TI-2012-05463 CVE-2012-10040 · GHSA-vxcv-gc68-4r3q
Openfiler v2.x NetworkCard Command Execution
Priority HIGH 76
Openfiler v2.x contains a command injection vulnerability in the system.html page.
Openfiler
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Openfiler records in CISA KEVNo Openfiler vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2014-05992 CVE-2014-7190 · GHSA-j5wp-39vr-f3cf
Multiple cross-site request forgery (CSRF) vulnerabilities in Openfiler 2.99.1 allow…
Priority LOW 34
Multiple cross-site request forgery (CSRF) vulnerabilities in Openfiler 2.99.1 allow remote attackers to hijack the authentication of administrators for requests that (1) shutdown or (2) reboot the server via a request t…
TI-2011-00939 CVE-2011-1086 · GHSA-593x-cp4m-7r46
Cross-site scripting in Openfiler
Priority LOW 31
Cross-site scripting (XSS) vulnerability in admin/system.html in Openfiler 2.3 allows remote attackers to inject arbitrary web script or HTML via the device parameter.
TI-2023-27034 CVE-2023-49488 · GHSA-5wg8-rggr-gg6q
A cross-site scripting (XSS) vulnerability in Openfiler ESA v2.99.1 allows attackers to…
Priority LOW 28
A cross-site scripting (XSS) vulnerability in Openfiler ESA v2.99.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the nic parameter.
TI-2014-03531 CVE-2014-4309 · GHSA-vr9m-pp3c-c964
Multiple cross-site scripting (XSS) vulnerabilities in Openfiler 2.99 allow remote…
Priority LOW 22
Multiple cross-site scripting (XSS) vulnerabilities in Openfiler 2.99 allow remote attackers to inject arbitrary web script or HTML via the (1) TinkerAjax parameter to uptime.html, or remote authenticated users to inject…