Eve-ng

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Eve-ng records in CISA KEV

No Eve-ng vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Eve-ng 4 records HIGH

Records

4 records

TI-2022-13358 CVE-2022-31366 · GHSA-8fqj-hqqp-j85q

An arbitrary file upload vulnerability in the apiImportLabs function in api_labs.php of…

HIGH 67

An arbitrary file upload vulnerability in the apiImportLabs function in api_labs.php of EVE-NG 2.0.3-112 Community allows attackers to execute arbitrary code via a crafted UNL file.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01424 Published 2022-10-20 No fix listed CWE-434

TI-2025-41215 CVE-2025-67442 · GHSA-36x3-32q8-65fc

EVE-NG 6.4.0-13-PRO is vulnerable to Directory Traversal.

HIGH 66

EVE-NG 6.4.0-13-PRO is vulnerable to Directory Traversal.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00574 Published 2025-12-19 No fix listed CWE-22

TI-2022-10778 CVE-2022-27903 · GHSA-qqr8-hrr4-phvx

An OS Command Injection vulnerability in the configuration parser of Eve-NG Professional…

MEDIUM 43

An OS Command Injection vulnerability in the configuration parser of Eve-NG Professional through 4.0.1-65 and Eve-NG Community through 2.0.3-112 allows a remote authenticated attacker to execute commands as root by editi…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02462 Published 2022-05-04 No fix listed CWE-78

TI-2024-02221 CVE-2024-2391 · GHSA-rm3v-mvrr-w747

EVE-NG Lab cross site scripting

LOW 28

A vulnerability was found in EVE-NG 5.0.1-13 and classified as problematic.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00479 Published 2024-03-12 No fix listed CWE-79

Open these records in search →

Critical	0
High	3
Medium	1
Low	0
No CVSS	0