6.4

CVE-2016-0490

EPSS 17.88%
Published 21.01.2016 03:00:38
Last modified 12.04.2025 10:46:40
Source secalert_us@oracle.com
Teams watchlist Login
Open Login

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0487.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the UploadServlet servlet, which allows remote attackers to upload and execute arbitrary files via directory traversal sequences in a filename header.

Affected products Warnungen 0 Metrics 2 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Oracle ≫ Application Testing Suite Version12.4.0.2

Oracle ≫ Application Testing Suite Version12.5.0.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	17.88%	0.949

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.4	10	4.9	AV:N/AC:L/Au:N/C:P/I:P/A:N

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

Patch

Vendor Advisory

http://www.securitytracker.com/id/1034734

Third Party Advisory

VDB Entry

http://www.securityfocus.com/bid/81173

Third Party Advisory

VDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-16-039

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2016-0490

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-0490

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-0490

EUVD