EyesOfNetwork

Records40All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical15CVSS 9.0–10.0

CVSS high15CVSS 7.0–8.9

Exploited now

EyesOfNetwork records in CISA KEV

TI-2020-06935 EyesOfNetwork Improper Privilege Management Vulnerability CRITICAL 93KEV 2021-11-03 TI-2020-06937 EyesOfNetwork Use of Hard-Coded Credentials Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Eyesofnetwork 37 records CRITICAL Web Interface 3 records LOW

Records

37 records in Eyesofnetwork · all components

TI-2020-06937 CVE-2020-8657 · GHSA-3w5r-gmmj-prc2

An issue was discovered in EyesOfNetwork 5.3.

CRITICAL 100KEV

An issue was discovered in EyesOfNetwork 5.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.91874 Published 2020-02-06 No fix listed CWE-798

TI-2020-06935 CVE-2020-8655 · GHSA-qhg6-px34-g7qc

An issue was discovered in EyesOfNetwork 5.3.

CRITICAL 93KEV

An issue was discovered in EyesOfNetwork 5.3.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.5993 Published 2020-02-06 No fix listed CWE-269

TI-2020-07575 CVE-2020-9465 · GHSA-4qh2-wppx-cq27

An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3.

HIGH 83

An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.81824 Published 2020-02-28 No fix listed CWE-89

TI-2020-06936 CVE-2020-8656 · GHSA-9vpp-5ch5-wr42

An issue was discovered in EyesOfNetwork 5.3.

HIGH 83

An issue was discovered in EyesOfNetwork 5.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.846 Published 2020-02-06 No fix listed CWE-89

TI-2020-06934 CVE-2020-8654 · GHSA-hm95-jj3v-8fvx

An issue was discovered in EyesOfNetwork 5.3.

HIGH 81

An issue was discovered in EyesOfNetwork 5.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.91334 Published 2020-02-06 No fix listed CWE-78

TI-2021-08993 CVE-2021-27513 · GHSA-42ff-q9r4-9fgc

The module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload…

MEDIUM 61

The module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload arbitrary .xml.php files because it relies on "le filtre userside."

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.2839 Published 2021-02-21 No fix listed CWE-434

TI-2022-19976 CVE-2022-41572 · GHSA-3wv8-q6g7-7frh

An issue was discovered in EyesOfNetwork (EON) through 5.3.11.

MEDIUM 50

An issue was discovered in EyesOfNetwork (EON) through 5.3.11.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00604 Published 2025-01-07 No fix listed CWE-276

TI-2022-19974 CVE-2022-41570 · GHSA-q8m2-9wq9-fwhm

An issue was discovered in EyesOfNetwork (EON) through 5.3.11.

MEDIUM 50

An issue was discovered in EyesOfNetwork (EON) through 5.3.11.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00806 Published 2022-09-27 No fix listed CWE-89

TI-2021-12920 CVE-2021-33525 · GHSA-r7vx-27c9-pg66

EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution (by authenticated…

MEDIUM 49

EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution (by authenticated users) via shell metacharacters in the nagios_path parameter to lilac/export.php, as demonstrated by %26%26+curl to insert an "&& curl…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0774 Published 2021-05-24 No fix listed CWE-78

TI-2021-08994 CVE-2021-27514 · GHSA-v598-3w4j-2787

EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which…

MEDIUM 48

EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-force authentication bypass (such as in CVE-2021-27513 exploitation).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03548 Published 2021-02-21 No fix listed CWE-307

TI-2017-14399 CVE-2017-1000060 · GHSA-cq6x-5crf-jw5f

EyesOfNetwork (EON) 5.1 Unauthenticated SQL Injection in eonweb leading to remote root

MEDIUM 48

EyesOfNetwork (EON) 5.1 Unauthenticated SQL Injection in eonweb leading to remote root

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03458 Published 2017-07-13 No fix listed CWE-89

TI-2021-17623 CVE-2021-40643 · GHSA-x327-f57f-h5w6

EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail…

MEDIUM 47

EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail options configuration page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02964 Published 2022-06-30 No fix listed

TI-2020-16944 CVE-2020-27886 · GHSA-mw66-fjc2-5mm7

An issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8.

MEDIUM 45

An issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01704 Published 2020-10-29 No fix listed CWE-89

TI-2019-11122 CVE-2019-14923 · GHSA-qhmm-9jm5-prhp

EyesOfNetwork 5.1 allows Remote Command Execution via shell metacharacters in the module/tool_all/ host field.

MEDIUM 45

EyesOfNetwork 5.1 allows Remote Command Execution via shell metacharacters in the module/tool_all/ host field.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.0427 Published 2019-08-16 No fix listed CWE-78

TI-2017-10510 CVE-2017-14403 · GHSA-64v5-qf7p-vhvh

The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the term…

MEDIUM 45

The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the term parameter to module/admin_group/search.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01454 Published 2017-09-13 No fix listed CWE-89

TI-2017-10509 CVE-2017-14402 · GHSA-rvwx-8qx3-h22f

The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name…

MEDIUM 45

The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name parameter to module/admin_user/add_modify_user.php in the "ACCOUNT CREATION" section, related to lack of input validation in include/…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01454 Published 2017-09-13 No fix listed CWE-89

TI-2017-10508 CVE-2017-14401 · GHSA-8v34-2257-pjg4

The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name…

MEDIUM 45

The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name parameter to module/admin_user/add_modify_user.php in the "ACCOUNT UPDATE" section.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01454 Published 2017-09-13 No fix listed CWE-89

TI-2017-10377 CVE-2017-14252 · GHSA-fq3v-p4wm-2vmj

SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the group_id cookie to side.php.

MEDIUM 45

SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the group_id cookie to side.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01454 Published 2017-09-11 No fix listed CWE-89

TI-2017-10373 CVE-2017-14247 · GHSA-7g7f-hvv9-6rfg

SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the…

MEDIUM 45

SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the user_id cookie to header.php, a related issue to CVE-2017-1000060.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01454 Published 2017-09-11 No fix listed CWE-89

TI-2022-19975 CVE-2022-41571 · GHSA-j7p4-7jxx-qhpc

An issue was discovered in EyesOfNetwork (EON) through 5.3.11.

MEDIUM 44

An issue was discovered in EyesOfNetwork (EON) through 5.3.11.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01082 Published 2022-09-27 No fix listed

TI-2017-10282 CVE-2017-14119 · GHSA-cvc8-9ffc-xhf3

In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\snmpwalk.php…

MEDIUM 43

In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\snmpwalk.php does not properly restrict popen calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in a…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02395 Published 2017-09-03 No fix listed CWE-78

TI-2017-10281 CVE-2017-14118 · GHSA-9q45-cg5w-49pr

In the EyesOfNetwork web interface (aka eonweb) 5.1-0…

MEDIUM 43

In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\interface.php does not properly restrict exec calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in th…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02375 Published 2017-09-03 No fix listed CWE-78

TI-2020-16945 CVE-2020-27887 · GHSA-w57r-m94c-hxh3

An issue was discovered in EyesOfNetwork 5.3 through 5.3-8.

MEDIUM 42

An issue was discovered in EyesOfNetwork 5.3 through 5.3-8.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01765 Published 2020-10-29 No fix listed CWE-78

TI-2017-03989 CVE-2017-6088 · GHSA-fv9p-wpgw-2c3h

Multiple SQL injection vulnerabilities in EyesOfNetwork (aka EON) 5.0 and earlier allow…

MEDIUM 40

Multiple SQL injection vulnerabilities in EyesOfNetwork (aka EON) 5.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) bp_name, (2) display, (3) search, or (4) equipment paramete…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.05835 Published 2017-04-11 No fix listed CWE-89

TI-2017-10512 CVE-2017-14405 · GHSA-c8hq-5qq6-2rfx

The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote command execution via…

LOW 38

The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote command execution via shell metacharacters in a hosts_cacti array parameter to module/admin_device/index.php.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.03531 Published 2017-09-13 No fix listed CWE-78

Open these records in search →