AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2007-0222

MEDIUM · CVSS 5 EPSS 10.61%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-01-17 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2007-0222
Severity
MEDIUM
CVSS
5
EPSS
10.61%
Oracle

Original Filing — NVD Description

Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Server 10g allows remote attackers to read arbitrary files via unknown vectors, probably "\.." sequences in the beanId parameter. NOTE: this is likely a duplicate of another CVE that Oracle addressed in CPU Jan 2007, but due to lack of details by Oracle, it is unclear which BugID this issue is associated with, so the other CVE cannot be determined. Possibilities include EM02 (CVE-2007-0292) or EM05 (CVE-2007-0293).