CVE Vulnerability Advisory Database

[Affected Scope] Paessler PRTG Network Monitor versions prior to 18.2.39

[Impact] An authenticated administrator can execute arbitrary OS commands on both the server and connected devices by sending malformed parameters in sensor or notification configurations

[Mitigation] Immediately upgrade PRTG Network Monitor to version 18.2.39 or later, and restrict access to the administrator web console

[Affected Scope] Quest KACE System Management Appliance (SMA) 8.0.318 and prior versions

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with high privileges by sending specially crafted HTTP requests

[Mitigation] Apply official vendor patches immediately and restrict external internet access to the management interface

[Affected Scope] Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, 12.2.1.2, and 12.2.1.3

[Impact] Unauthenticated remote attackers can exploit this vulnerability via the T3 protocol to execute arbitrary code and completely take over the WebLogic Server

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) or restrict external T3 protocol access (Port 7001) using connection filters or firewalls

[Affected Scope] TIBCO JasperReports Server versions up to and including 6.2.4, 6.3.0, 6.3.2, 6.3.3, 6.4.0, 6.4.2, and related Community/AWS/BPM editions

[Impact] Authenticated attackers can exploit Spring Web Flow parameter handling to gain unauthorized read-only access to sensitive web application configuration files, including database credentials

[Mitigation] Apply official security patches from TIBCO, upgrade to the latest stable release, or implement strict input validation and WAF rules to block path traversal patterns

[Affected Scope] Zimbra Collaboration Suite (ZCS) versions prior to 8.7 Patch 1 and 8.8.x versions prior to 8.8.7

[Impact] Remote attackers can execute arbitrary web script or HTML in the victim's browser context via a manipulated Content-Location header in an email attachment, leading to session hijacking and account takeover

[Mitigation] Immediately upgrade Zimbra Collaboration Suite to the latest patched version (8.7 Patch 1, 8.8.7, or later)

[Affected Scope] Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46, and 7.0.0 to 7.0.81 when the 'readonly' parameter of the DefaultServlet is set to false

[Impact] Unauthenticated remote attackers can upload malicious JSP files using crafted HTTP PUT requests, leading to arbitrary code execution with the privileges of the Tomcat process

[Mitigation] Upgrade Apache Tomcat to the latest secure versions, or modify the web.xml configuration to ensure the 'readonly' parameter is set to true (default)

[Affected Scope] Apache Tomcat versions 7.0.0 to 7.0.79 running on Windows with the 'readonly' initialization parameter set to 'false'.

[Impact] Unauthenticated remote attackers can upload malicious JSP files via specially crafted HTTP PUT requests, leading to arbitrary code execution under the context of the Tomcat process.

[Mitigation] Immediately upgrade Apache Tomcat to version 7.0.81 or later, or revert the 'readonly' parameter to 'true' in the web.xml configuration.

[Affected Scope] Progress Telerik UI for ASP.NET AJAX versions prior to R2 2017 SP2

[Impact] Unauthenticated remote attackers can exploit the vulnerable RadAsyncUpload component to upload arbitrary malicious files (such as ASPX webshells) and execute arbitrary code with web server privileges

[Mitigation] Immediately upgrade Telerik UI for ASP.NET AJAX to R2 2017 SP2 or later, or apply workarounds by disabling RadAsyncUpload and hardening encryption keys

[Affected Scope] Progress Telerik UI for ASP.NET AJAX versions before R1 2017 and R2 before R2 2017 SP2

[Impact] Remote attackers can exploit weak encryption to perform unrestricted file uploads or execute arbitrary code on the target server

[Mitigation] Upgrade to the latest patched version of Telerik UI, or configure strong custom encryption keys in web.config

[Affected Scope] SAP NetWeaver Application Server Java version 7.5.

[Impact] Unauthenticated remote attackers can read arbitrary system and configuration files by exploiting a directory traversal vulnerability using '..' sequences in the query string.

[Mitigation] Apply SAP Security Note 2486657 immediately, and implement WAF rules to block directory traversal patterns in the interim.

[Affected Scope] Hikvision DS-2CD2xx2F-I, DS-2CD2xx0F-I, DS-2CD2xx2FWD, DS-2CD4x2xFWD, DS-2CD4xx5, DS-2DFx, and DS-2CD63xx series IP camera devices

[Impact] Unauthenticated remote attackers can bypass authentication mechanisms via crafted HTTP requests to escalate privileges and gain unauthorized access to sensitive system configuration and credentials

[Mitigation] Immediately upgrade device firmware to the latest patched version and restrict access to the camera management interface from the public internet

[Affected Scope] Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 Update 11 and earlier, and ColdFusion 10 Update 22 and earlier.

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by sending crafted Action Message Format (AMF) payloads.

[Mitigation] Apply the official Adobe security updates (APSB17-14) immediately and restrict external access to AMF gateway endpoints.

[Affected Scope] Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1, and 12.2.1.2

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands via malicious HTTP POST requests, leading to complete compromise of the WebLogic server

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) immediately, or restrict access to the vulnerable 'wls-wsat' web service context

[Affected Scope] Apache Tomcat versions before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12, when JmxRemoteLifecycleListener is enabled

[Impact] Remote attackers with network access to JMX ports can trigger untrusted deserialization without authentication, leading to arbitrary Remote Code Execution (RCE) with system privileges

[Mitigation] Upgrade Apache Tomcat to the latest secure release, or disable JmxRemoteLifecycleListener in server.xml and restrict network access to JMX ports using firewalls

[Affected Scope] SAP NetWeaver AS JAVA version 7.4 utilizing the Universal Worklist (UWL) configuration.

[Impact] Unauthenticated remote attackers can obtain sensitive user information and system configuration details via crafted HTTP requests.

[Mitigation] Apply SAP Security Note 2256846 immediately and restrict external access to UWL-related endpoints.

[Affected Scope] UDDI (Universal Description, Discovery, and Integration) server component running on SAP NetWeaver J2EE Engine version 7.40.

[Impact] Unauthenticated remote attackers can execute arbitrary SQL commands via crafted requests, potentially leading to complete database compromise, data exfiltration, or remote code execution.

[Mitigation] Immediately apply SAP Security Note 2101079, disable the UDDI service if not required, and restrict network access.

[Affected Scope] Systems running unpatched versions impacted by CVE-2015-1770

[Impact] Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Of...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] Arcserve UDP versions prior to 5.0 Update 4

[Impact] Unauthenticated remote attackers can retrieve sensitive system files or trigger a denial of service, severely impacting business continuity

[Mitigation] Immediately upgrade to Arcserve UDP 5.0 Update 4 or later, and restrict external access to the management console

[Affected Scope] Elasticsearch versions before 1.3.8 and 1.4.x versions before 1.4.3

[Impact] Unauthenticated remote attackers can bypass sandbox restrictions to execute arbitrary shell commands on the host system, leading to complete system compromise

[Mitigation] Immediately upgrade Elasticsearch to version 1.3.8, 1.4.3, or later, or disable dynamic scripting in the configuration

[Affected Scope] Rejetto HTTP File Server (HFS) 2.3x versions prior to 2.3c

[Impact] Unauthenticated remote attackers can execute arbitrary system commands and gain full control of the host by sending crafted HTTP requests

[Mitigation] Immediately upgrade to a patched version (2.3c or later) or decommission the legacy HFS service in favor of secure alternatives