Vulnerability Details : CVE-2016-5537

Potential exploit
Unspecified vulnerability in the NetBeans component in Oracle Fusion Middleware 8.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information is from the October 2016 CPU. Oracle has not commented on third-party claims that this issue is a directory traversal vulnerability which allows local users with certain permissions to write to arbitrary files and consequently gain privileges via a .. (dot dot) in a archive entry in a ZIP file imported as a project.
Published 2016-10-25 14:30:13
Updated 2025-04-12 10:46:41
Source Oracle
View at NVD,   CVE.org
Vulnerability category: Directory traversal

Products affected by CVE-2016-5537

Exploit prediction scoring system (EPSS) score for CVE-2016-5537

EPSS FAQ
0.15%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 32 %
Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2016-5537

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
4.6
 MEDIUM AV:L/AC:L/Au:N/C:P/I:P/A:P
3.9
6.4
 NIST
5.7
 MEDIUM CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
1.5
3.7
 NIST

References for CVE-2016-5537

Jump to
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close