CVE-2016-0455

CVE-2016-0455 affects Oracle Enterprise Manager Grid Control’s Enterprise Manager Base Platform Agent Next Gen component. Affected versions: 11.1.0.1, 11.2.0.4, 12.1.0.4, 12.1.0.5. The vulnerability is described as unspecified, with local attackers able to impact confidentiality and availability ...

CVE-2016-0443

Technical details for CVE-2016-0443 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-0481

CVE-2016-0481 is a directory traversal vulnerability in Oracle’s Application Testing Suite (ATS) DownloadServlet affecting the /otm/download endpoint via the scheduleReportName parameter. The connected advisories (CPAI-2016-0306) describe the flaw as due to insufficient input validation, enabling...

CVE-2016-0442

CVE-2016-0442 affects Oracle Enterprise Manager Grid Control’s Enterprise Manager Base Platform Loader Service in 12.1.0.4 and 12.1.0.5. The vulnerability enables remote authenticated users to impact confidentiality, integrity, and availability via unknown vectors related to the Loader Service. P...

CVE-2016-0478

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Load Testing for Web Apps, a different vulnerability than CVE-2016-0476 and...

CVE-2016-0442

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 and 12.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Loader Service...

CVE-2016-0491

CVE-2016-0491 affects Oracle Application Testing Suite (ATS) within Oracle Enterprise Manager Grid Control, specifically ATS versions 12.4.0.2 and 12.5.0.2. Multiple sources document a vulnerability in the UploadFileUpload.do path that enables file upload and, via directory traversal or crafted i...

CVE-2016-0484

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps. NOTE: the previous information is from the Januar...

CVE-2016-0476

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Load Testing for Web Apps, a different vulnerability than CVE-2016-0477 and...

CVE-2016-0411

Affected product: Oracle Enterprise Manager Grid Control (Enterprise Manager Base Platform, Agent Next Gen). Vulnerable on Grid Control 11.1.0.1 and 11.2.0.4; issue described as an unspecified vulnerability enabling local users to affect confidentiality, integrity, and availability via Agent Next...

CVE-2016-0489

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Test Manager for Web Apps. NOTE: the...

CVE-2016-0488

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Load Testing for Web Apps, a different vulnerability than...

CVE-2016-0443

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 12.1.0.4, and 12.1.0.5 allows remote attackers to affect confidentiality via unknown vectors related to Agent Next Gen...

CVE-2016-0492

CVE-2016-0492 affects Oracle Application Testing Suite (ATS) within Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2. The vulnerability enables remote attackers to bypass authentication and potentially access or modify data through a directory traversal scenario involving the isAllowe...

CVE-2016-0447

CVE-2016-0447 concerns an unspecified local vulnerability in Oracle Enterprise Manager Grid Control’s Enterprise Manager Base Platform Agent Next Gen component. The CVE affects Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 and is described as allowing local users to impact confidentiali...

CVE-2016-0449

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Agent Next Gen, a different...

CVE-2016-0445

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Agent Next Gen...

CVE-2015-4885

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.4 allows remote attackers to affect confidentiality via vectors related to Agent Next Gen...

CVE-2016-0427

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Framework...

CVE-2016-0491

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect integrity and availability via unknown vectors related to Load Testing for Web Apps. NOTE: the previous information is from...