Main
Vulnerability Database
Exploits
ID:5046 - Exploit for Improper input validation in Oracle Data Integrator - CVE-2016-5725
ID:5046 - Exploit for Improper input validation in Oracle Data Integrator - CVE-2016-5725
Published: January 20, 2021
Vulnerability identifier: #VU49795
Vulnerability risk: Medium
CVE-ID: CVE-2016-5725
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
Oracle Data Integrator
Oracle Data Integrator
Link to public exploit:
Vulnerability description
The vulnerability allows a remote non-authenticated attacker to manipulate data.
The vulnerability exists due to improper input validation within the Install, config, upgrade (JCraft JSch) component in Oracle Data Integrator. A remote non-authenticated attacker can exploit this vulnerability to manipulate data.
Remediation
Install updates from vendor's website.