Rewterz

Rewterz Threat Advisory – Oracle Enterprise Manager Base Platform Multiple Vulnerabilities

April 18, 2019
Rewterz

Rewterz Threat Advisory – CVE-2015-9251 – Oracle Fusion Middleware MapViewer jQuery Cross-Site Scripting Vulnerability

April 18, 2019

Rewterz Threat Advisory – CVE-2016-1000031 – Oracle Identity Analytics Apache Commons FileUpload Deserialization Security Bypass Vulnerability

Severity

Medium

Analysis Summary

Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution.

Impact

Security Bypass

Affected Vendors

Oracle

Affected Products

Oracle Identity Analytics 11.1.1.5.8

Remediation

Apply update.

https://support.oracle.com/rs?type=doc&id=2498664.1

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.