Read the docs

Aternity

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Aternity records in CISA KEV

No Aternity vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Aternity 3 records HIGH

Records

3 records in Aternity · all components

TI-2016-04380 CVE-2016-5062 · GHSA-qppp-w788-jhgh

The web server in Aternity before 9.0.1 does not require authentication for…

Priority MEDIUM 49

The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote attackers to execute arbitrary Java code by registering MBeans.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03948 Published 2016-09-29 No fix listed CWE-669
TI-2016-04379 CVE-2016-5061 · GHSA-m9gc-phx6-ffv4

Multiple cross-site scripting (XSS) vulnerabilities in the web server in Aternity before…

Priority LOW 30

Multiple cross-site scripting (XSS) vulnerabilities in the web server in Aternity before 9.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTPAgent, (2) MacAgent, (3) getExternalURL, or (4)…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01233 Published 2016-09-29 No fix listed CWE-79
Open these records in search →