Lucene search
OracleCVELIST:CVE-2016-0480HistoryJan 21, 2016 - 2:00 a.m.
CVE-2016-0480
2016-01-2102:00:00
oracle
www.cve.org
11
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0481, CVE-2016-0482, CVE-2016-0485, and CVE-2016-0486. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the DownloadServlet servlet, which allows remote attackers to read arbitrary files via directory traversal sequences in the TMAPReportImage parameter.
Related
prion
prion
Directory traversal
2016-01-21 03:00:00
Directory traversal
2016-01-21 03:00:00
Directory traversal
2016-01-21 03:00:00
cve
cve
cvelist
cvelist
nvd
nvd
openvas
openvas
Oracle Application Testing Suite Multiple Vulnerabilities
2016-11-25 00:00:00
zdi
zdi
Oracle Application Testing Suite DownloadServlet scheduleReportName Parameter Directory Traversal Information Disclosure Vulnerability
2016-01-25 00:00:00
checkpoint_advisories
checkpoint_advisories
oracle
oracle
Oracle Critical Patch Update - January 2016
2016-01-19 00:00:00