Keysight Technologies Sensor Management Server vulnerabilities
We track 2 vulnerabilities in Keysight Technologies Sensor Management Server products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 10, 2022.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Keysight Technologies Sensor Management Server vulnerabilities
- 9.8 Critical severity
Keysight Technologies Sensor Management Server: Improper Neutralization of Special Elements used in an SQL Command
The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is used to restore the HSQLDB database used in SMS. It takes the path of the zipped database file as the single parameter. An unauthenticated, remote attacker can specify an UNC pa
- 9.8 Critical severity
Keysight Technologies Sensor Management Server: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method in the Keysight Sensor Management Server (SMS). This allows an unauthenticated remote attacker to upload arbitrary files to the SMS host.