AlienVault OSSIM is prone to multiple remote code execution vulnerabilities
An attacker can leverage these issues to execute arbitrary code with root privileges.
Updates are available.
The application fails to sufficiently sanitize user-supplied input.
AlienVault OSSIM 4.6.1 and prior are vulnerable.
Send a special crafted HTTP SOAP request and check the response.