CVE-2016-1000031
published 2016-10-25CVE-2016-1000031: Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution
PriorityP265critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
33.69%
98.4th percentile
Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | commons_fileupload | <= 1.3.2 | — |
| debian | libcommons-fileupload-java | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Target systems running Apache Struts 2.3.36 or prior are vulnerable; the attack vector is HTTP and the exploit is remotely triggered via crafted file upload data submitted to the application. ↗
- →The vulnerability is exploited by submitting crafted (malicious) data to the file upload endpoint of an affected system; inspect multipart/file-upload HTTP requests for anomalous or serialized payloads targeting DiskFileItem deserialization. ↗
- →Scan for presence of commons-fileupload JAR versions older than 1.3.3 in WEB-INF/lib directories of deployed Java web applications, particularly those built on Apache Struts 2. ↗
- →Protocol used for exploitation is HTTP; the vulnerability is remotely exploitable with no authentication required (CVSS 9.8). ↗
- ·The Commons FileUpload library can be patched independently of the full Struts upgrade by replacing only the JAR file, which may result in partially patched deployments that are still detectable by version scanning. ↗
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv9.8CRITICAL
vendor_cisco9.8CRITICAL
vendor_debian9.8LOW
vendor_oracle9.8CRITICAL
vendor_redhat9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Oracle Application Session Controller 3.7.1/3.8.0 Apache Commons FileUpload access control (Nessus ID 118732 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Application Session Controller 3.7.1/3.8.0 Apache Commons FileUpload access control (Nessus ID 118732 / ID 316356)
A vulnerability has been found in Oracle Application Session Controller 3.7.1/3.8.0 and classified as very critical. Affected by this issue is some unknown functionality of the component Apache Commons FileUpload. This manipulation causes improper access controls.
This vulnerability is registered as CVE-2016-1000031. Remote exploitation of the attack is possible. No exploit is available.
The affected component should be upgraded.
VulDB
Oracle Enterprise Manager Ops Center 12.3.3 Networking access control (Nessus ID 243897 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Enterprise Manager Ops Center 12.3.3 Networking access control (Nessus ID 243897 / ID 316356)
A vulnerability described as very critical has been identified in Oracle Enterprise Manager Ops Center 12.3.3. The impacted element is an unknown function of the component Networking. Executing a manipulation can lead to improper access controls.
This vulnerability appears as CVE-2016-1000031. The attack may be performed from remote. There is no available exploit.
Upgrading the affected component is recommended.
VulDB
Oracle Healthcare Master Person Index 3.0/4.0 Apache Commons FileUpload access control (ID 316356 / BID-93604)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Healthcare Master Person Index 3.0/4.0 Apache Commons FileUpload access control (ID 316356 / BID-93604)
A vulnerability was found in Oracle Healthcare Master Person Index 3.0/4.0. It has been rated as very critical. This impacts an unknown function of the component Apache Commons FileUpload. The manipulation leads to improper access controls.
This vulnerability is uniquely identified as CVE-2016-1000031. The attack is possible to be carried out remotely. No exploit exists.
Upgrading the affected component is advised.
VulDB
Oracle Retail Back Office 13.3/13.4/14.0/14.1 Apache Commons Fileupload access control (Nessus ID 118732 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Retail Back Office 13.3/13.4/14.0/14.1 Apache Commons Fileupload access control (Nessus ID 118732 / ID 316356)
A vulnerability, which was classified as very critical, was found in Oracle Retail Back Office 13.3/13.4/14.0/14.1. This affects an unknown part of the component Apache Commons Fileupload. Executing a manipulation can lead to improper access controls.
This vulnerability is registered as CVE-2016-1000031. It is possible to launch the attack remotely. No exploit is available.
You should upgrade the affected component.
VulDB
Oracle Identity Analytics 11.1.1.5.8 Apache Commons FileUpload access control (ID 316356 / BID-93604)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Identity Analytics 11.1.1.5.8 Apache Commons FileUpload access control (ID 316356 / BID-93604)
A vulnerability, which was classified as very critical, has been found in Oracle Identity Analytics 11.1.1.5.8. Impacted is an unknown function of the component Apache Commons FileUpload. The manipulation leads to improper access controls.
This vulnerability is traded as CVE-2016-1000031. It is possible to initiate the attack remotely. There is no exploit available.
It is advisable to upgrade the affected component.
VulDB
Oracle Banking Platform 2.4.0/2.4.1/2.5.0/2.6.0 Collections access control (Nessus ID 243897 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Banking Platform 2.4.0/2.4.1/2.5.0/2.6.0 Collections access control (Nessus ID 243897 / ID 316356)
A vulnerability identified as very critical has been detected in Oracle Banking Platform 2.4.0/2.4.1/2.5.0/2.6.0. The impacted element is an unknown function of the component Collections. Performing a manipulation results in improper access controls.
This vulnerability is cataloged as CVE-2016-1000031. It is possible to initiate the attack remotely. There is no exploit available.
You should upgrade the affected component.
VulDB
Oracle Communications Service Broker Engineered System Edition Admin server FileUpload access control (Nessus ID 243897 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Communications Service Broker Engineered System Edition Admin server FileUpload access control (Nessus ID 243897 / ID 316356)
A vulnerability was found in Oracle Communications Service Broker Engineered System Edition 6.0 and classified as very critical. This impacts an unknown function of the component Admin server FileUpload. The manipulation results in improper access controls.
This vulnerability is cataloged as CVE-2016-1000031. The attack may be launched remotely. There is no exploit available.
It is suggested to upgrade the affected component.
VulDB
Oracle FLEXCUBE Private Banking up to 12.1.0.0 Apache Commons FileUpload access control (Nessus ID 243897 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle FLEXCUBE Private Banking up to 12.1.0.0 Apache Commons FileUpload access control (Nessus ID 243897 / ID 316356)
A vulnerability labeled as very critical has been found in Oracle FLEXCUBE Private Banking 2.0.0.0/2.2.0.1/12.0.1.0/12.0.3.0/12.1.0.0. This affects an unknown function of the component Apache Commons FileUpload. Executing a manipulation can lead to improper access controls.
This vulnerability is registered as CVE-2016-1000031. It is possible to launch the attack remotely. No exploit is available.
The affected component should be upgraded.
VulDB
Oracle Convergence 3.0.2 Apache Commons FileUpload access control (Nessus ID 118732 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Convergence 3.0.2 Apache Commons FileUpload access control (Nessus ID 118732 / ID 316356)
A vulnerability was found in Oracle Convergence 3.0.2. It has been declared as very critical. This issue affects some unknown processing of the component Apache Commons FileUpload. Executing a manipulation can lead to improper access controls.
This vulnerability appears as CVE-2016-1000031. The attack may be performed from remote. There is no available exploit.
It is recommended to upgrade the affected component.
VulDB
Oracle Utilities Framework up to 4.4.0.0.0 User Interface access control (ID 316356 / BID-93604)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Utilities Framework up to 4.4.0.0.0 User Interface access control (ID 316356 / BID-93604)
A vulnerability, which was classified as very critical, has been found in Oracle Utilities Framework up to 4.4.0.0.0. This affects an unknown function of the component User Interface. The manipulation leads to improper access controls.
This vulnerability is uniquely identified as CVE-2016-1000031. The attack is possible to be carried out remotely. No exploit exists.
It is advisable to upgrade the affected component.
VulDB
Oracle Communications Services Gatekeeper up to 6.1.0.3.x Apache Commons Collections Fileupload access control (Nessus ID 118732 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Communications Services Gatekeeper up to 6.1.0.3.x Apache Commons Collections Fileupload access control (Nessus ID 118732 / ID 316356)
A vulnerability, which was classified as very critical, was found in Oracle Communications Services Gatekeeper up to 6.1.0.3.x. Affected by this issue is some unknown functionality of the component Apache Commons Collections Fileupload. Executing a manipulation can lead to improper access controls.
This vulnerability is registered as CVE-2016-1000031. It is possible to launch the attack remotely. No exploit is available.
You should upgrade the affected component.
VulDB
Oracle FLEXCUBE Core Banking 5.2.0/11.6.0/11.7.0/11.8.0 jQuery access control (Nessus ID 118732 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle FLEXCUBE Core Banking 5.2.0/11.6.0/11.7.0/11.8.0 jQuery access control (Nessus ID 118732 / ID 316356)
A vulnerability marked as very critical has been reported in Oracle FLEXCUBE Core Banking 5.2.0/11.6.0/11.7.0/11.8.0. Affected is an unknown function of the component jQuery. The manipulation leads to improper access controls.
This vulnerability is traded as CVE-2016-1000031. It is possible to initiate the attack remotely. There is no exploit available.
It is suggested to upgrade the affected component.
VulDB
Oracle Primavera Unifier up to 18.8 Apache Commons FileUpload access control (Nessus ID 243897 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Primavera Unifier up to 18.8 Apache Commons FileUpload access control (Nessus ID 243897 / ID 316356)
A vulnerability classified as very critical has been found in Oracle Primavera Unifier up to 18.8. Affected is an unknown function of the component Apache Commons FileUpload. The manipulation leads to improper access controls.
This vulnerability is uniquely identified as CVE-2016-1000031. The attack is possible to be carried out remotely. No exploit exists.
It is recommended to upgrade the affected component.
VulDB
Oracle Communications Diameter Signaling Router up to 8.2 Apache Commons Fileupload access control (Nessus ID 118732 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Communications Diameter Signaling Router up to 8.2 Apache Commons Fileupload access control (Nessus ID 118732 / ID 316356)
A vulnerability described as very critical has been identified in Oracle Communications Diameter Signaling Router up to 8.2. This affects an unknown function of the component Apache Commons Fileupload. The manipulation results in improper access controls.
This vulnerability is identified as CVE-2016-1000031. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is recommended.
VulDB
Oracle Retail Service Backbone up to 16.0 Install access control (Nessus ID 118732 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Retail Service Backbone up to 16.0 Install access control (Nessus ID 118732 / ID 316356)
A vulnerability was found in Oracle Retail Service Backbone up to 16.0. It has been classified as very critical. Impacted is an unknown function of the component Install. This manipulation causes improper access controls.
This vulnerability appears as CVE-2016-1000031. The attack may be initiated remotely. There is no available exploit.
Upgrading the affected component is recommended.
VulDB
Oracle Retail Xstore Point of Service 7.0/7.1 Xenvironment access control (ID 316356 / BID-93604)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Retail Xstore Point of Service 7.0/7.1 Xenvironment access control (ID 316356 / BID-93604)
A vulnerability was found in Oracle Retail Xstore Point of Service 7.0/7.1. It has been classified as very critical. This vulnerability affects unknown code of the component Xenvironment. Performing a manipulation results in improper access controls.
This vulnerability is cataloged as CVE-2016-1000031. It is possible to initiate the attack remotely. There is no exploit available.
Upgrading the affected component is recommended.
VulDB
Oracle Hospitality Guest Access 4.2.0/4.2.1 Apache Commons FileUpload access control (ID 316356 / BID-93604)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Hospitality Guest Access 4.2.0/4.2.1 Apache Commons FileUpload access control (ID 316356 / BID-93604)
A vulnerability identified as very critical has been detected in Oracle Hospitality Guest Access 4.2.0/4.2.1. Affected by this vulnerability is an unknown functionality of the component Apache Commons FileUpload. This manipulation causes improper access controls.
The identification of this vulnerability is CVE-2016-1000031. It is possible to initiate the attack remotely. There is no exploit available.
You should upgrade the affected component.
VulDB
Oracle Agile Recipe Management for Pharmaceuticals 9.3.3/9.3.4 Apache Commons FileUpload access control (ID 316356 / BID-93604)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Agile Recipe Management for Pharmaceuticals 9.3.3/9.3.4 Apache Commons FileUpload access control (ID 316356 / BID-93604)
A vulnerability was found in Oracle Agile Recipe Management for Pharmaceuticals 9.3.3/9.3.4. It has been rated as very critical. Affected by this vulnerability is an unknown functionality of the component Apache Commons FileUpload. Performing a manipulation results in improper access controls.
This vulnerability is cataloged as CVE-2016-1000031. It is possible to initiate the attack remotely. There is no exploit available.
Upgrading the affected component is advised.
VulDB
Oracle FLEXCUBE Enterprise Limits/Collateral Management 12.0/12.1 jQuery access control (Nessus ID 118732 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle FLEXCUBE Enterprise Limits/Collateral Management 12.0/12.1 jQuery access control (Nessus ID 118732 / ID 316356)
A vulnerability described as very critical has been identified in Oracle FLEXCUBE Enterprise Limits and Collateral Management 12.0/12.1. Affected by this vulnerability is an unknown functionality of the component jQuery. The manipulation results in improper access controls.
This vulnerability is known as CVE-2016-1000031. It is possible to launch the attack remotely. No exploit is available.
Upgrading the affected component is recommended.
VulDB
Oracle WebCenter Portal 12.2.1.3.0 Apache Commons FileUpload access control (ID 316356 / BID-93604)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle WebCenter Portal 12.2.1.3.0 Apache Commons FileUpload access control (ID 316356 / BID-93604)
A vulnerability was found in Oracle WebCenter Portal 12.2.1.3.0. It has been classified as very critical. This impacts an unknown function of the component Apache Commons FileUpload. Performing a manipulation results in improper access controls.
This vulnerability was named CVE-2016-1000031. The attack may be initiated remotely. There is no available exploit.
Upgrading the affected component is recommended.
VulDB
Oracle Retail Returns Management 13.3/13.4/14.0/14.1 Apache Commons Fileupload access control (Nessus ID 118732 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Retail Returns Management 13.3/13.4/14.0/14.1 Apache Commons Fileupload access control (Nessus ID 118732 / ID 316356)
A vulnerability was found in Oracle Retail Returns Management 13.3/13.4/14.0/14.1 and classified as very critical. This issue affects some unknown processing of the component Apache Commons Fileupload. The manipulation results in improper access controls.
This vulnerability is reported as CVE-2016-1000031. The attack can be launched remotely. No exploit exists.
It is suggested to upgrade the affected component.
VulDB
Oracle Communications Service Broker 6.0 Admin server FileUpload access control (Nessus ID 243897 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Communications Service Broker 6.0 Admin server FileUpload access control (Nessus ID 243897 / ID 316356)
A vulnerability has been found in Oracle Communications Service Broker 6.0 and classified as very critical. This affects an unknown function of the component Admin server FileUpload. The manipulation leads to improper access controls.
This vulnerability is listed as CVE-2016-1000031. The attack may be initiated remotely. There is no available exploit.
The affected component should be upgraded.
VulDB
Oracle FLEXCUBE Universal Banking 12.0.1-12.0.3/12.1.0 jQuery access control (Nessus ID 118732 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle FLEXCUBE Universal Banking 12.0.1-12.0.3/12.1.0 jQuery access control (Nessus ID 118732 / ID 316356)
A vulnerability classified as very critical has been found in Oracle FLEXCUBE Universal Banking 12.0.1-12.0.3/12.1.0. Affected by this issue is some unknown functionality of the component jQuery. This manipulation causes improper access controls.
This vulnerability is handled as CVE-2016-1000031. The attack can be initiated remotely. There is not any exploit available.
It is recommended to upgrade the affected component.
VulDB
Oracle API Gateway 11.1.2.4.0 Apache Commons FileUpload access control (Nessus ID 243897 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle API Gateway 11.1.2.4.0 Apache Commons FileUpload access control (Nessus ID 243897 / ID 316356)
A vulnerability labeled as very critical has been found in Oracle API Gateway 11.1.2.4.0. Affected by this vulnerability is an unknown functionality of the component Apache Commons FileUpload. The manipulation results in improper access controls.
This vulnerability is cataloged as CVE-2016-1000031. The attack may be launched remotely. There is no exploit available.
The affected component should be upgraded.
VulDB
Oracle Retail Order Broker 5.1/5.2/15.0/16.0 System Administration access control (ID 316356 / BID-93604)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Retail Order Broker 5.1/5.2/15.0/16.0 System Administration access control (ID 316356 / BID-93604)
A vulnerability, which was classified as very critical, was found in Oracle Retail Order Broker 5.1/5.2/15.0/16.0. Affected by this vulnerability is an unknown functionality of the component System Administration. The manipulation results in improper access controls.
This vulnerability is identified as CVE-2016-1000031. The attack can be executed remotely. There is not any exploit available.
You should upgrade the affected component.
VulDB
Oracle Fusion Middleware MapViewer 12.2.1.3.0 Freeimage access control (Nessus ID 118732 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Fusion Middleware MapViewer 12.2.1.3.0 Freeimage access control (Nessus ID 118732 / ID 316356)
A vulnerability was found in Oracle Fusion Middleware MapViewer 12.2.1.3.0. It has been declared as very critical. This impacts an unknown function of the component Freeimage. The manipulation results in improper access controls.
This vulnerability is cataloged as CVE-2016-1000031. The attack may be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
VulDB
Oracle Retail Central Office 13.3/13.4/14.0/14.1 Apache Commons Fileupload access control (Nessus ID 118732 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Retail Central Office 13.3/13.4/14.0/14.1 Apache Commons Fileupload access control (Nessus ID 118732 / ID 316356)
A vulnerability has been found in Oracle Retail Central Office 13.3/13.4/14.0/14.1 and classified as very critical. This vulnerability affects unknown code of the component Apache Commons Fileupload. The manipulation leads to improper access controls.
This vulnerability is documented as CVE-2016-1000031. The attack can be initiated remotely. There is not any exploit available.
The affected component should be upgraded.
VulDB
Oracle Siebel CRM 8.5.1.0 - 8.5.1.7/8.6.0/8.6.1 Oracle Knowledge access control (ID 316356 / BID-93604)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Siebel CRM 8.5.1.0 - 8.5.1.7/8.6.0/8.6.1 Oracle Knowledge access control (ID 316356 / BID-93604)
A vulnerability marked as very critical has been reported in Oracle Siebel CRM 8.5.1.0 - 8.5.1.7/8.6.0/8.6.1. Affected by this issue is some unknown functionality of the component Oracle Knowledge. The manipulation leads to improper access controls.
This vulnerability is traded as CVE-2016-1000031. It is possible to initiate the attack remotely. There is no exploit available.
It is suggested to upgrade the affected component.
VulDB
Oracle Application Testing Suite 13.1/13.2/13.3 jackson-databind access control (Nessus ID 118732 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Application Testing Suite 13.1/13.2/13.3 jackson-databind access control (Nessus ID 118732 / ID 316356)
A vulnerability categorized as very critical has been discovered in Oracle Application Testing Suite 13.1/13.2/13.3. This issue affects some unknown processing of the component jackson-databind. The manipulation results in improper access controls.
This vulnerability is reported as CVE-2016-1000031. The attack can be launched remotely. No exploit exists.
It is advisable to upgrade the affected component.
VulDB
Oracle Online Mediation Controller 6.1 Apache Commons FileUpload access control (Nessus ID 118732 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Online Mediation Controller 6.1 Apache Commons FileUpload access control (Nessus ID 118732 / ID 316356)
A vulnerability categorized as very critical has been discovered in Oracle Online Mediation Controller 6.1. The affected element is an unknown function of the component Apache Commons FileUpload. The manipulation results in improper access controls.
This vulnerability is known as CVE-2016-1000031. It is possible to launch the attack remotely. No exploit is available.
It is advisable to upgrade the affected component.
VulDB
Oracle Financial Services Analytical Applications Infrastructure AntiSamy access control (Nessus ID 118732 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Financial Services Analytical Applications Infrastructure AntiSamy access control (Nessus ID 118732 / ID 316356)
A vulnerability was found in Oracle Financial Services Analytical Applications Infrastructure up to 8.0.7. It has been declared as very critical. The affected element is an unknown function of the component AntiSamy. Executing a manipulation can lead to improper access controls.
This vulnerability is registered as CVE-2016-1000031. It is possible to launch the attack remotely. No exploit is available.
It is recommended to upgrade the affected component.
VulDB
Oracle Primavera P6 Enterprise Project Portfolio Management Web Access access control (Nessus ID 243897 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Primavera P6 Enterprise Project Portfolio Management Web Access access control (Nessus ID 243897 / ID 316356)
A vulnerability marked as very critical has been reported in Oracle Primavera P6 Enterprise Project Portfolio Management up to 18.8. This affects an unknown function of the component Web Access. Performing a manipulation results in improper access controls.
This vulnerability is known as CVE-2016-1000031. Remote exploitation of the attack is possible. No exploit is available.
It is suggested to upgrade the affected component.
VulDB
Oracle Agile PLM 9.3.3/9.3.4/9.3.5 Application Server access control (ID 316356 / BID-93604)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Agile PLM 9.3.3/9.3.4/9.3.5 Application Server access control (ID 316356 / BID-93604)
A vulnerability categorized as very critical has been discovered in Oracle Agile PLM 9.3.3/9.3.4/9.3.5. Affected by this issue is some unknown functionality of the component Application Server. Executing a manipulation can lead to improper access controls.
This vulnerability is registered as CVE-2016-1000031. It is possible to launch the attack remotely. No exploit is available.
It is advisable to upgrade the affected component.
VulDB
Oracle WebCenter Sites 12.2.1.3.0 OpenSSL access control (Nessus ID 118732 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle WebCenter Sites 12.2.1.3.0 OpenSSL access control (Nessus ID 118732 / ID 316356)
A vulnerability classified as very critical has been found in Oracle WebCenter Sites 12.2.1.3.0. This affects an unknown part of the component OpenSSL. Performing a manipulation results in improper access controls.
This vulnerability is reported as CVE-2016-1000031. The attack is possible to be carried out remotely. No exploit exists.
It is recommended to upgrade the affected component.
VulDB
Oracle Unified 8.0.0.2.0 Apache Commons FileUpload access control (Nessus ID 118732 / ID 316356)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Unified 8.0.0.2.0 Apache Commons FileUpload access control (Nessus ID 118732 / ID 316356)
A vulnerability identified as very critical has been detected in Oracle Unified 8.0.0.2.0. The impacted element is an unknown function of the component Apache Commons FileUpload. This manipulation causes improper access controls.
This vulnerability is handled as CVE-2016-1000031. The attack can be initiated remotely. There is not any exploit available.
You should upgrade the affected component.
VulDB
Oracle Endeca Information Discovery Integrator 3.2.0 Apache Commons FileUpload access control (ID 316356 / BID-93604)
vuldb·2026-10-08·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Endeca Information Discovery Integrator 3.2.0 Apache Commons FileUpload access control (ID 316356 / BID-93604)
A vulnerability classified as very critical has been found in Oracle Endeca Information Discovery Integrator 3.2.0. This vulnerability affects unknown code of the component Apache Commons FileUpload. Performing a manipulation results in improper access controls.
This vulnerability is reported as CVE-2016-1000031. The attack is possible to be carried out remotely. No exploit exists.
It is recommended to upgrade the affected component.
VulDB
Oracle MICROS Relate CRM Software 10.8/11.4 Web Services access control (Nessus ID 118732 / ID 316356)
vuldb·2026-10-07·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle MICROS Relate CRM Software 10.8/11.4 Web Services access control (Nessus ID 118732 / ID 316356)
A vulnerability described as very critical has been identified in Oracle MICROS Relate CRM Software 10.8/11.4. Impacted is an unknown function of the component Web Services. The manipulation results in improper access controls.
This vulnerability is reported as CVE-2016-1000031. The attack can be launched remotely. No exploit exists.
Upgrading the affected component is recommended.
VulDB
Apache Commons FileUpload access control (Nessus ID 102280 / ID 316356)
vuldb·2026-10-07·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Apache Commons FileUpload access control (Nessus ID 102280 / ID 316356)
A vulnerability marked as critical has been reported in Apache Commons FileUpload. This issue affects some unknown processing. This manipulation causes improper access controls.
This vulnerability is tracked as CVE-2016-1000031. The attack is possible to be carried out remotely. No exploit exists.
It is suggested to upgrade the affected component.
VulDB
Oracle Retail Customer Management/Segmentation Foundation Internal Operations access control (Nessus ID 102280 / ID 316356)
vuldb·2026-10-07·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Retail Customer Management/Segmentation Foundation Internal Operations access control (Nessus ID 102280 / ID 316356)
A vulnerability, which was classified as very critical, has been found in Oracle Retail Customer Management and Segmentation Foundation 16.0/17.0. This affects an unknown function of the component Internal Operations. Performing a manipulation results in improper access controls.
This vulnerability is known as CVE-2016-1000031. Remote exploitation of the attack is possible. No exploit is available.
It is advisable to upgrade the affected component.
OSV
Improper Access Control in commons-fileupload
osv·2018-12-21
CVE-2016-1000031 [CRITICAL] Improper Access Control in commons-fileupload
Improper Access Control in commons-fileupload
Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution
GHSA
Improper Access Control in commons-fileupload
ghsa·2018-12-21
CVE-2016-1000031 [CRITICAL] CWE-284 Improper Access Control in commons-fileupload
Improper Access Control in commons-fileupload
Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution
OSV
CVE-2016-1000031: Apache Commons FileUpload before 1
osv·2016-10-25·CVSS 9.8
CVE-2016-1000031 [CRITICAL] CVE-2016-1000031: Apache Commons FileUpload before 1
Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution
Oracle
Oracle Oracle Insurance Applications Risk Matrix: Development tools (Apache Commons FileUpload) — CVE-2016-1000031
vendor_oracle·2021-10-15·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Oracle Insurance Applications Risk Matrix: Development tools (Apache Commons FileUpload) — CVE-2016-1000031
Oracle Oracle Insurance Applications Risk Matrix: Development tools (Apache Commons FileUpload) vulnerability
CVE: CVE-2016-1000031
CVSS: 9.8
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpuoct2021 (OCT 2021)
Oracle
Oracle Oracle Enterprise Manager Risk Matrix: Reporting Framework (Apache Commons FileUpload) — CVE-2016-1000031
vendor_oracle·2021-01-15·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Oracle Enterprise Manager Risk Matrix: Reporting Framework (Apache Commons FileUpload) — CVE-2016-1000031
Oracle Oracle Enterprise Manager Risk Matrix: Reporting Framework (Apache Commons FileUpload) vulnerability
CVE: CVE-2016-1000031
CVSS: 9.8
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpujan2021 (JAN 2021)
Oracle
Oracle Oracle REST Data Services Risk Matrix: General (Apache Commons FileUpload) — CVE-2016-1000031
vendor_oracle·2020-10-15·CVSS 8.0
CVE-2016-1000031 [CRITICAL] Oracle Oracle REST Data Services Risk Matrix: General (Apache Commons FileUpload) — CVE-2016-1000031
Oracle Oracle REST Data Services Risk Matrix: General (Apache Commons FileUpload) vulnerability
CVE: CVE-2016-1000031
CVSS: 8.0
Protocol: HTTP
Remote exploit: No
Affected versions: Network
Advisory: cpuoct2020 (OCT 2020)
Oracle
Oracle Oracle Database Server Risk Matrix: MapViewer (Apache Commons FileUpload) — CVE-2016-1000031
vendor_oracle·2020-07-15·CVSS 8.8
CVE-2016-1000031 [CRITICAL] Oracle Oracle Database Server Risk Matrix: MapViewer (Apache Commons FileUpload) — CVE-2016-1000031
Oracle Oracle Database Server Risk Matrix: MapViewer (Apache Commons FileUpload) vulnerability
CVE: CVE-2016-1000031
CVSS: 8.8
Protocol: HTTP
Remote exploit: No
Affected versions: Network
Advisory: cpujul2020 (JUL 2020)
Oracle
Oracle Oracle Fusion Middleware Risk Matrix: BI Platform Security (Apache Commons FileUpload) — CVE-2016-1000031
vendor_oracle·2020-04-15·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Oracle Fusion Middleware Risk Matrix: BI Platform Security (Apache Commons FileUpload) — CVE-2016-1000031
Oracle Oracle Fusion Middleware Risk Matrix: BI Platform Security (Apache Commons FileUpload) vulnerability
CVE: CVE-2016-1000031
CVSS: 9.8
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpuapr2020 (APR 2020)
Oracle
Oracle Oracle Systems Risk Matrix: Software (Apache Commons FileUpload) — CVE-2016-1000031
vendor_oracle·2020-01-15·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Oracle Oracle Systems Risk Matrix: Software (Apache Commons FileUpload) — CVE-2016-1000031
Oracle Oracle Systems Risk Matrix: Software (Apache Commons FileUpload) vulnerability
CVE: CVE-2016-1000031
CVSS: 9.8
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpujan2020 (JAN 2020)
Cisco
Apache Struts Commons FileUpload Library Remote Code Execution Vulnerability Affecting Cisco Products: November 2018
vendor_cisco·2018-11-07·CVSS 9.8
CVE-2016-1000031 [CRITICAL] CWE-502 Apache Struts Commons FileUpload Library Remote Code Execution Vulnerability Affecting Cisco Products: November 2018
Apache Struts Commons FileUpload Library Remote Code Execution Vulnerability Affecting Cisco Products: November 2018
On November 5, 2018, the Apache Struts Team released a security announcement urging an upgrade of the Commons FileUpload library to version 1.3.3 on systems using Struts 2.3.36 or earlier releases. Systems using earlier versions of this library may be exposed to attacks that could allow execution of arbitrary code or modifications of files on the system. The issue is caused by a previously reported vulnerability of the Apache Commons FileUpload library, assigned to CVE-2016-1000031.
The vulnerability is due to insufficient validation of user-supplied input by the affected software. An attacker could exploit this vulnerability by submitting crafted data to an affected system
Red Hat
FileUpload: DiskFileItem file manipulation
vendor_redhat·2016-04-20·CVSS 9.8
CVE-2016-1000031 [CRITICAL] CWE-502 FileUpload: DiskFileItem file manipulation
FileUpload: DiskFileItem file manipulation
Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution
Package: commons-fileupload (Red Hat AMQ Broker 7) - Not affected
Package: tomcat (Red Hat Enterprise Linux 7) - Not affected
Package: commons-fileupload (Red Hat JBoss A-MQ 6) - Not affected
Package: commons-fileupload (Red Hat JBoss BRMS 6) - Not affected
Package: commons-fileupload (Red Hat JBoss Data Virtualization 6) - Not affected
Package: jbossas (Red Hat JBoss Enterprise Application Platform 5) - Not affected
Package: commons-fileupload (Red Hat JBoss Fuse 6) - Not affected
Package: commons-fileupload (Red Hat JBoss Fuse Service Works 6) - Not affected
Package: commons-fileupload (Red Hat JBoss Operations Network 3) - Not affected
Package
Debian
CVE-2016-1000031: libcommons-fileupload-java - Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Cod...
vendor_debian·2016·CVSS 9.8
CVE-2016-1000031 [CRITICAL] CVE-2016-1000031: libcommons-fileupload-java - Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Cod...
Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
Cisco
Apache Struts Commons FileUpload Library Remote Code Execution Vulnerability Affecting Cisco Products: November 2018
vendor_cisco
CVE-2016-1000031 Apache Struts Commons FileUpload Library Remote Code Execution Vulnerability Affecting Cisco Products: November 2018
CVE-2016-1000031: Apache Struts Commons FileUpload Library Remote Code Execution Vulnerability Affecting Cisco Products: November 2018
On November 5, 2018, the Apache Struts Team released a security announcement urging an upgrade of the Commons FileUpload library to version 1.3.3 on systems using Struts 2.3.36 or earlier releases. Systems using earlier versions of this library may be exposed to attacks that could allow execution of arbitrary code or modifications of files on the system. The issue is caused by a previously reported vulnerability of the Apache Commons FileUpload library, assigned to CVE-2016-1000031. The vulnerability is due to insufficient validation of user-supplied input by the affected software. An attacker could exploit this vulnerability by submitting crafted data to a
No detection rules found.
No public exploits indexed.
Tenable
Oracle January 2020 Critical Patch Update Contains 255 CVEs
blogs_tenable·2020-01-15
Oracle January 2020 Critical Patch Update Contains 255 CVEs
## Cloud Exposure
Tenable Cloud Security (CNAPP) Request a demo
Tenable Cloud Vulnerability Management Request a demo
Tenable CIEM Request a demo
Secure your cloud
## Vulnerability Exposure
Tenable Vulnerability Management Try for free
Tenable Security Center Request a demo
Tenable Web App Scanning Try for free
Tenable Patch Management Request a demo
Tenable Enclave Security Request a demo
Tenable Attack Surface Management Request a demo
Tenable Nessus Try for free
## AI Exposure
Tenable AI Exposure Request a demo
## OT/IoT Exposure
Tenable OT Security Request a demo
## Identity Exposure
Tenable Identity Exposure Request a demo
## Business needs
Active Directory
AI Security Posture Management (AI-SPM)
AWS security
Azure security
Cloud Security Posture Man
Tenable
Oracle Critical Patch Update for October Contains 180 Fixes
blogs_tenable·2019-10-16
Oracle Critical Patch Update for October Contains 180 Fixes
## Cloud Exposure
Tenable Cloud Security (CNAPP) Request a demo
Tenable Cloud Vulnerability Management Request a demo
Tenable CIEM Request a demo
Secure your cloud
## Vulnerability Exposure
Tenable Vulnerability Management Try for free
Tenable Security Center Request a demo
Tenable Web App Scanning Try for free
Tenable Patch Management Request a demo
Tenable Enclave Security Request a demo
Tenable Attack Surface Management Request a demo
Tenable Nessus Try for free
## AI Exposure
Tenable AI Exposure Request a demo
## OT/IoT Exposure
Tenable OT Security Request a demo
## Identity Exposure
Tenable Identity Exposure Request a demo
## Business needs
Active Directory
AI Security Posture Management (AI-SPM)
AWS security
Azure security
Cloud Security Posture Man
Tenable
Oracle Critical Patch Update For April Contains 297 Fixes
blogs_tenable·2019-04-17
Oracle Critical Patch Update For April Contains 297 Fixes
## Cloud Exposure
Tenable Cloud Security (CNAPP) Request a demo
Tenable Cloud Vulnerability Management Request a demo
Tenable CIEM Request a demo
Secure your cloud
## Vulnerability Exposure
Tenable Vulnerability Management Try for free
Tenable Security Center Request a demo
Tenable Web App Scanning Try for free
Tenable Patch Management Request a demo
Tenable Enclave Security Request a demo
Tenable Attack Surface Management Request a demo
Tenable Nessus Try for free
## AI Exposure
Tenable AI Exposure Request a demo
## OT/IoT Exposure
Tenable OT Security Request a demo
## Identity Exposure
Tenable Identity Exposure Request a demo
## Business needs
Active Directory
AI Security Posture Management (AI-SPM)
AWS security
Azure security
Cloud Security Posture Man
Tenable
Oracle’s January Critical Patch Update Addresses Nearly 300 Fixes
blogs_tenable·2019-01-15
Oracle’s January Critical Patch Update Addresses Nearly 300 Fixes
## Cloud Exposure
Tenable Cloud Security (CNAPP) Request a demo
Tenable Cloud Vulnerability Management Request a demo
Tenable CIEM Request a demo
Secure your cloud
## Vulnerability Exposure
Tenable Vulnerability Management Try for free
Tenable Security Center Request a demo
Tenable Web App Scanning Try for free
Tenable Patch Management Request a demo
Tenable Enclave Security Request a demo
Tenable Attack Surface Management Request a demo
Tenable Nessus Try for free
## AI Exposure
Tenable AI Exposure Request a demo
## OT/IoT Exposure
Tenable OT Security Request a demo
## Identity Exposure
Tenable Identity Exposure Request a demo
## Business needs
Active Directory
AI Security Posture Management (AI-SPM)
AWS security
Azure security
Cloud Security Posture Man
Tenable
Oracle’s January Critical Patch Update Addresses Nearly 300 Fixes
blogs_tenable·2019-01-15·CVSS 9.8
[CRITICAL] Oracle’s January Critical Patch Update Addresses Nearly 300 Fixes
Blog / Cyber Exposure Alerts
Subscribe
# Oracle’s January Critical Patch Update Addresses Nearly 300 Fixes
Satnam Narang
January 15, 2019
2 Min Read
Oracle addresses nearly 300 vulnerabilities in the first Critical Patch Update of 2019.
## Background
On January 15, Oracle released its Critical Patch Update, a quarterly publication of fixes for vulnerabilities. This month’s update contains nearly 300 fixes across a number of Oracle products.
## Analysis
The Critical Patch Update for January 2019 addresses a variety of vulnerabilities. For instance, Oracle published 30 fixes for MySQL, including a fix for MySQL Workbench to address the libssh vulnerability (CVE-2018-10933). There are also several fixes for CVE-2017-5645, a deserialization vulnerability in Apache Log4j, as well as CV
Tenable
Apache Struts Patches Remote Code Execution Vulnerability in FileUpload Library (CVE-2016-1000031)
blogs_tenable·2018-11-05·CVSS 9.8
CVE-2016-1000031 [CRITICAL] Apache Struts Patches Remote Code Execution Vulnerability in FileUpload Library (CVE-2016-1000031)
Blog / Cyber Exposure Alerts
Subscribe
# Apache Struts Patches Remote Code Execution Vulnerability in FileUpload Library (CVE-2016-1000031)
Satnam Narang
November 5, 2018
2 Min Read
Apache Software Foundation announces a security update for Apache Struts to address a vulnerability in the Commons FileUpload library that could lead to remote code execution. We recommend updating now.
## Background
On November 5, the Apache Software Foundation (ASF) published a security announcement to Apache Struts project administrators about CVE-2016-1000031, a vulnerability in the Commons FileUpload library originally reported by Tenable’s Research team in 2016. This library ships as part of Apache Struts 2 and is used as the default mechanism for file uploads. The ASF reports that Apache Struts 2.
Tenable
Apache Struts Patches Remote Code Execution Vulnerability in FileUpload Library (CVE-2016-1000031)
blogs_tenable·2018-11-05·CVSS 9.8
[CRITICAL] Apache Struts Patches Remote Code Execution Vulnerability in FileUpload Library (CVE-2016-1000031)
## Cloud Exposure
Tenable Cloud Security (CNAPP) Request a demo
Tenable Cloud Vulnerability Management Request a demo
Tenable CIEM Request a demo
Secure your cloud
## Vulnerability Exposure
Tenable Vulnerability Management Try for free
Tenable Security Center Request a demo
Tenable Web App Scanning Try for free
Tenable Patch Management Request a demo
Tenable Enclave Security Request a demo
Tenable Attack Surface Management Request a demo
Tenable Nessus Try for free
## AI Exposure
Tenable AI Exposure Request a demo
## OT/IoT Exposure
Tenable OT Security Request a demo
## Identity Exposure
Tenable Identity Exposure Request a demo
## Business needs
Active Directory
AI Security Posture Management (AI-SPM)
AWS security
Azure security
Cloud Security Posture Man
Greynoiseio
NoiseLetter February 2026
blogs_greynoiseio
NoiseLetter February 2026
CVE Disclosure Early Warning Get an early warning when traffic spikes indicate a high likelihood of new disclosures
Compromised Asset Detection Find out immediately if an asset communicates with a malicious IP address
Vulnerability Prioritization Get real-time insight into active exploitation trends to better understand risk and severity
SOC Efficiency Filter out noisy, low priority and false-positive alerts from mass internet scanners
Incident Investigation Add context to incidents to speed the determinations of scope and timelines
Threat Hunting Quickly identify anomalous behavior and enrich your threat hunting campaigns
Why GreyNoise
CVE Disclosure Early Warning Get an early warning when traffic spikes indicate a high likelihood of new disclosures
Compromised Asset Detection Fin
Bugzilla
CVE-2016-1000031 Apache Commons FileUpload: DiskFileItem file manipulation
bugzilla·2016-11-09·CVSS 9.8
CVE-2016-1000031 [CRITICAL] CVE-2016-1000031 Apache Commons FileUpload: DiskFileItem file manipulation
CVE-2016-1000031 Apache Commons FileUpload: DiskFileItem file manipulation
There exists a Java Object in the Apache Commons FileUpload library that can be manipulated in such a way that when it is deserialized, it can write or copy files to disk in arbitrary locations. Furthermore, while the Object can be used alone, this new vector can be integrated with ysoserial to upload and execute binaries in a single deserialization call. This may or may not work depending on an application's implementation of the FileUpload library.
External References:
http://www.tenable.com/security/research/tra-2016-12
Discussion:
We agree with Apache's assessment that this does not represent a valid vulnerability in the Commons File Upload library. We have previously written about Java deserialization flaw
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00036.htmlhttp://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.htmlhttp://www.securityfocus.com/bid/93604http://www.zerodayinitiative.com/advisories/ZDI-16-570/https://issues.apache.org/jira/browse/FILEUPLOAD-279https://issues.apache.org/jira/browse/WW-4812https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3Ehttps://lists.apache.org/thread.html/d66657323fd25e437face5e84899c8ca404ccd187e81c3f2fa8b6080%40%3Cannounce.apache.org%3Ehttps://security.netapp.com/advisory/ntap-20190212-0001/https://www.oracle.com/security-alerts/cpuapr2020.htmlhttps://www.oracle.com/security-alerts/cpujan2020.htmlhttps://www.oracle.com/security-alerts/cpujan2021.htmlhttps://www.oracle.com/security-alerts/cpujul2020.htmlhttps://www.oracle.com/security-alerts/cpujul2022.htmlhttps://www.oracle.com/security-alerts/cpuoct2020.htmlhttps://www.oracle.com/security-alerts/cpuoct2021.htmlhttps://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlhttps://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlhttps://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.htmlhttps://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.htmlhttps://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.htmlhttps://www.tenable.com/security/research/tra-2016-12https://www.tenable.com/security/research/tra-2016-23https://www.tenable.com/security/research/tra-2016-30http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00036.htmlhttp://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.htmlhttp://www.securityfocus.com/bid/93604http://www.zerodayinitiative.com/advisories/ZDI-16-570/https://issues.apache.org/jira/browse/FILEUPLOAD-279https://issues.apache.org/jira/browse/WW-4812https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3Ehttps://lists.apache.org/thread.html/d66657323fd25e437face5e84899c8ca404ccd187e81c3f2fa8b6080%40%3Cannounce.apache.org%3Ehttps://security.netapp.com/advisory/ntap-20190212-0001/https://www.oracle.com/security-alerts/cpuapr2020.htmlhttps://www.oracle.com/security-alerts/cpujan2020.htmlhttps://www.oracle.com/security-alerts/cpujan2021.htmlhttps://www.oracle.com/security-alerts/cpujul2020.htmlhttps://www.oracle.com/security-alerts/cpujul2022.htmlhttps://www.oracle.com/security-alerts/cpuoct2020.htmlhttps://www.oracle.com/security-alerts/cpuoct2021.htmlhttps://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlhttps://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlhttps://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.htmlhttps://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.htmlhttps://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.htmlhttps://www.tenable.com/security/research/tra-2016-12https://www.tenable.com/security/research/tra-2016-23https://www.tenable.com/security/research/tra-2016-30
2016-10-25
Published