Priority HIGH 81
NetGain EM Plus 10.1.68 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious parameters to the script_test.jsp endpoint.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.0086 · Published 2026-03-11 · No fix listed CWE-94
Priority HIGH 76
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.57295 · Published 2018-01-23 · No fix listed CWE-22
Priority HIGH 70
This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.54025 · Published 2018-01-23 · No fix listed CWE-22
Priority MEDIUM 50
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04849 · Published 2018-01-23 · No fix listed CWE-22
Priority MEDIUM 49
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager v7.2.699 build 1001.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0386 · Published 2018-01-23 · No fix listed CWE-78
Priority MEDIUM 49
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04491 · Published 2018-01-23 · No fix listed CWE-502
Priority MEDIUM 49
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04232 · Published 2018-01-23 · No fix listed CWE-78
Priority MEDIUM 45
This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04123 · Published 2018-01-23 · No fix listed CWE-22
Priority MEDIUM 45
This vulnerability allows remote attackers to execute code by overwriting arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04123 · Published 2018-01-23 · No fix listed CWE-22
Priority MEDIUM 44
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03152 · Published 2018-01-23 · No fix listed CWE-78
Priority MEDIUM 44
This vulnerability allows remote attackers to bypass authentication on vulnerable installations of NetGain Systems Enterprise Manager 7.2.699 build 1001.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.03333 · Published 2018-01-23 · No fix listed CWE-289
Priority LOW 38
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Netgain Enterprise Manager.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02851 · Published 2018-01-23 · No fix listed CWE-39
Priority LOW 38
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Netgain Enterprise Manager.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02847 · Published 2018-01-23 · No fix listed CWE-200
Priority LOW 37
NetGain Enterprise Manager (EM) is affected by OS Command Injection vulnerabilities in versions before 10.0.57.
CVSS 3.0HIGH 7.2· Network · High privileges · No interaction · EPSS 0.03278 · Published 2018-11-01 · No fix listed CWE-78
Priority LOW 35
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03391 · Published 2018-01-23 · No fix listed CWE-22
Priority LOW 35
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03391 · Published 2018-01-23 · No fix listed CWE-22
Priority LOW 35
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03391 · Published 2018-01-23 · No fix listed CWE-22
Priority LOW 35
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.699 build 1001.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03391 · Published 2018-01-23 · No fix listed CWE-22
Priority LOW 34
This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03027 · Published 2018-01-23 · No fix listed CWE-22
Priority LOW 34
This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02558 · Published 2018-01-23 · No fix listed CWE-434
Priority LOW 33
This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02436 · Published 2018-01-23 · No fix listed CWE-22
Priority LOW 33
This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02264 · Published 2018-01-23 · No fix listed CWE-22
Priority LOW 33
This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02264 · Published 2018-01-23 · No fix listed CWE-22
Priority LOW 33
This vulnerability allows remote attackers to overwrite files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02409 · Published 2018-01-23 · No fix listed CWE-22
Priority LOW 33
This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02116 · Published 2018-01-23 · No fix listed CWE-22
Load more