CVE-2016-1183

Published: Jun 19, 2016Modified: May 6, 2026

3.7

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.2 / Impact: 1.4

Source: NVD

Description

NTT Data TERASOLUNA Server Framework for Java(WEB) 2.0.0.1 through 2.0.6.1, as used in Fujitsu Interstage Business Application Server and other products, allows remote attackers to bypass a file-extension protection mechanism, and consequently read arbitrary files, via a crafted pathname.

Affected (8)

Products: Nttdata: Terasoluna Server Framework For Java Web

Nttdata

1 product

Terasoluna Server Framework For Java Web

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Nttdata Terasoluna Server Framework For Java Web	Version 2.0.0.1
Nttdata Terasoluna Server Framework For Java Web	Version 2.0.0.2
Nttdata Terasoluna Server Framework For Java Web	Version 2.0.1.0
Nttdata Terasoluna Server Framework For Java Web	Version 2.0.2.0
Nttdata Terasoluna Server Framework For Java Web	Version 2.0.5.1
Nttdata Terasoluna Server Framework For Java Web	Version 2.0.5.2
Nttdata Terasoluna Server Framework For Java Web	Version 2.0.5.3
Nttdata Terasoluna Server Framework For Java Web	Version 2.0.6.1