Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2016-0488

EPSS 21.34% · P96
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2016-0488

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Load Testing for Web Apps, a different vulnerability than CVE-2016-0492. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the isAllowedUrl function in the admin pages, which allows remote attackers to bypass authentication and gain administrator access via directory traversal sequences following a URI entry that does not require authentication.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Oracle Enterprise Manager Grid Control Oracle Application Testing Suite组件安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Oracle Enterprise Manager Grid Control是美国甲骨文(Oracle)公司的一套系统管理软件。该软件为Oracle IT架构提供中心化监视、生命周期管理等功能。Oracle Application Testing Suite是其中的一个全面、集成的测试组件,它支持定义和管理应用测试过程、验证应用功能以及应用在负载下可正常工作等。 Oracle Enterprise Manager Grid Control 12.4.0.2版本和12.5.0.2版本的Oracle Appl
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2016-0488

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2016-0488

Please Login to view more intelligence information

Same Patch Batch · n/a · 2016-01-21 · 216 CVEs total

CVE-2016-0545Oracle E-Business Suite Oracle Customer Intelligence组件安全漏洞
CVE-2016-0532Oracle E-Business Suite Oracle CRM Technical Foundation组件安全漏洞
CVE-2016-0533Oracle E-Business Suite Oracle CRM Technical Foundation组件安全漏洞
CVE-2016-0534Oracle E-Business Suite Oracle Project Contracts组件安全漏洞
CVE-2016-0535Oracle Sun Solaris RPC子组件安全漏洞
CVE-2016-0536Oracle E-Business Suite Oracle Universal Work Queue组件安全漏洞
CVE-2016-0537Oracle E-Business Suite Oracle Human Resources组件安全漏洞
CVE-2016-0538Oracle E-Business Suite Oracle Financial Consolidation Hub组安全漏洞
CVE-2016-0539Oracle E-Business Suite Oracle Report Manager组件安全漏洞
CVE-2016-0540Oracle Supply Chain Products Suite Oracle Configurator组件安全漏洞
CVE-2016-0541Oracle Supply Chain Products Suite Oracle Configurator组件安全漏洞
CVE-2016-0542Oracle E-Business Suite Oracle Field Service组件安全漏洞
CVE-2016-0543Oracle E-Business Suite Oracle Marketing组件安全漏洞
CVE-2016-0544Oracle E-Business Suite Oracle Marketing组件安全漏洞
CVE-2016-0555Oracle E-Business Suite Oracle CADView-3D组件安全漏洞
CVE-2016-0552Oracle E-Business Suite Oracle Customer Intelligence组件安全漏洞
CVE-2016-0553Oracle E-Business Intelligence 安全漏洞
CVE-2016-0554Oracle E-Business Suite Oracle Interaction Center Intelligence组件安全漏洞
CVE-2016-0551Oracle E-Business Suite Oracle Customer Intelligence组件安全漏洞
CVE-2016-0556Oracle E-Business Suite Oracle Advanced Collections组件安全漏洞

Showing top 20 of 216 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2016-0488

No comments yet


Leave a comment