CVE-2022-38129

CVE-2022-38129 describes a path-traversal vulnerability in the Keysight Sensor Management Server (SMS) affecting the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method. An unauthenticated remote attacker can upload arbitrary files to the SMS host. Multiple sources confirm the ...

CVE-2022-38130

CVE-2022-38130 affects Keysight SMS (com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip). An unauthenticated, remote attacker can supply an UNC path to a zipped HSQLDB database, causing the database content to be restored and potentially enabling remote code execution as described...