Approved changes feed: RSS · Atom

cpe:2.3:a:aternity:aternity:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAternity (aa4c86c7-04c9-5ffc-a4e6-46823afe610a)
ProductAternity (bb88df77-a7f7-55d0-8e6e-346347ed40a1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-43997 vulnerable 2026-06-08 05:49:35.224085 Details available
Incorrect access control in Aternity agent in Riverbed Aternity before 12.1.4.27 allows for local privilege escalation. There is an insufficiently protected handle to the A180AG.exe SYSTEM process with PROCESS_ALL_ACCESS rights.
Published: 2023-01-25T00:00:00.000Z
Updated: 2025-04-01T15:24:32.999Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5062 vulnerable 2026-06-08 05:07:56.217839 Details available
The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote attackers to execute arbitrary Java code by registering MBeans.
Published: 2016-09-29T10:00:00.000Z
Updated: 2024-08-06T00:46:40.256Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5061 vulnerable 2026-06-08 05:07:56.217444 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the web server in Aternity before 9.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTPAgent, (2) MacAgent, (3) getExternalURL, or (4) retrieveTrustedUrl page.
Published: 2016-09-29T10:00:00.000Z
Updated: 2024-08-06T00:46:40.303Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.