Keysight Technologies Sensor Management Server vulnerabilities

2 known vulnerabilities in Keysight Technologies Sensor Management Server from Keysight Technologies Sensor Management Server. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Keysight Technologies Sensor Management Server: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-38130Aug 10, 2022Keysight Technologies Sensor Management ServerEPSS 56.8%

  The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is used to restore the HSQLDB database used in SMS. It takes the path of the zipped database file as the single parameter. An unauthenticated, remote attacker can specify an UNC pa

• 9.8 Critical severity

  Keysight Technologies Sensor Management Server: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-38129Aug 10, 2022Keysight Technologies Sensor Management ServerEPSS 22%

  A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method in the Keysight Sensor Management Server (SMS). This allows an unauthenticated remote attacker to upload arbitrary files to the SMS host.