CVE-2016-0480

Oracle Application Testing Suite (ATS) versions 12.4.0.2 and 12.5.0.2 expose a directory-traversal vulnerability in the DownloadServlet when processing the TMAPReportImage parameter (CVE-2016-0480). Exploitation allows remote unauthenticated attackers to read arbitrary files from the server. The ...

CVE-2016-0491

CVE-2016-0491 affects Oracle Application Testing Suite (ATS) within Oracle Enterprise Manager Grid Control, specifically ATS versions 12.4.0.2 and 12.5.0.2. Multiple sources document a vulnerability in the UploadFileUpload.do path that enables file upload and, via directory traversal or crafted i...

CVE-2016-0492

CVE-2016-0492 affects Oracle Application Testing Suite (ATS) within Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2. The vulnerability enables remote attackers to bypass authentication and potentially access or modify data through a directory traversal scenario involving the isAllowe...

CVE-2016-0489

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Test Manager for Web Apps. NOTE: the...

EUVD-2016-0520

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480,...

EUVD-2016-0521

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480,...

PT-2016-4241

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite affected versions not specified Description The issue is related to a Directory Traversal and Information Disclosure vulnerability in the DownloadServlet TMAPReportImage Parameter. This allows for potential...

PT-2016-4248

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.4.0.2 through 12.5.0.2 Description The issue affects confidentiality and integrity, potentially allowing remote attackers to bypass authentication and gain administrator access. It is related ...

CVE-2016-0487: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Test Manager for Web Apps, a different vulnerability than...

PT-2016-4252

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.4.0.2 through 12.5.0.2 Description The issue affects confidentiality and integrity, potentially allowing remote attackers to bypass authentication. It is related to Load Testing for Web Apps...

CVE-2016-0484: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps. NOTE: the previous information is from the Januar...

CVE-2016-0481: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480,...

CVE-2016-0489: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Test Manager for Web Apps. NOTE: the...

CVE-2016-0491: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect integrity and availability via unknown vectors related to Load Testing for Web Apps. NOTE: the previous information is from...

CVE-2016-0478: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Load Testing for Web Apps, a different vulnerability than CVE-2016-0476 and...

CVE-2016-0476: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Load Testing for Web Apps, a different vulnerability than CVE-2016-0477 and...

CVE-2016-0485: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480,...

CVE-2016-0490: Undefined Security Weakness

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Test Manager for Web Apps, a different vulnerability than...

PT-2016-4242

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite affected versions not specified Description The issue is related to a Directory Traversal Information Disclosure problem. It involves the scheduleReportName parameter in the DownloadServlet. This parameter is...

PT-2016-4246

Name of the Vulnerable Software and Affected Versions Oracle Application Testing Suite affected versions not specified Description The issue is related to a Directory Traversal and Information Disclosure vulnerability in the DownloadServlet exportFileName Parameter of the Oracle Application Testi...