CVE-2019-2557 is a vulnerability in the Oracle Application Testing Suite, specifically within the Load Testing for Web Apps subcomponent of Oracle Enterprise Manager Products Suite version 13.3.0.1. This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the suite. The vulnerability has a CVSS 3.0 Base Score of 6.3 (Medium), indicating potential for unauthorized data modification, deletion, read access to a subset of data, and partial denial of service. While not actively exploited in the wild (KEV), a Metasploit module exists for post-authentication directory traversal, and it has a high FAUCET Risk Score of 98/100, despite minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
13.3.0.1CPE matchmatch criteria | cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.