Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Aternity Component: Aternity Clear all filters
TI-2016-04380 CVE-2016-5062 · GHSA-qppp-w788-jhgh

The web server in Aternity before 9.0.1 does not require authentication for…

Priority MEDIUM 49

The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote attackers to execute arbitrary Java code by registering MBeans.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03948 Published 2016-09-29 No fix listed CWE-669
TI-2016-04379 CVE-2016-5061 · GHSA-m9gc-phx6-ffv4

Multiple cross-site scripting (XSS) vulnerabilities in the web server in Aternity before…

Priority LOW 30

Multiple cross-site scripting (XSS) vulnerabilities in the web server in Aternity before 9.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTPAgent, (2) MacAgent, (3) getExternalURL, or (4)…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01233 Published 2016-09-29 No fix listed CWE-79