Webnms Framework (Zohocorp) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2017-01-23. Vendor: Zohocorp.

CVEs of Webnms Framework

• CVE-2016-6603 - CVSS 9.8 (critical), 2017-01-23: ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users via the UserName HTTP header.
• CVE-2016-6602 - CVSS 9.8 (critical), 2017-01-23: ZOHO WebNMS Framework 5.2 and 5.2 SP1 use a weak obfuscation algorithm to store passwords, which allows context-dependent attackers to obtain cleartext…
• CVE-2016-6601 - CVSS 7.5 (high), 2017-01-23: Directory traversal vulnerability in the file download functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to read arbitrary files…
• CVE-2016-6600 - CVSS 9.8 (critical), 2017-01-23: Directory traversal vulnerability in the file upload functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to upload and execute…