CVE-2017-2744

HP Support Assistant (Windows) is affected by CVE-2017-2744, where an attacker could extract binaries into protected file-system locations. The issue affects the HP Support Assistant Framework prior to 12.7.26.1, enabling privilege escalation via manipulation of protected directories. HP’s adviso...

PT-2018-7179

Name of the Vulnerable Software and Affected Versions: HP Support Assistant versions prior to 12.7.26.1 Description: The issue allows an attacker to extract binaries into protected file system locations. Recommendations: For versions prior to 12.7.26.1, update to version 12.7.26.1 or later to...

CVE-2017-2744: Exposure of Sensitive Information to an Unauthorized Actor

The vulnerability allows attacker to extract binaries into protected file system locations in HP Support Assistant before 12.7.26.1...

Unspecified Vulnerability in Oracle Support Tools OSS Support Tools Component

Oracle Support Tools is the United States Oracle Oracle company's set of Oracle support tools. OSS Support Tools is one of the object storage support tools. A security vulnerability exists in the Diagnostic Assistant subcomponent of the OSS Support Tools component of Oracle Support Tools prior to...

Unspecified Vulnerability in Oracle Support Tools OSS Support Tools Component (CNVD-2018-01732)

Oracle Support Tools is the United States Oracle Oracle company's set of Oracle support tools. OSS Support Tools is one of the object storage support tools. A security vulnerability exists in the Diagnostic Assistant subcomponent of the OSS Support Tools component of Oracle Support Tools prior to...

Unspecified Vulnerability in Oracle Support Tools OSS Support Tools Component (CNVD-2018-01720)

Oracle Support Tools is the United States Oracle Oracle company's set of Oracle support tools. OSS Support Tools is one of the object storage support tools. A security vulnerability exists in the Diagnostic Assistant subcomponent of the OSS Support Tools component of Oracle Support Tools prior to...

CVE-2018-2617

Vulnerability in the OSS Support Tools component of Oracle Support Tools subcomponent: Diagnostic Assistant. The supported version that is affected is Prior to 2.11.33. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise OSS Support Tools...

CVE-2018-2616

Vulnerability in the OSS Support Tools component of Oracle Support Tools subcomponent: Diagnostic Assistant. The supported version that is affected is Prior to 2.11.33. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise OSS Support Tools...

CVE-2018-2615

Vulnerability in the OSS Support Tools component of Oracle Support Tools subcomponent: Diagnostic Assistant. The supported version that is affected is Prior to 2.11.33. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise OSS Support Tools...

CVE-2018-2615

Vulnerability in the OSS Support Tools component of Oracle Support Tools subcomponent: Diagnostic Assistant. The supported version that is affected is Prior to 2.11.33. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise OSS Support Tools...

CVE-2018-2616

Vulnerability in the OSS Support Tools component of Oracle Support Tools subcomponent: Diagnostic Assistant. The supported version that is affected is Prior to 2.11.33. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise OSS Support Tools...

CVE-2018-2615

Vulnerability in the OSS Support Tools component of Oracle Support Tools subcomponent: Diagnostic Assistant. The supported version that is affected is Prior to 2.11.33. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise OSS Support Tools...

CVE-2018-2615

Vulnerability in the OSS Support Tools component of Oracle Support Tools subcomponent: Diagnostic Assistant. The supported version that is affected is Prior to 2.11.33. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise OSS Support Tools...

CVE-2018-2617

CVE-2018-2617 affects Oracle OSS Support Tools, specifically the Diagnostic Assistant subcomponent of Oracle Support Tools, with versions prior to 2.11.33. The vulnerability allows an unauthenticated, network-accessible attacker to access OSS Support Tools via HTTP, potentially exposing confident...

CVE-2018-2617: Undefined Security Weakness

Vulnerability in the OSS Support Tools component of Oracle Support Tools subcomponent: Diagnostic Assistant. The supported version that is affected is Prior to 2.11.33. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise OSS Support Tools...

Oracle WebLogic Remote Diagnosis Assistant rda_tfa_hrs Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle WebLogic. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the processing of the...

Oracle WebLogic Remote Diagnosis Assistant Information Disclosure Vulnerability

This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Oracle WebLogic Remote Diagnosis Server. The specific flaw exists within the Remote Diagnosis Assistant, which listens on TCP port 8888 when enabled. The issue results from unrestricted access to th...

Oracle WebLogic Remote Diagnosis Assistant rda_tfa_ref_date Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle WebLogic. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the processing of the...

PT-2018-15663

Name of the Vulnerable Software and Affected Versions Oracle Support Tools versions prior to 2.11.33 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Support Tools, potentially resulting in a takeover. This is due to a vulnerability in the O...

PT-2018-15664

Name of the Vulnerable Software and Affected Versions Oracle Support Tools versions prior to 2.11.33 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Support Tools, potentially resulting in a takeover. This is due to a vulnerability in the O...