Directory Traversal Vulnerability in Oracle Application Testing Suite
CVE-2016-0489

Currently unrated

Key Information:

Vendor
Oracle
Status
Application Testing Suite
Vendor
CVE Published:
21 January 2016

Summary

An unspecified directory traversal vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Grid Control could allow remote authenticated users to compromise the system's confidentiality and integrity. This issue may facilitate unauthorized file upload and execution by exploiting directory traversal sequences in specific parameters, potentially leading to critical breaches in security. Users are advised to apply the latest patches and monitor their systems for any suspicious activity.

References

http://www.securityfocus.com/bid/81184
vdb-entryx_refsource_BID
http://www.oracle.com/technetwork/topics/security/cpujan2...
x_refsource_CONFIRM
http://www.zerodayinitiative.com/advisories/ZDI-16-038
x_refsource_MISC

EPSS Score

17% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.