CVE-2015-2605

CVE-2015-2605 affects Oracle Endeca Information Discovery Integrator ETL Server (Endeca IDI ETL Server) via a directory-traversal flaw in the MoveFile operation. Exploitation arises from insufficient input validation when handling crafted SOAP requests, enabling a remote authenticated attacker to...

CVE-2015-2604

CVE-2015-2604 concerns Oracle Endeca Information Discovery Integrator ETL Server CopyFile directory traversal. The issue arises from insufficient input validation in SOAP processing of the CopyFile operation, permitting a remote authenticated attacker to move arbitrary files on the target system ...