Read the docs

Eyeofnetwork

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Eyeofnetwork records in CISA KEV

No Eyeofnetwork vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Eyes Of Network Web 3 records MEDIUM

Records

3 records in Eyes Of Network Web · all components

TI-2022-17990 CVE-2022-38357 · GHSA-w9xf-vff6-27gq

Injection in Eyes of Network Web

Priority MEDIUM 40

Improper neutralization of special elements leaves the Eyes of Network Web application vulnerable to an iFrame injection attack, via the url parameter of /module/module_frame/index.php.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0108 Published 2022-08-15 No fix listed CWE-74
TI-2022-17992 CVE-2022-38359 · GHSA-3wqh-9cfw-65c4

Cross-site request forgery in Eyes of Network

Priority LOW 39

Cross-site request forgery attacks can be carried out against the Eyes of Network web application, due to an absence of adequate protections.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00506 Published 2022-08-15 No fix listed CWE-352
TI-2022-17991 CVE-2022-38358 · GHSA-823g-f5wm-9489

Cross-site scripting in Eyes of Network

Priority LOW 28

Improper neutralization of input during web page generation leaves the Eyes of Network web application vulnerable to cross-site scripting attacks at /module/admin_notifiers/rules.php and /module/report_event/indext.php v…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00644 Published 2022-08-15 No fix listed CWE-79
Open these records in search →