Henry is an attacker and wants to gain control of a system and use it...

Henry is executing commands or viewing data outside the intended target path

Henry is using a denial of service attack which is a valid threat used by an attacker

Henry is taking advantage of an incorrect configuration that leads to access with higher-than-expected privilege

Henry uses poorly designed input validation routines to create or alter commands to gain access to unintended data or execute commands