Lucene search
+L

320 matches found

Zero Day Initiative
Zero Day Initiative
•added 2016/01/25 12:00 a.m.•39 views

Oracle Application Testing Suite DownloadServlet file Parameter Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to exfiltrate arbitrary files on vulnerable installations of Oracle Application Testing Suite. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DownloadServlet servlet. By providing a file parameter...

5CVSS7.3AI score0.21922EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/01/25 12:00 a.m.•33 views

Oracle Application Testing Suite DownloadServlet reportName Parameter Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to exfiltrate arbitrary files on vulnerable installations of Oracle Application Testing Suite. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DownloadServlet servlet. By providing a reportName parameter...

5CVSS7.2AI score0.27519EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/01/25 12:00 a.m.•36 views

Oracle Application Testing Suite DownloadServlet reportName Parameter Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to exfiltrate arbitrary files on vulnerable installations of Oracle Application Testing Suite. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DownloadServlet. By providing a reportName parameter containi...

5CVSS7.3AI score0.21922EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/01/25 12:00 a.m.•37 views

Oracle Application Testing Suite DownloadServlet scriptName Parameter Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to exfiltrate arbitrary files on vulnerable installations of Oracle Application Testing Suite. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DownloadServlet. By providing a scriptName parameter containi...

5CVSS7.3AI score0.21922EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2016/01/25 12:00 a.m.•46 views

Oracle Application Testing Suite DownloadServlet exportFileName Parameter Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to exfiltrate arbitrary files on vulnerable installations of Oracle Application Testing Suite. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DownloadServlet servlet. By providing an exportFileName...

5CVSS7.2AI score0.27519EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/01/23 12:00 a.m.•21 views

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Oracle Application Testing Suite Load Testing for Web Apps Component (CNVD-2016-00673)

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. An unspecified security vulnerability in the Oracle Application Testing Suite Load Testing for Web Apps component of Oracle Enterprise Manager Grid Control allows remote attackers to exploit the...

5CVSS6.8AI score0.21922EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/01/23 12:00 a.m.•20 views

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Oracle Application Testing Suite Load Testing for Web Apps Component (CNVD-2016-00672)

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. An unspecified security vulnerability in the Oracle Application Testing Suite Load Testing for Web Apps component of Oracle Enterprise Manager Grid Control allows remote attackers to exploit the...

5CVSS6.8AI score0.21922EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/01/23 12:00 a.m.•21 views

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Oracle Application Testing Suite Load Testing for Web Apps Component (CNVD-2016-00693)

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. An unspecified vulnerability in the Oracle Application Testing Suite Load Testing for Web Apps component of Oracle Enterprise Manager Grid Control allows remote attackers to exploit the vulnerability to...

5CVSS6.8AI score0.27519EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/01/23 12:00 a.m.•23 views

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Oracle Application Testing Suite Test Manager for Web Apps Component (CNVD-2016-00704)

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. An unspecified vulnerability in the Oracle Application Testing Suite Test Manager for Web Apps component of Oracle Enterprise Manager Grid Control allows remote attackers to exploit the vulnerability to...

6.4CVSS9.1AI score0.6531EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/01/23 12:00 a.m.•21 views

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Oracle Application Testing Suite Test Manager for Web Apps Component (CNVD-2016-00669)

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. An unspecified security vulnerability in the Oracle Application Testing Suite Test Manager for Web Apps component of Oracle Enterprise Manager Grid Control allows remote attackers to exploit the...

6.4CVSS6.8AI score0.92145EPSS
SaveExploits6References1
NVD
NVD
•added 2016/01/21 3:00 a.m.•40 views

CVE-2016-0492

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Load Testing for Web Apps, a different vulnerability than...

6.4CVSS5.8AI score0.92145EPSS
SaveExploits6References8
OSV
OSV
•added 2016/01/21 3:00 a.m.•15 views

CVE-2016-0491

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect integrity and availability via unknown vectors related to Load Testing for Web Apps. NOTE: the previous information is from...

6AI score0.79948EPSS
SaveExploits7References8
NVD
NVD
•added 2016/01/21 3:00 a.m.•27 views

CVE-2016-0489

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Test Manager for Web Apps. NOTE: the...

6.5CVSS6AI score0.54782EPSS
SaveExploits0References4
NVD
NVD
•added 2016/01/21 3:00 a.m.•32 views

CVE-2016-0487

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Test Manager for Web Apps, a different vulnerability than...

6.4CVSS5.8AI score0.50888EPSS
SaveExploits0References4
OSV
OSV
•added 2016/01/21 3:00 a.m.•15 views

CVE-2016-0486

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480,...

5.9AI score0.27519EPSS
SaveExploits0References4
NVD
NVD
•added 2016/01/21 3:00 a.m.•34 views

CVE-2016-0486

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480,...

5CVSS5.5AI score0.27519EPSS
SaveExploits0References4
OSV
OSV
•added 2016/01/21 3:00 a.m.•21 views

CVE-2016-0485

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480,...

5.9AI score0.27519EPSS
SaveExploits0References4
OSV
OSV
•added 2016/01/21 3:00 a.m.•21 views

CVE-2016-0482

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480,...

5.9AI score0.21922EPSS
SaveExploits0References4
NVD
NVD
•added 2016/01/21 3:00 a.m.•27 views

CVE-2016-0482

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480,...

5CVSS5.5AI score0.21922EPSS
SaveExploits0References4
OSV
OSV
•added 2016/01/21 3:00 a.m.•16 views

CVE-2016-0481

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480,...

5.9AI score0.21922EPSS
SaveExploits0References4
Rows per page
Query Builder