CVE-2019-2557

🗓️ 23 Apr 2019 18:16:39Reported by oracleType

cve🔗 web.nvd.nist.gov👁 61 Views🌐 WEB

Vulnerability in Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	Oracle Application Testing Suite DownloadServlet Directory Traversal Remote Code Execution	23 Apr 201900:00	–	attackerkb
BDU FSTEC	The vulnerability of the Load Testing component in the Oracle Application Testing Suite, which is used for testing web applications, web services, and databases, allows a hacker to gain access to protected information, alter file access rights, or cause partial service disruption.	5 Sep 201900:00	–	bdu_fstec
Circl	CVE-2019-2557	24 May 201912:00	–	circl
Check Point Advisories	Oracle Application Testing Suite DownloadServlet Directory Traversal (CVE-2019-2557)	27 May 201900:00	–	checkpoint_advisories
Cvelist	CVE-2019-2557	23 Apr 201918:16	–	cvelist
Metasploit	Oracle Application Testing Suite Post-Auth DownloadServlet Directory Traversal	7 May 201919:56	–	metasploit
NVD	CVE-2019-2557	23 Apr 201919:32	–	nvd
Oracle	Oracle Critical Patch Update Advisory - April 2019	16 Apr 201900:00	–	oracle
OSV	CVE-2019-2557	23 Apr 201919:32	–	osv
Packet Storm	Oracle Application Testing Suite Post-Auth DownloadServlet Directory Traversal	31 Aug 202400:00	–	packetstorm

NVD

Vulners

Node

oracle application_testing_suiteMatch13.3.0.1

[
  {
    "product": "Application Testing Suite",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "13.3.0.1"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

Parameter	Position	Path	Description	CWE
name	query param	olt/download	Directory traversal via DownloadServlet to read arbitrary files on server (oats) using crafted name parameter	CWE-22

17 Jun 2026 02:34Current

5.4Medium risk

Vulners AI Score5.4

CVSS 36.3

CVSS 26.5

EPSS0.05503

SSVC