CVE-2016-1183

Severity: low (CVSS 3.7 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-06-19 · updated 2026-06-17
Weakness: CWE-264

Description

NTT Data TERASOLUNA Server Framework for Java(WEB) 2.0.0.1 through 2.0.6.1, as used in Fujitsu Interstage Business Application Server and other products, allows remote attackers to bypass a file-extension protection mechanism, and consequently read arbitrary files, via a crafted pathname.

Affected products

Nttdata Terasoluna Server Framework For Java Web: 2.0.0.1, 2.0.0.2, 2.0.1.0, 2.0.2.0, 2.0.5.1, 2.0.5.2 (+2)

References

http://jvn.jp/en/jp/JVN74659077/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000098
http://www.fujitsu.com/jp/products/software/resources/condition/security/vulnerabilities/2016/index.html#CVE-2016-1183
http://jvn.jp/en/jp/JVN74659077/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000098
http://www.fujitsu.com/jp/products/software/resources/condition/security/vulnerabilities/2016/index.html#CVE-2016-1183

Get alerted when CVE-2016-1183 or the next vulnerability affects your stack