Update Java version bundled found in the installer to a version >= 1.8u51

Update the bundled version of java to a version = 1.8u51 1.8 update 51, which fixes many security issues http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html. Included in the security fixes is a fix for logjam CVE-2015-4000...

Microsoft Windows Installer Service Privilege Escalation Vulnerability (3072630)

This host is missing an important security update according to Microsoft Bulletin MS15-074. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2015-2371

The Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a custom action scrip...

Code injection

The Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a custom action scrip...

CVE-2015-2371

The Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a custom action scrip...

CVE-2015-2371

CVE-2015-2371 corresponds to a Windows Installer Service elevation-of-privilege issue. A local attacker can escalate privileges by abusing a custom action script within an MSI package, affecting multiple Windows editions (Server 2003 SP2/R2 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, W...

(Pwn2Own) Microsoft Windows Installer Local Elevation of Privilege Vulnerability

This vulnerability allows local attackers to execute arbitrary code as SYSTEM on vulnerable installations of Microsoft Windows. An attacker must be logged in as a user on the system in order to execute the attack. The specific flaw exists within the behavior of some MSI installations. Some...

MS15-074: Vulnerability in Windows Installer Service Could Allow Elevation of Privilege (3072630)

The version of Windows Installer Service installed on the remote Windows host is missing Cumulative Security Update 3072630. It is, therefore, affected by an elevation of privilege vulnerability in the Windows Installer service due to improperly running customized action scripts. A local attacker...

PT-2015-5731

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 and R2 SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows...

CVE-2015-2371: Undefined Security Weakness

The Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a custom action scrip...

MS15-074: Vulnerability in Windows Installer service could allow elevation of privilege: July 14, 2015

None None...

CVE-2015-1901

IBM InfoSphere Information Server installer vulnerability (CVE-2015-1901) affects InfoSphere Information Server 8.5, 8.7, 9.1, and 11.3, with the issue arising during installation where a local user could execute commands and expose sensitive information. The IBM security bulletin lists the remed...

PT-2015-1619

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.5 through 11.3 before 11.3.1.2 Description The issue is related to the installer in IBM InfoSphere Information Server, which lacks protection of internal data. This allows a local attacker to obtain...

CVE-2015-1901: Exposure of Sensitive Information to an Unauthorized Actor

The installer in IBM InfoSphere Information Server 8.5 through 11.3 before 11.3.1.2 allows local users to obtain sensitive information via unspecified commands...

IBM InfoSphere Information Server Installer Local Information Disclosure Vulnerability

IBM InfoSphere Information Server is a data integration software platform that helps organizations get more value out of complex, heterogeneous information scattered across systems. A security vulnerability in the IBM InfoSphere Information Server installer during installation allows local users ...

The vulnerability of the OnCommand Workflow Automation data storage automation tool allows a hacker to execute arbitrary code.

The OnCommand Workflow Automation tool installer installs the JDWP service Java Debugging Wire Protocol. This service allows a remote attacker to execute arbitrary code through an unspecified vector...

NetApp OnCommand Workflow Automation Remote Code Execution Vulnerability

NetApp OnCommand Workflow Automation is a suite of automated execution storage process management software from the U.S. company NetApp. The software provides storage configuration, storage cloning and other functions for the database or file system. A security vulnerability exists in the NetApp...

CVE-2015-3292

The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up the Java Debugging Wire Protocol JDWP service, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2015-3292

The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up the Java Debugging Wire Protocol JDWP service, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2015-3292

NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 installs the Java Debug Wire Protocol (JDWP) service via the installer, enabling remote code execution by an attacker through unspecified vectors. This vulnerability is corroborated across multiple sources (NVD entry CVE-201...