CVE-2016-5537

published 2016-10-25

CVE-2016-5537: Unspecified vulnerability in the NetBeans component in Oracle Fusion Middleware 8.1 allows local users to affect confidentiality, integrity, and availability…

Priority P4 32 medium 5.7 CVSS 3.0

AV L AC L PR H UI N S C C L I L A L

EXPLOIT

Unspecified vulnerability in the NetBeans component in Oracle Fusion Middleware 8.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information is from the October 2016 CPU. Oracle has not commented on third-party claims that this issue is a directory traversal vulnerability which allows local users with certain permissions to write to arbitrary files and consequently gain privileges via a .. (dot dot) in a archive entry in a ZIP file imported as a project.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
apache	netbeans	>= 0 < 10.0-1	10.0-1
apache	netbeans	>= 0 < 10.0-1	10.0-1
apache	netbeans	>= 0 < 10.0-1	10.0-1
apache	netbeans	>= 0 < 10.0-1	10.0-1
debian	netbeans	< netbeans 10.0-1 (bookworm)	netbeans 10.0-1 (bookworm)
oracle	netbeans	—	—

CVSS provenance

nvd v3.0 5.7 MEDIUM CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

nvd v2.0 4.6 MEDIUM AV:L/AC:L/Au:N/C:P/I:P/A:P

osv 5.7 MEDIUM

vendor_debian 5.7 MEDIUM

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.