Aternity
9 CVEs across 2 Aternity products. Browse Aternity vulnerabilities, severities, and proof-of-concept exploits.
Aternity products with known CVEs
Aternity CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2022-43997 | High | 7.8 | 2023-01-26 | Incorrect access control in Aternity agent in Riverbed Aternity before 12.1.4.27 allows for local privilege escalation. There is an insufficiently protected ha… |
CVE-2021-42857 | Medium | 5.3 | 2022-03-10 | It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentDaServlet has directory traversal vulnerabilities at the "/api/appInte… |
CVE-2021-42856 | Medium | 4.7 | 2022-03-10 | It was discovered that the /DsaDataTest endpoint is susceptible to Cross-site scripting (XSS) attack. It was noted that the Metric parameter does not have any… |
CVE-2021-42855 | High | 7.8 | 2022-03-10 | It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent (DSA) uses the ".debug_command.config" file to store a json string that contains a… |
CVE-2021-42854 | Critical | 9.8 | 2022-03-10 | It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) PluginServlet has directory traversal vulnerabilities at the "/api/appInter… |
CVE-2021-42853 | Critical | 9.1 | 2022-03-10 | It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentDiagnosticServlet has directory traversal vulnerability at the "/api/a… |
CVE-2021-42787 | Critical | 9.4 | 2022-03-10 | It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentConfigurationServlet has directory traversal vulnerabilities at the "/… |
CVE-2021-42786 | Critical | 9.8 | 2022-03-10 | It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent (DSA) has Remote Code Execution vulnerabilities in multiple instances of the API re… |
CVE-2016-5062 | Critical | 9.8 | 2016-09-29 | The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote attackers to execute a… |
CVE-2016-5061 | Medium | 6.1 | 2016-09-29 | Multiple cross-site scripting (XSS) vulnerabilities in the web server in Aternity before 9.0.1 allow remote attackers to inject arbitrary web script or HTML vi… |