Opsview - vulnerabilities (CVEs)
16 CVEs in 2 products, 0 in the last 30 days, newest from 2020-01-02.
Products
- Opsview - 16 CVEs
- Opsview Core - 2 CVEs
Newest CVEs of Opsview
- CVE-2013-3936 - CVSS 6.1 (medium), 2020-01-02: Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 and Opsview Core before 20130522 allow remote attackers to inject arbitrary web…
- CVE-2013-3935 - CVSS 8.8 (high), 2020-01-02: Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.1 and Opsview Core before 20130522 allows remote attackers to hijack the authentication…
- CVE-2018-16148 - CVSS 6.1 (medium), 2018-09-05: The diagnosticsb2ksy parameter of the /rest endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross-Site Scripting.
- CVE-2018-16145 - CVSS 8.1 (high), 2018-09-05: The /etc/init.d/opsview-reporting-module script that runs at boot time in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 invokes a file that can be…
- CVE-2018-16144 - CVSS 9.8 (critical), 2018-09-05: The test connection functionality in the NetAudit section of Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to command injection due to…
- CVE-2018-16147 - CVSS 6.1 (medium), 2018-09-05: The data parameter of the /settings/api/router endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross-Site Scripting.
- CVE-2018-16146 - CVSS 7.2 (high), 2018-09-05: The web management console of Opsview Monitor 5.4.x before 5.4.2 provides functionality accessible by an authenticated administrator to test notifications…
- CVE-2016-10367 - CVSS 7.5 (high), 2017-05-03: In Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch), an…
- CVE-2016-10368 - CVSS 6.1 (medium), 2017-05-03: Open redirect vulnerability in Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016…
- CVE-2015-6035 - CVSS 6.1 (medium), 2017-04-10: Opsview before 2015-11-06 has XSS via SNMP.
- CVE-2015-4420 - CVSS 4.3 (medium), 2015-06-18: Multiple cross-site scripting (XSS) vulnerabilities in Opsview 4.6.2 and earlier allow remote attackers to inject arbitrary web script or HTML via a (1)…
- CVE-2013-7255 - CVSS 5.8 (medium), 2014-01-03: Open redirect vulnerability in Opsview before 4.4.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via…
- CVE-2013-7254 - CVSS 4.3 (medium), 2014-01-03: Cross-site scripting (XSS) vulnerability in Opsview before 4.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- CVE-2013-7256 - CVSS 6.8 (medium), 2014-01-03: Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.2 allows remote attackers to hijack the authentication of unspecified victims via…
- CVE-2013-5694 - CVSS 7.5 (high), 2013-11-05: SQL injection vulnerability in status/service/acknowledge in Opsview before 4.4.1 allows remote attackers to execute arbitrary SQL commands via the…
- CVE-2013-5695 - CVSS 4.3 (medium), 2013-11-05: Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id…
