Read the docs

Riverbed

Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Riverbed records in CISA KEV

No Riverbed vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Steelcentral Appinternals Dynamic Sampling Agent 7 records MEDIUM Rios 4 records LOW Steelcentral Aternity Agent 2 records LOW Appresponse 1 record LOW Opnet App Response Xpert 1 record LOW Steelapp Traffic Manager 1 record LOW Steelcentral Appinternals 1 record LOW

Records

7 records in Steelcentral Appinternals Dynamic Sampling Agent · all components

TI-2021-18988 CVE-2021-42786 · GHSA-5mv9-9mfh-fm86

Remote Code Execution at AgentControllerServlet

Priority MEDIUM 46

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent (DSA) has Remote Code Execution vulnerabilities in multiple instances of the API requests.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02086 Published 2022-03-09 Fixed in 12.13.0, 11.8.8 CWE-20
TI-2021-19013 CVE-2021-42854 · GHSA-6p9c-r989-4c78

Directory Traversal Read/Write/Delete at PluginServlet

Priority MEDIUM 45

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) PluginServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/plugin/pmx" API.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01568 Published 2022-03-09 Fixed in 12.13.0, 11.8.8 CWE-20
TI-2021-19012 CVE-2021-42853 · GHSA-qppm-h93j-jpq8

Directory Traversal Delete/Read at AgentDiagnosticServlet

Priority MEDIUM 45

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentDiagnosticServlet has directory traversal vulnerability at the "/api/appInternals/1.0/agent/diagnostic/logs" API.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01568 Published 2022-03-09 Fixed in 12.13.0, 11.8.8 CWE-20
TI-2021-18989 CVE-2021-42787 · GHSA-r7hm-v888-gvg3

Directory Traversal Write/Delete/Partial Read at AgentConfigurationServlet

Priority MEDIUM 45

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentConfigurationServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/agent/configuration" API.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01328 Published 2022-03-09 Fixed in 12.13.0, 11.8.8 CWE-20
TI-2021-19015 CVE-2021-42856 · GHSA-4gxc-qfxh-4hf6

Reflected Cross-site Scripting at DsaDataTest

Priority LOW 28

It was discovered that the /DsaDataTest endpoint is susceptible to Cross-site scripting (XSS) attack.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00604 Published 2022-03-09 Fixed in 12.13.0, 11.8.8 CWE-20
TI-2021-19016 CVE-2021-42857 · GHSA-wcq9-68x2-x82m

Directory Traversal Partial Write at AgentDaServlet

Priority LOW 26

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentDaServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/agent/da/pcf" API.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0115 Published 2022-03-09 Fixed in 12.13.0, 11.8.8 CWE-20
Open these records in search →