CVE-2016-0480: Medium severity oracle application testing suite vulnerability
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0481, CVE-2016-0482, CVE-2016-0485, and CVE-2016-0486. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the DownloadServlet servlet, which allows remote attackers to read arbitrary files via directory traversal sequences in the TMAPReportImage parameter.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0480?
CVE-2016-0480 poses a risk to confidentiality, indicating a moderate to high severity depending on the context of its exploitation.
How do I fix CVE-2016-0480?
To address CVE-2016-0480, apply the latest patches provided by Oracle for the affected versions of the Oracle Application Testing Suite.
Which versions of Oracle Application Testing Suite are affected by CVE-2016-0480?
CVE-2016-0480 affects Oracle Application Testing Suite versions 12.4.0.2 and 12.5.0.2.
Can CVE-2016-0480 be exploited remotely?
Yes, CVE-2016-0480 allows remote attackers to exploit the vulnerability, impacting the confidentiality of the system.
What components of Oracle Enterprise Manager Grid Control are impacted by CVE-2016-0480?
CVE-2016-0480 specifically affects the Test Manager for Web Apps component in Oracle Application Testing Suite.