CVE-2016-5537 is an unspecified vulnerability affecting the NetBeans component within Oracle Fusion Middleware 8.1. While Oracle's official description is vague, third-party claims suggest it's a directory traversal issue allowing local users to write to arbitrary files and gain privileges by importing a specially crafted ZIP file containing ".." in an archive entry. The vulnerability has a CVSSv3 score of 5.7 (MEDIUM), indicating a local attack vector with low complexity, requiring high privileges, and potentially impacting confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
8.1CPE matchmatch criteria | cpe:2.3:a:oracle:netbeans:8.1:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.