server 12c, a web server based on the Apache HTTP Server, which is commonly used in Oracle Fusion Middleware environments.

This module has an informative severity level, meaning it provides valuable information without indicating any immediate threats or vulnerabilities. It is authored by an unknown source.

Impact

This module does not have any direct impact on the target system. It is purely designed for detection purposes and does not perform any actions that could potentially harm the system.

How the module works?

The Oracle HTTP Server 12c module works by sending HTTP requests to the target system and analyzing the responses. It uses specific matching conditions to determine if the Oracle HTTP Server 12c software is present and potentially identify any misconfigurations or vulnerabilities.

One example of an HTTP request sent by this module could be:

GET / HTTP/1.1
Host: example.com
User-Agent: Vidoc-Scanner

The module uses matching conditions to determine if the target system matches the expected criteria. In this case, the matching conditions include:

- The presence of the "<title>Oracle HTTP Server 12c</title>" in the response body. - A response status code of 200.

If both conditions are met, the module considers the Oracle HTTP Server 12c software to be present on the target system.