CVE-2016-0481

CVE-2016-0481 is a directory traversal vulnerability in Oracle’s Application Testing Suite (ATS) DownloadServlet affecting the /otm/download endpoint via the scheduleReportName parameter. The connected advisories (CPAI-2016-0306) describe the flaw as due to insufficient input validation, enabling...

CVE-2016-0476

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Load Testing for Web Apps, a different vulnerability than CVE-2016-0477 and...

CVE-2016-0492: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Load Testing for Web Apps, a different vulnerability than...

PT-2016-4239

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite affected versions not specified Description The issue is related to a Directory Traversal and Information Disclosure vulnerability in the DownloadServlet scriptName Parameter of the Oracle Application Testing...

CVE-2016-0489: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Test Manager for Web Apps. NOTE: the...

CVE-2016-0481: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480,...

CVE-2016-0480: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0481,...

CVE-2016-0488: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Load Testing for Web Apps, a different vulnerability than...

PT-2016-4246

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite affected versions not specified Description The issue is related to a Directory Traversal and Information Disclosure vulnerability in the DownloadServlet exportFileName Parameter of the Oracle Application Testi...

PT-2016-4242

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite affected versions not specified Description The issue is related to a Directory Traversal Information Disclosure problem. It involves the scheduleReportName parameter in the DownloadServlet. This parameter is...

PT-2016-4241

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite affected versions not specified Description The issue is related to a Directory Traversal and Information Disclosure vulnerability in the DownloadServlet TMAPReportImage Parameter. This allows for potential...

PT-2016-4238

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite affected versions not specified Description The issue is related to a directory traversal vulnerability in the DownloadServlet, allowing for information disclosure. This could potentially lead to unauthorized...

PT-2016-4237

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite affected versions not specified Description The issue is related to a Directory Traversal and Information Disclosure vulnerability in the DownloadServlet reportName Parameter of the Oracle Application Testing...

CVE-2016-0482: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480,...

CVE-2016-0486: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480,...

CVE-2016-0491: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect integrity and availability via unknown vectors related to Load Testing for Web Apps. NOTE: the previous information is from...

CVE-2016-0476: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Load Testing for Web Apps, a different vulnerability than CVE-2016-0477 and...

CVE-2016-0485: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480,...

CVE-2016-0477: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Load Testing for Web Apps, a different vulnerability than CVE-2016-0476 and...

CVE-2016-0484: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps. NOTE: the previous information is from the Januar...