Vulnerability in Oracle Application Testing Suite of Oracle Enterprise Manager
CVE-2016-0488

Currently unrated

Key Information:

Vendor

Oracle
Status
Application Testing Suite
Vendor
CVE Published:
21 January 2016

What is CVE-2016-0488?

This vulnerability in the Oracle Application Testing Suite, part of the Oracle Enterprise Manager Grid Control, allows remote attackers to potentially exploit weaknesses through directory traversal techniques. Specifically, it could enable an unauthorized user to interact with the admin pages and gain elevated access without proper authentication. The implications of this vulnerability could compromise the confidentiality and integrity of the system, highlighting the importance of timely updates and security measures.

References

http://www.oracle.com/technetwork/topics/security/cpujan2...
x_refsource_CONFIRM
http://www.zerodayinitiative.com/advisories/ZDI-16-035
x_refsource_MISC
http://www.securitytracker.com/id/1034734
vdb-entryx_refsource_SECTRACK

EPSS Score

7% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.