Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 and earlier. If this vulnerability is exploited, a local authenticated attacker who can log in to the server where the affected product is installed may obtain SYSTEM privilege.
Vendor
Fsas Technologies Inc. vulnerabilities
9 published CVES affecting Fsas Technologies Inc., from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 9
- Critical
- 0
- High
- 6
- Medium
- 3
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
- FUJITSU Business Application ID Link Manager II 3
- FUJITSU Software ID Link Manager 3
- FUJITSU Software TIME CREATOR ID Link Manager 3
- ServerView Agents for Windows 3
- FUJITSU Software TIME CREATOR ID Link Manager SaaS 2
- IPCOM VE2 Series 2
- ETERNUS SF AdvancedCopy Manager Standard Edition (for RHEL 7/ 8/ 9) 1
- ETERNUS SF AdvancedCopy Manager Standard Edition (for Solaris 10/ 11) 1
- ETERNUS SF AdvancedCopy Manager Standard Edition (for Windows Server 2016/ 2019/ 2022) 1
- ETERNUS SF Express (for Windows Server 2016/ 2019/ 2022) 1
- ETERNUS SF Expressn (for RHEL 7/ 8/ 9) 1
- ETERNUS SF Storage Cruiser (for Solaris 10/ 11) 1
- ETERNUS SF Storage Cruiser (for Windows Server 2016/ 2019/ 2022) 1
- ETERNUS SF Storage Cruisern (for RHEL 7/ 8/ 9) 1
- IPCOM EX2 Series 1
- IPCOM EX2 Series (V01L0x Series) 1
Latest Fsas Technologies Inc. CVEs
Newest publication first
-
HighCVSS 8.5 EPSS 0.10%
-
HighCVSS 8.5 EPSS 0.10%
Incorrect permission assignment for critical resource issue exists in ServerView Agents for Windows V11.60.04 and earlier. If this vulnerability is exploited, a local authenticated attacker who can log in to the server where the affected product is installed may obtain SYSTEM pri...
-
HighCVSS 8.4 EPSS 0.16%
The installer of ServerView Agents for Windows provided by Fsas Technologies Inc. may insecurely load Dynamic Link Libraries. Arbitrary code may be executed with the administrator privilege when the installer is executed.
-
HighCVSS 8.4 EPSS 0.19%
ETERNUS SF provided by Fsas Technologies Inc. contains an incorrect default permissions vulnerability. A low-privileged user with access to the management server may obtain database credentials, potentially allowing execution of OS commands with administrator privileges.
-
HighCVSS 7.5 EPSS 0.43%
Observable timing discrepancy issue exists in IPCOM EX2 Series V01L02NF0001 to V01L06NF0401, V01L20NF0001 to V01L20NF0401, V02L20NF0001 to V02L21NF0301, and IPCOM VE2 Series V01L04NF0001 to V01L06NF0112. If this vulnerability is exploited, some of the encrypted communication may...
-
MediumCVSS 6.3 EPSS 0.36%
Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not.
-
HighCVSS 8.6 EPSS 0.68%
Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker.
-
MediumCVSS 6.5 EPSS 0.44%
Missing authentication for critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, sensitive information may be obtained and/or the information stored in the database may be altered by a remote authenticated...
-
MediumCVSS 5.3 EPSS 0.46%
Use of uninitialized resource issue exists in IPCOM EX2 Series (V01L0x Series) V01L07NF0201 and earlier, and IPCOM VE2 Series V01L07NF0201 and earlier. If this vulnerability is exploited, the system may be rebooted or suspended by receiving a specially crafted packet.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.