Aternity Steelcentral Appinternals Dynamic Sampling Agent
7 CVEs affecting Aternity Steelcentral Appinternals Dynamic Sampling Agent. Latest disclosed: 2022-03-10. Critical: 4, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-42854 | Critical | 9.8 | 2022-03-10 | It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) PluginServlet has directory traversal vulnerabilities at the "/api/appInter… |
CVE-2021-42786 | Critical | 9.8 | 2022-03-10 | It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent (DSA) has Remote Code Execution vulnerabilities in multiple instances of the API re… |
CVE-2021-42787 | Critical | 9.4 | 2022-03-10 | It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentConfigurationServlet has directory traversal vulnerabilities at the "/… |
CVE-2021-42853 | Critical | 9.1 | 2022-03-10 | It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentDiagnosticServlet has directory traversal vulnerability at the "/api/a… |
CVE-2021-42855 | High | 7.8 | 2022-03-10 | It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent (DSA) uses the ".debug_command.config" file to store a json string that contains a… |
CVE-2021-42857 | Medium | 5.3 | 2022-03-10 | It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentDaServlet has directory traversal vulnerabilities at the "/api/appInte… |
CVE-2021-42856 | Medium | 4.7 | 2022-03-10 | It was discovered that the /DsaDataTest endpoint is susceptible to Cross-site scripting (XSS) attack. It was noted that the Metric parameter does not have any… |