Oracle Application Testing Suite vulnerabilities
71 known vulnerabilities affecting oracle/application_testing_suite.
Total CVEs
71
CISA KEV
1
actively exploited
Public exploits
8
Exploited in wild
3
Severity breakdown
CRITICAL8HIGH30MEDIUM33
Vulnerabilities
Page 4 of 4
CVE-2016-0486MEDIUMCVSS 5.0v12.4.0.2v12.5.0.22016-01-21
CVE-2016-0486 [MEDIUM] CVE-2016-0486: Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480, CVE-2016-0481, CVE-2016-0482, and CVE-2016-0485. NOTE: the previous
nvd
CVE-2016-0492MEDIUMCVSS 6.4PoCv12.4.0.2v12.5.0.22016-01-21
CVE-2016-0492 [MEDIUM] CVE-2016-0492: Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Load Testing for Web Apps, a different vulnerability than CVE-2016-0488. NOTE: the previous information is from the January 20
nvd
CVE-2016-0480MEDIUMCVSS 5.0v12.4.0.2v12.5.0.22016-01-21
CVE-2016-0480 [MEDIUM] CVE-2016-0480: Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0481, CVE-2016-0482, CVE-2016-0485, and CVE-2016-0486. NOTE: the previous
nvd
CVE-2016-0489MEDIUMCVSS 6.5v12.4.0.2v12.5.0.22016-01-21
CVE-2016-0489 [MEDIUM] CVE-2016-0489: Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Test Manager for Web Apps. NOTE: the previous information is from the January 2016 CPU. Oracle has no
nvd
CVE-2016-0488MEDIUMCVSS 6.4v12.4.0.2v12.5.0.22016-01-21
CVE-2016-0488 [MEDIUM] CVE-2016-0488: Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Load Testing for Web Apps, a different vulnerability than CVE-2016-0492. NOTE: the previous information is from the January 20
nvd
CVE-2016-0482MEDIUMCVSS 5.0v12.4.0.2v12.5.0.22016-01-21
CVE-2016-0482 [MEDIUM] CVE-2016-0482: Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480, CVE-2016-0481, CVE-2016-0485, and CVE-2016-0486. NOTE: the previous
nvd
CVE-2016-0478MEDIUMCVSS 5.0v12.4.0.2v12.5.0.22016-01-21
CVE-2016-0478 [MEDIUM] CVE-2016-0478: Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Load Testing for Web Apps, a different vulnerability than CVE-2016-0476 and CVE-2016-0477. NOTE: the previous information is from the Januar
nvd
CVE-2016-0487MEDIUMCVSS 6.4v12.4.0.2v12.5.0.22016-01-21
CVE-2016-0487 [MEDIUM] CVE-2016-0487: Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0490. NOTE: the previous information is from the January 20
nvd
CVE-2016-0490MEDIUMCVSS 6.4v12.4.0.2v12.5.0.22016-01-21
CVE-2016-0490 [MEDIUM] CVE-2016-0490: Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0487. NOTE: the previous information is from the January 20
nvd
CVE-2016-0485MEDIUMCVSS 5.0v12.4.0.2v12.5.0.22016-01-21
CVE-2016-0485 [MEDIUM] CVE-2016-0485: Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Man
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality via unknown vectors related to Test Manager for Web Apps, a different vulnerability than CVE-2016-0480, CVE-2016-0481, CVE-2016-0482, and CVE-2016-0486. NOTE: the previous
nvd
CVE-2015-7940MEDIUMCVSS 5.0v12.5.0.1v12.5.0.2+1 more2015-11-09
CVE-2015-7940 [MEDIUM] CWE-200 CVE-2015-7940: The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve,
The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman (ECDH) key exchanges, aka an "invalid curve attack."
nvd
← Previous4 / 4