https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2015-9250.htmlhttps://patchthecve.com/cve/CVE-2015-9250.htmlWed, 17 Jun 2026 00:36:08 +0000HIGH 7.5: An issue was discovered in Skybox Platform before 7.5.201. Directory Traversal exists in /skyboxview/webskybox/attachmentdownload and /skyboxview/webskybox/filedownload via the tempFileName parameter.https://patchthecve.com/cve/CVE-2015-9249.htmlhttps://patchthecve.com/cve/CVE-2015-9249.htmlWed, 17 Jun 2026 00:36:08 +0000CRITICAL 9.8: An issue was discovered in Skybox Platform before 7.5.201. SQL Injection exists in /skyboxview/webservice/services/VersionWebService via a soapenv:Body element.https://patchthecve.com/cve/CVE-2015-9248.htmlhttps://patchthecve.com/cve/CVE-2015-9248.htmlWed, 17 Jun 2026 00:36:07 +0000MEDIUM 5.4: An issue was discovered in Skybox Platform before 7.5.201. Stored cross-site scripting vulnerabilities exist in the title, Comments, or Description field to /skyboxview/webskybox/tickets in Change Manager.https://patchthecve.com/cve/CVE-2015-9247.htmlhttps://patchthecve.com/cve/CVE-2015-9247.htmlWed, 17 Jun 2026 00:36:07 +0000MEDIUM 5.4: An issue was discovered in Skybox Platform before 7.5.401. Reflected cross-site scripting vulnerabilities exist in /skyboxview/webservice/services/VersionRepositoryWebService via a soapenv:Body element, or in the status parameter to login.html.https://patchthecve.com/cve/CVE-2015-9246.htmlhttps://patchthecve.com/cve/CVE-2015-9246.htmlWed, 17 Jun 2026 00:36:07 +0000CRITICAL 9.8: An issue was discovered in Skybox Platform before 7.5.201. Remote Unauthenticated Code Execution exists via a WAR archive containing a JSP file. The WAR file is sent to /skyboxview-softwareupdate/services/CollectorSoftwareUpdate and the JSP file is reached at /opt/skyboxview/thirdparty/jboss/server/https://patchthecve.com/cve/CVE-2017-14773.htmlhttps://patchthecve.com/cve/CVE-2017-14773.htmlWed, 17 Jun 2026 01:06:45 +0000HIGH 7.8: Skybox Manager Client Application prior to 8.5.501 is prone to an elevation of privileges vulnerability during authentication of a valid user in a debugger-pause state. The vulnerability can only be exploited by a local authenticated attacker.https://patchthecve.com/cve/CVE-2017-14772.htmlhttps://patchthecve.com/cve/CVE-2017-14772.htmlWed, 17 Jun 2026 01:06:45 +0000LOW 3.3: Skybox Manager Client Application is prone to information disclosure via a username enumeration attack. A local unauthenticated attacker could exploit the flaw to obtain valid usernames, by analyzing error messages upon valid and invalid account login attempts.https://patchthecve.com/cve/CVE-2017-14771.htmlhttps://patchthecve.com/cve/CVE-2017-14771.htmlWed, 17 Jun 2026 01:06:45 +0000MEDIUM 5.5: Skybox Manager Client Application prior to 8.5.501 is prone to an arbitrary file upload vulnerability due to insufficient input validation of user-supplied files path when uploading files via the application. During a debugger-pause state, a local authenticated attacker can upload an arbitrary file https://patchthecve.com/cve/CVE-2017-14770.htmlhttps://patchthecve.com/cve/CVE-2017-14770.htmlWed, 17 Jun 2026 01:06:45 +0000MEDIUM 5.5: Skybox Manager Client Application prior to 8.5.501 is prone to an information disclosure vulnerability of user password hashes. A local authenticated attacker can access the password hashes in a debugger-pause state during the authentication process.