CVE-2007-0222
published 2007-01-17CVE-2007-0222: Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Server 10g allows remote attackers to read arbitrary files…
PriorityP431medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
10.61%
95.3th percentile
Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Server 10g allows remote attackers to read arbitrary files via unknown vectors, probably "\.." sequences in the beanId parameter. NOTE: this is likely a duplicate of another CVE that Oracle addressed in CPU Jan 2007, but due to lack of details by Oracle, it is unclear which BugID this issue is associated with, so the other CVE cannot be determined. Possibilities include EM02 (CVE-2007-0292) or EM05 (CVE-2007-0293).
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | application_server | — | — |
| oracle | enterprise_manager | — | — |
| oracle | enterprise_manager | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7rm7-hf9f-8hgx: Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10
ghsa_unreviewed·2022-05-01·CVSS 5.0
CVE-2007-0292 [MEDIUM] GHSA-7rm7-hf9f-8hgx: Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10
Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 have unknown impact and attack vectors related to Oracle Agent, aka (1) EM01 and (2) EM02. NOTE: EM05 might be related to CVE-2007-0222.
GHSA
GHSA-h382-3v8j-jf8j: Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Server 10g allows remote attackers to read arbitrary
ghsa_unreviewed·2022-05-01·CVSS 7.5
CVE-2007-0222 [HIGH] GHSA-h382-3v8j-jf8j: Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Server 10g allows remote attackers to read arbitrary
Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Server 10g allows remote attackers to read arbitrary files via unknown vectors, probably "\.." sequences in the beanId parameter. NOTE: this is likely a duplicate of another CVE that Oracle addressed in CPU Jan 2007, but due to lack of details by Oracle, it is unclear which BugID this issue is associated with, so the other CVE cannot be determined. Possibilities include EM02 (CVE-2007-0292) or EM05 (CVE-2007-0293).
GHSA
GHSA-fhch-36p7-phf8: Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10
ghsa_unreviewed·2022-05-01·CVSS 5.0
CVE-2007-0293 [MEDIUM] GHSA-fhch-36p7-phf8: Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10
Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 and 10.2.0.1 have unknown impact and attack vectors related to (1) Oracle Agent (EM03) and (2) EM04 and (3) EM05 in Enterprise Manager Console. NOTE: EM05 might be related to CVE-2007-0222.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/23794http://securitytracker.com/id?1017522http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.htmlhttp://www.securityfocus.com/archive/1/457105/100/0/threadedhttp://www.securityfocus.com/archive/1/458657/100/0/threadedhttp://www.securityfocus.com/bid/22027http://www.securityfocus.com/bid/22083http://secunia.com/advisories/23794http://securitytracker.com/id?1017522http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.htmlhttp://www.securityfocus.com/archive/1/457105/100/0/threadedhttp://www.securityfocus.com/archive/1/458657/100/0/threadedhttp://www.securityfocus.com/bid/22027http://www.securityfocus.com/bid/22083
2007-01-17
Published