CVE

Id
86787  
CVE No.
CVE-2016-0491  
Status
Candidate  
Description
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect integrity and availability via unknown vectors related to Load Testing for Web Apps. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that the UploadFileAction servlet allows remote authenticated users to upload and execute arbitrary files via an * (asterisk) character in the fileType parameter.  
Phase
Assigned (20151209)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
759938 86787 CVE-2016-0491 EXPLOIT-DB:39691  View
759939 86787 CVE-2016-0491 URL:https://www.exploit-db.com/exploits/39691/  View
759940 86787 CVE-2016-0491 EXPLOIT-DB:39852  View
759941 86787 CVE-2016-0491 URL:https://www.exploit-db.com/exploits/39852/  View
759942 86787 CVE-2016-0491 MISC:http://packetstormsecurity.com/files/137175/Oracle-ATS-Arbitrary-File-Upload.html  View
759943 86787 CVE-2016-0491 MISC:http://www.zerodayinitiative.com/advisories/ZDI-16-047  View
759944 86787 CVE-2016-0491 MISC:http://www.rapid7.com/db/modules/exploit/multi/http/oracle_ats_file_upload  View
759945 86787 CVE-2016-0491 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html  View
759946 86787 CVE-2016-0491 BID:81169  View
759947 86787 CVE-2016-0491 URL:http://www.securityfocus.com/bid/81169  View
759948 86787 CVE-2016-0491 SECTRACK:1034734  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
449 JVNDB-2016-001222 Oracle E-Business Suite の Oracle CRM Technology Foundation における BIS Common Components に関する脆弱性 Oracle E-Business Suite の Oracle CRM Technology Foundation には、BIS Common Components に関する処理に不備があるため、完全性に影響のある脆弱性が存在します。 CVE-2016-0583 86787 4.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001222.html  View