Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Vendor: Aternity Clear all filters
TI-2021-19013 CVE-2021-42854 · GHSA-6p9c-r989-4c78

Directory Traversal Read/Write/Delete at PluginServlet

Priority MEDIUM 45

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) PluginServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/plugin/pmx" API.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01568 Published 2022-03-09 Fixed in 12.13.0, 11.8.8 CWE-20
TI-2021-19015 CVE-2021-42856 · GHSA-4gxc-qfxh-4hf6

Reflected Cross-site Scripting at DsaDataTest

Priority LOW 28

It was discovered that the /DsaDataTest endpoint is susceptible to Cross-site scripting (XSS) attack.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00604 Published 2022-03-09 Fixed in 12.13.0, 11.8.8 CWE-20
TI-2021-18989 CVE-2021-42787 · GHSA-r7hm-v888-gvg3

Directory Traversal Write/Delete/Partial Read at AgentConfigurationServlet

Priority MEDIUM 45

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentConfigurationServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/agent/configuration" API.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01328 Published 2022-03-09 Fixed in 12.13.0, 11.8.8 CWE-20
TI-2021-19016 CVE-2021-42857 · GHSA-wcq9-68x2-x82m

Directory Traversal Partial Write at AgentDaServlet

Priority LOW 26

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentDaServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/agent/da/pcf" API.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0115 Published 2022-03-09 Fixed in 12.13.0, 11.8.8 CWE-20
TI-2021-18988 CVE-2021-42786 · GHSA-5mv9-9mfh-fm86

Remote Code Execution at AgentControllerServlet

Priority MEDIUM 46

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent (DSA) has Remote Code Execution vulnerabilities in multiple instances of the API requests.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02086 Published 2022-03-09 Fixed in 12.13.0, 11.8.8 CWE-20
TI-2021-19012 CVE-2021-42853 · GHSA-qppm-h93j-jpq8

Directory Traversal Delete/Read at AgentDiagnosticServlet

Priority MEDIUM 45

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentDiagnosticServlet has directory traversal vulnerability at the "/api/appInternals/1.0/agent/diagnostic/logs" API.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01568 Published 2022-03-09 Fixed in 12.13.0, 11.8.8 CWE-20
TI-2016-04380 CVE-2016-5062 · GHSA-qppp-w788-jhgh

The web server in Aternity before 9.0.1 does not require authentication for…

Priority MEDIUM 49

The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote attackers to execute arbitrary Java code by registering MBeans.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03948 Published 2016-09-29 No fix listed CWE-669
TI-2016-04379 CVE-2016-5061 · GHSA-m9gc-phx6-ffv4

Multiple cross-site scripting (XSS) vulnerabilities in the web server in Aternity before…

Priority LOW 30

Multiple cross-site scripting (XSS) vulnerabilities in the web server in Aternity before 9.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTPAgent, (2) MacAgent, (3) getExternalURL, or (4)…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01233 Published 2016-09-29 No fix listed CWE-79