[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fgtudNx6XSLUPaqKnwa-GJPRMedvH-i_p2hR5pxm5MNg":3,"g5a-risk:CVE-2016-0492":141},{"success":4,"data":5,"meta":139},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":15,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":41,"references":42,"referencesCount":94,"weaknesses":95,"weaknessesCount":99,"isActivelyExploited":100,"cisaInfo":15,"otxData":15,"relatedBlogPosts":101,"seoMetadata":102,"configurations":127,"relatedVendorCves":137,"notableEvents":138},"CVE-2016-0492","What is CVE-2016-0492?","Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Load Testing for Web Apps, a different vulnerability than CVE-2016-0488.  NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the isAllowedUrl function, which allows remote attackers to bypass authentication via directory traversal sequences following a URI entry that does not require authentication, as demonstrated by olt\u002FLogin.do\u002F..\u002F..\u002Folt\u002FUploadFileUpload.do.","Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote att...","2016-01-21T03:00:40.353","2025-04-12T10:46:40.837",6.4,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":26,"ExploitabilityScore":27,"ImpactScore":28,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","LOW","NONE","PARTIAL","MEDIUM",10,4.9,0.92145,[29,29,29,29,29,29,29],"Medium",[33,38],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"oracle","application_testing_suite","12.4.0.2","cpe:2.3:a:oracle:application_testing_suite:12.4.0.2:*:*:*:*:*:*:*",{"vendor":34,"product":35,"version":39,"criteria":40,"vulnerable":4},"12.5.0.2","cpe:2.3:a:oracle:application_testing_suite:12.5.0.2:*:*:*:*:*:*:*",2,[43,50,55,59,63,67,71,75,78,80,82,84,86,88,90,92],{"url":44,"source":45,"tags":46},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F137175\u002FOracle-ATS-Arbitrary-File-Upload.html","Packetstormsecurity",[47,48,49],"Exploit","Third Party Advisory","VDB Entry",{"url":51,"source":52,"tags":53},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Ftopics\u002Fsecurity\u002Fcpujan2016-2367955.html","Oracle",[54],"Vendor Advisory",{"url":56,"source":57,"tags":58},"http:\u002F\u002Fwww.rapid7.com\u002Fdb\u002Fmodules\u002Fexploit\u002Fmulti\u002Fhttp\u002Foracle_ats_file_upload","Rapid7",[48,49],{"url":60,"source":61,"tags":62},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F81158","Securityfocus",[48,49],{"url":64,"source":65,"tags":66},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1034734","Securitytracker",[48,49],{"url":68,"source":69,"tags":70},"http:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-16-042","Zerodayinitiative",[48,49],{"url":72,"source":73,"tags":74},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F39691\u002F","Exploit-db",[47,48,49],{"url":76,"source":73,"tags":77},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F39852\u002F",[47,48,49],{"url":44,"source":45,"tags":79},[47,48,49],{"url":51,"source":52,"tags":81},[54],{"url":56,"source":57,"tags":83},[48,49],{"url":60,"source":61,"tags":85},[48,49],{"url":64,"source":65,"tags":87},[48,49],{"url":68,"source":69,"tags":89},[48,49],{"url":72,"source":73,"tags":91},[47,48,49],{"url":76,"source":73,"tags":93},[47,48,49],16,[96],{"id":97,"name":97,"description":98},"Unknown","NVD-CWE-noinfo",1,false,[],{"title":103,"metaDescription":104,"keywords":105,"canonicalUrl":106,"structuredData":107},"What is CVE-2016-0492? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2016-0492, a medium severity cyber security vulnerability from 2016. High exploit probability (92.1%). Unspecified vulnerabilit...","CVE-2016-0492, CVE-2016-0492 vulnerability, CVE-2016-0492 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2016, CVSS score, exploit, patch, remediation, oracle security, application_testing_suite vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2016-0492",{"@context":108,"@type":109,"headline":103,"description":104,"datePublished":10,"dateModified":11,"author":110,"publisher":114,"about":118,"mainEntityOfPage":122,"articleSection":125,"keywords":126},"https:\u002F\u002Fschema.org","TechArticle",{"@type":111,"name":112,"url":113},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":111,"name":112,"url":113,"logo":115},{"@type":116,"url":117},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":119,"name":6,"description":120,"additionalType":121},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":123,"@id":124},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2016-0492","Cybersecurity","CVE-2016-0492, CVE-2016-0492 vulnerability, CVE-2016-0492 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[128],{"Operator":15,"Negate":15,"Nodes":129},[130],{"Operator":131,"Negate":15,"CPEMatch":132},"OR",[133,135],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":134,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"08F3E8E4-BD91-4220-B710-960A45C232D2",{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":136,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"62E818A9-663D-4AFB-B3D6-686CE4DB9676",[],[],{"lastModified":11,"cacheTime":140,"version":21},1792248197265,{"score":142,"band":31,"action":143,"scoredAt":144},63,"Plan remediation","2026-10-17T07:55:31.856646+00:00"]