Ammarit Thongthua

**Name of the Vulnerable Software and Affected Versions** Oracle Enterprise Command Center Framework versions 11 through 13 **Description** The issue is related to insufficient input validation in the Diagnostics component of the Oracle Enterprise Command Center Framework. This can be exploited by a remote attacker to gain unauthorized access to protected information via the HTTP protocol. Successful attacks can result in unauthorized read access to a subset of accessible data. **Recommendations** For versions 11 through 13, update to a version that includes the fix for this issue to prevent unauthorized access. As a temporary workaround, consider restricting access to the Diagnostics component until a patch is available. Avoid using the HTTP protocol to access the Oracle Enterprise Command Center Framework until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tenable Identity Exposure (affected versions not specified) **Description** A formula injection issue exists, allowing an authenticated remote attacker with administrative privileges to manipulate application form fields. This could trick another administrator into executing CSV payloads. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned in the provided descriptions. **Description** An arbitrary file write issue exists, allowing an authenticated, remote attacker with administrator privileges to alter logging variables. This could result in overwriting arbitrary files on the remote host with log data, potentially leading to a denial of service condition. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Oracle Web Applications Desktop Integrator versions 12.2.3 through 12.2.12 **Description** The issue is related to insufficient input validation in the MS Excel Specific component of Oracle Web Applications Desktop Integrator, part of the Oracle E-Business Suite. This vulnerability can be easily exploited by a low-privileged attacker with network access via HTTP, requiring human interaction from a person other than the attacker. Successful attacks can result in unauthorized update, insert, or delete access to some of Oracle Web Applications Desktop Integrator's accessible data, as well as unauthorized read access to a subset of the data. Additionally, it can cause a partial denial of service (partial DOS) of Oracle Web Applications Desktop Integrator. **Recommendations** For versions 12.2.3 through 12.2.12, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Nessus versions 8.10.1 through 8.15.8 Nessus versions 10.0.0 through 10.4.1 **Description** The issue is related to insufficient input validation, which can be exploited by a remote attacker to elevate privileges to root or NT AUTHORITY/SYSTEM on the Nessus host. This can be achieved by executing a specially crafted file. **Recommendations** For Nessus versions 8.10.1 through 8.15.8, update to a version outside of this range to resolve the issue. For Nessus versions 10.0.0 through 10.4.1, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to the Nessus host to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Dell SupportAssist Client Consumer versions 3.9.13.0 and any versions prior to 3.9.13.0 **Description** The issue concerns an arbitrary file deletion vulnerability that can be exploited using the Windows feature of NTFS called Symbolic links. Symbolic links can be created by any non-privileged user under some object directories. However, combining them with a different object, such as the NTFS junction point, allows for the exploitation. The SupportAssist clean files functionality does not distinguish junction points from the physical folder and proceeds to clean the target of the junction, allowing non-privileged users to create junction points and delete arbitrary files on the system that can be accessed only by the admin. **Recommendations** For Dell SupportAssist Client Consumer versions 3.9.13.0 and any versions prior to 3.9.13.0, consider disabling the clean files functionality until a patch is available to prevent non-privileged users from deleting arbitrary files on the system. Restrict access to the NTFS junction point to minimize the risk of exploitation. Avoid using the SupportAssist clean files functionality in environments where non-privileged users have access to the system. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Intel(R) SSD Data Center Tool versions prior to 12/31/2020 Description: The issue is related to incorrect default permissions in the installer, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For versions downloaded before 12/31/2020, update the Intel(R) SSD Data Center Tool to a version released after 12/31/2020 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Cisco AnyConnect Secure Mobility Client for Windows (affected versions not specified) **Description** A vulnerability in the Network Access Manager and Web Security Agent components could allow an authenticated, local attacker to perform a DLL injection attack by exploiting insufficient validation of resources loaded by the application at run time. The attacker would need valid credentials on the Windows system. To exploit this, an attacker could insert a configuration file in a specific system path, causing a malicious DLL file to be loaded when the application starts, potentially allowing the execution of arbitrary code on the affected machine with SYSTEM privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise HCM Global Payroll Core version 9.2 Description: The issue is related to insufficient input validation in the Security component of the PeopleSoft Enterprise HCM Global Payroll Core application. This can be exploited by a remote attacker to gain unauthorized access to protected information, modify, add, or delete data, or cause a denial of service. The vulnerability can be easily exploited by a low-privileged attacker with network access via HTTP, allowing them to compromise the PeopleSoft Enterprise HCM Global Payroll Core product. Successful attacks can result in unauthorized access to some data, including read access to a subset of data and the ability to cause a partial denial of service. Recommendations: For version 9.2, update the Security component to a version that includes the necessary input validation checks to prevent exploitation. As a temporary workaround, consider restricting access to the Security component until a patch is available. Avoid using the HTTP protocol to access the PeopleSoft Enterprise HCM Global Payroll Core product until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** IBM Security Access Manager Appliance version 9.0.7 **Description** The issue allows an authenticated user to impersonate another user on the system because the session is not invalidated after logout. **Recommendations** For IBM Security Access Manager Appliance version 9.0.7, consider implementing a workaround to manually invalidate sessions after logout until a patch is available. As a temporary mitigation measure, restrict access to sensitive areas of the system to minimize the risk of impersonation.

**Name of the Vulnerable Software and Affected Versions** IBM Security Access Manager Appliance version 9.0 **Description** The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session. This is due to a cross-site scripting issue. **Recommendations** For IBM Security Access Manager Appliance version 9.0, consider disabling access to the Web UI until a patch is available to prevent potential exploitation. Restrict access to sensitive areas of the Web UI to minimize the risk of credentials disclosure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PeopleSoft Enterprise PeopleTools versions 8.56 through 8.58 **Description** The issue is related to insufficient input validation in the Portal component of Oracle PeopleSoft Enterprise PeopleTools. This allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools, resulting in unauthorized read access to a subset of accessible data. **Recommendations** For versions 8.56 through 8.58, update to a version that includes the necessary security fixes to address the insufficient input validation issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PeopleSoft Enterprise PeopleTools versions 8.56, 8.57, 8.58 **Description** The issue is related to insufficient input validation in the Environment Mgmt Console component. It allows a high-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools, resulting in unauthorized update, insert, or delete access to some accessible data. The vulnerability can be easily exploited and may cause the application to become unresponsive or allow unauthorized data access. **Recommendations** For versions 8.56, 8.57, and 8.58, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Dell Digital Delivery versions prior to 3.5.2015 **Description** The issue is related to incorrect default permissions, allowing a locally authenticated low-privileged malicious user to exploit it and run an arbitrary executable with administrative privileges on the affected system. **Recommendations** For Dell Digital Delivery versions prior to 3.5.2015, update to version 3.5.2015 or later to resolve the issue. As a temporary workaround, consider restricting access to administrative privileges to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** ManageEngine Applications Manager version 14 with Build 14360 **Description** An issue was discovered in the integrated PostgreSQL component of ManageEngine Applications Manager, where a lack of file permission security allows malicious users in the "Authenticated Users" group to exploit privilege escalation. This can lead to modification of the PostgreSQL configuration, enabling the execution of arbitrary commands to gain full system privilege user access and rights over the system. **Recommendations** For ManageEngine Applications Manager version 14 with Build 14360, consider restricting access to the integrated PostgreSQL component to prevent exploitation until a fix is available. As a temporary workaround, review and secure file permissions to prevent unauthorized modifications to the PostgreSQL configuration.

**Name of the Vulnerable Software and Affected Versions** Avaya Aura Conferencing versions prior to 8.0 SP14 (8.0.14) **Description** A Cross-Site Scripting (XSS) issue in the Web UI of Avaya Aura Conferencing may allow code execution and potentially disclose sensitive information. **Recommendations** For Avaya Aura Conferencing versions prior to 8.0 SP14 (8.0.14), update to version 8.0 SP14 (8.0.14) or later to resolve the issue. As a temporary workaround, consider restricting access to the Web UI to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Undertow versions prior to 7.1.2.CR1 Undertow versions prior to 7.1.2.GA **Description** The issue is related to insufficient sanitization and validation of user input before it is used as part of an HTTP header value, allowing the injection of arbitrary HTTP headers and response splitting. **Recommendations** For versions prior to 7.1.2.CR1, update to version 7.1.2.CR1 or later. For versions prior to 7.1.2.GA, update to version 7.1.2.GA or later.

**Name of the Vulnerable Software and Affected Versions** VMware vCenter Server version 6.0 before U2 VMware ESXi version 6.0 **Description** The issue is related to a CRLF injection vulnerability that allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks. This is due to the failure to properly handle CRLF sequences, allowing user-supplied data to be added to HTTP response headers without proper processing. As a result, an attacker can control HTTP response headers and bodies, potentially leading to cross-site scripting attacks and attacks on intermediate proxy servers. **Recommendations** For VMware vCenter Server version 6.0 before U2, update to version U2 or later to resolve the issue. For VMware ESXi version 6.0, update to a version that includes the fix for this issue, as no specific version is mentioned as being unaffected. At the moment, there is no information about a newer version that contains a fix for VMware ESXi version 6.0.