Directory Traversal Vulnerability in Oracle Enterprise Manager Grid Control
CVE-2016-0478

Currently unrated

Key Information:

Vendor: Oracle
Status: Application Testing Suite
Vendor: CVE Published:; 21 January 2016

What is CVE-2016-0478?

A vulnerability exists within the Oracle Application Testing Suite component of Oracle Enterprise Manager Grid Control, which may allow remote attackers to access confidential information through unspecified vectors. This issue is associated with the Load Testing for Web Apps and is suspected to enable directory traversal attacks via the DownloadServlet servlet, allowing unauthorized reading of arbitrary files due to manipulation of the scriptName parameter.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch