Jerome Nokin

The issue is related to an Elevation of Privilege vulnerability.

The issue is related to a Server-Side Request Forgery vulnerability.

The issue is related to a Stored Cross-Site Scripting vulnerability. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

The issue is related to a Command Injection vulnerability.

The issue is related to errors in processing input data in the Utility component of Oracle Solaris. Exploitation of this issue can allow an attacker to execute arbitrary code. Successful attacks require human interaction from a person other than the attacker and may significantly impact additional products. The issue can result in the takeover of Oracle Solaris.

A vulnerabilidade permite ataques XXE por meio de um documento XML, levando à divulgação do hash NTLMv2-SSP. Isso ocorre durante o processamento de um documento XML malicioso.

O problema está relacionado a permissões de arquivo inadequadas no Perfil Público, o que pode levar à divulgação do conteúdo dos arquivos ou à escalada de privilégios.

A directory traversal issue allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel. This can be demonstrated by writing to the Software/ directory.