Jerome Nokin

The issue is related to an Elevation of Privilege vulnerability.

The issue is related to a Server-Side Request Forgery vulnerability.

The issue is related to a Stored Cross-Site Scripting vulnerability. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

The issue is related to a Command Injection vulnerability.

The issue is related to errors in processing input data in the Utility component of Oracle Solaris. Exploitation of this issue can allow an attacker to execute arbitrary code. Successful attacks require human interaction from a person other than the attacker and may significantly impact additional products. The issue can result in the takeover of Oracle Solaris.

The issue allows XXE attacks via an XML document, leading to NTLMv2-SSP hash disclosure. This occurs when processing a malicious XML document.

The issue is related to weak file permissions under the Public Profile, which can lead to the disclosure of file contents or privilege escalation.

A directory traversal issue allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel. This can be demonstrated by writing to the Software/ directory.