Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Enms records in CISA KEVNo Enms vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 73
A vulnerability, which was classified as critical, has been found in eNMS up to 4.2.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.0201 · Published 2024-11-25 · No fix listed CWE-22
Priority HIGH 72
eNMS up to 4.7.1 is vulnerable to Directory Traversal via download/folder.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00959 · Published 2024-09-20 · No fix listed CWE-22
Priority HIGH 72
eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via scan_folder.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00879 · Published 2024-09-20 · No fix listed CWE-22
Priority HIGH 72
eNMS 4.0.0 is vulnerable to Directory Traversal via get_tree_files.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00879 · Published 2024-09-20 · No fix listed CWE-22
Priority MEDIUM 62
eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via upload_files.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00818 · Published 2024-09-20 · No fix listed CWE-22
Priority MEDIUM 62
eNMS up to 4.7.1 is vulnerable to Directory Traversal via /download/file.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00836 · Published 2024-09-20 · No fix listed CWE-22
Priority MEDIUM 62
eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via edit_file.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0082 · Published 2024-09-20 · No fix listed CWE-22
Open these records in search →