6.4

CVE-2016-0490

EPSS 17.88%
Veröffentlicht 21.01.2016 03:00:38
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle secalert_us@oracle.com
Teams Watchlist Login
Unerledigt Login

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0487.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the UploadServlet servlet, which allows remote attackers to upload and execute arbitrary files via directory traversal sequences in a filename header.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Oracle ≫ Application Testing Suite Version12.4.0.2

Oracle ≫ Application Testing Suite Version12.5.0.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	17.88%	0.949

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.4	10	4.9	AV:N/AC:L/Au:N/C:P/I:P/A:N

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

Patch

Vendor Advisory

http://www.securitytracker.com/id/1034734

Third Party Advisory

VDB Entry

http://www.securityfocus.com/bid/81173

Third Party Advisory

VDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-16-039

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2016-0490

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-0490

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-0490

EUVD