Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Affecting Test Manager for Web Apps
CVE-2016-0486

Currently unrated

Key Information:

Vendor

Oracle
Status
Application Testing Suite
Vendor
CVE Published:
21 January 2016

What is CVE-2016-0486?

An unspecified vulnerability within the Oracle Application Testing Suite component of Oracle Enterprise Manager Grid Control could allow remote attackers to compromise the confidentiality of the system. This issue has been linked to Test Manager for Web Apps and is distinct from other identified vulnerabilities. While Oracle has not explicitly confirmed claims suggesting that this entails a directory traversal flaw in the DownloadServlet servlet, it is suspected that attackers might exploit this to access arbitrary files by manipulating the exportFileName parameter.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.oracle.com/technetwork/topics/security/cpujan2...
x_refsource_CONFIRM
http://www.securitytracker.com/id/1034734
vdb-entryx_refsource_SECTRACK
http://www.zerodayinitiative.com/advisories/ZDI-16-040
x_refsource_MISC

EPSS Score

18% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.