Vulnerabilities

TI-2022-19976 CVE-2022-41572 · GHSA-3wv8-q6g7-7frh

An issue was discovered in EyesOfNetwork (EON) through 5.3.11.

MEDIUM 50

An issue was discovered in EyesOfNetwork (EON) through 5.3.11.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00604 Published 2025-01-07 No fix listed CWE-276

TI-2022-19975 CVE-2022-41571 · GHSA-j7p4-7jxx-qhpc

An issue was discovered in EyesOfNetwork (EON) through 5.3.11.

MEDIUM 44

An issue was discovered in EyesOfNetwork (EON) through 5.3.11.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01082 Published 2022-09-27 No fix listed

TI-2022-19974 CVE-2022-41570 · GHSA-q8m2-9wq9-fwhm

An issue was discovered in EyesOfNetwork (EON) through 5.3.11.

MEDIUM 50

An issue was discovered in EyesOfNetwork (EON) through 5.3.11.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00806 Published 2022-09-27 No fix listed CWE-89

TI-2021-17623 CVE-2021-40643 · GHSA-x327-f57f-h5w6

EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail…

MEDIUM 47

EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail options configuration page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02964 Published 2022-06-30 No fix listed

TI-2022-08454 CVE-2022-24612 · GHSA-89rf-6m5g-935m

An authenticated user can upload an XML file containing an XSS via the ITSM module of…

LOW 25

An authenticated user can upload an XML file containing an XSS via the ITSM module of EyesOfNetwork 5.3.11, resulting in a stored XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00558 Published 2022-02-25 No fix listed CWE-79

TI-2021-12920 CVE-2021-33525 · GHSA-r7vx-27c9-pg66

EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution (by authenticated…

MEDIUM 49

EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution (by authenticated users) via shell metacharacters in the nagios_path parameter to lilac/export.php, as demonstrated by %26%26+curl to insert an "&& curl…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0774 Published 2021-05-24 No fix listed CWE-78

TI-2021-08993 CVE-2021-27513 · GHSA-42ff-q9r4-9fgc

The module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload…

MEDIUM 61

The module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload arbitrary .xml.php files because it relies on "le filtre userside."

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.2839 Published 2021-02-21 No fix listed CWE-434

TI-2021-08994 CVE-2021-27514 · GHSA-v598-3w4j-2787

EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which…

MEDIUM 48

EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-force authentication bypass (such as in CVE-2021-27513 exploitation).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03548 Published 2021-02-21 No fix listed CWE-307

TI-2020-16945 CVE-2020-27887 · GHSA-w57r-m94c-hxh3

An issue was discovered in EyesOfNetwork 5.3 through 5.3-8.

MEDIUM 42

An issue was discovered in EyesOfNetwork 5.3 through 5.3-8.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01765 Published 2020-10-29 No fix listed CWE-78

TI-2020-16944 CVE-2020-27886 · GHSA-mw66-fjc2-5mm7

An issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8.

MEDIUM 45

An issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01704 Published 2020-10-29 No fix listed CWE-89

TI-2020-14930 CVE-2020-24390 · GHSA-m38f-mjwg-h5rw

eonweb in EyesOfNetwork before 5.3-7 does not properly escape the username on the…

LOW 29

eonweb in EyesOfNetwork before 5.3-7 does not properly escape the username on the /module/admin_logs page, which might allow pre-authentication stored XSS during login/logout logs recording.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00989 Published 2020-08-27 No fix listed CWE-79

TI-2020-07575 CVE-2020-9465 · GHSA-4qh2-wppx-cq27

An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3.

HIGH 83

An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.81824 Published 2020-02-28 No fix listed CWE-89

TI-2020-06935 CVE-2020-8655 · GHSA-qhg6-px34-g7qc

An issue was discovered in EyesOfNetwork 5.3.

CRITICAL 93KEV

An issue was discovered in EyesOfNetwork 5.3.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.5993 Published 2020-02-06 No fix listed CWE-269

TI-2020-06934 CVE-2020-8654 · GHSA-hm95-jj3v-8fvx

An issue was discovered in EyesOfNetwork 5.3.

HIGH 81

An issue was discovered in EyesOfNetwork 5.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.91334 Published 2020-02-06 No fix listed CWE-78

TI-2020-06936 CVE-2020-8656 · GHSA-9vpp-5ch5-wr42

An issue was discovered in EyesOfNetwork 5.3.

HIGH 83

An issue was discovered in EyesOfNetwork 5.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.846 Published 2020-02-06 No fix listed CWE-89

TI-2020-06937 CVE-2020-8657 · GHSA-3w5r-gmmj-prc2

An issue was discovered in EyesOfNetwork 5.3.

CRITICAL 100KEV

An issue was discovered in EyesOfNetwork 5.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.91874 Published 2020-02-06 No fix listed CWE-798

TI-2019-11122 CVE-2019-14923 · GHSA-qhmm-9jm5-prhp

EyesOfNetwork 5.1 allows Remote Command Execution via shell metacharacters in the module/tool_all/ host field.

MEDIUM 45

EyesOfNetwork 5.1 allows Remote Command Execution via shell metacharacters in the module/tool_all/ host field.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.0427 Published 2019-08-16 No fix listed CWE-78

TI-2017-11729 CVE-2017-16000 · GHSA-97px-mmp8-65xh

SQL injection vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows…

LOW 35

SQL injection vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the graph parameter to module/capacity_per_label/index.ph…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01754 Published 2017-10-29 No fix listed CWE-89

TI-2017-11664 CVE-2017-15933 · GHSA-5qmh-6p7q-jw57

SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb)…

LOW 36

SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the host parameter to module/capacity_per_d…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02279 Published 2017-10-27 No fix listed CWE-89

TI-2017-11627 CVE-2017-15880 · GHSA-7www-8rpp-j97r

SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb)…

LOW 35

SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the group_name parameter to module/admin_gr…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01941 Published 2017-10-24 No fix listed CWE-89

TI-2017-11112 CVE-2017-15188 · GHSA-cmqm-c7qr-f58c

A persistent (stored) XSS vulnerability in the EyesOfNetwork web interface (aka eonweb)…

LOW 24

A persistent (stored) XSS vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via the hosts array parameter to module/admi…

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00815 Published 2017-10-10 No fix listed CWE-79

TI-2017-11003 CVE-2017-14985 · GHSA-242h-wv24-7wx4

Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb)…

LOW 26

Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the url parameter to module/module_frame/index.p…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0081 Published 2017-10-02 No fix listed CWE-79

TI-2017-11002 CVE-2017-14984 · GHSA-5858-p5h5-3gcf

Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb)…

LOW 26

Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the bp_name parameter to /module/admin_bp/add_se…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0081 Published 2017-10-02 No fix listed CWE-79

TI-2017-11001 CVE-2017-14983 · GHSA-45fp-v65q-47rh

Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb)…

LOW 24

Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via the object parameter to module/admin_co…

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00815 Published 2017-10-02 No fix listed CWE-79

TI-2017-10814 CVE-2017-14753 · GHSA-26cr-hq99-58fp

Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb)…

LOW 26

Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the filter parameter to module/module_filters/in…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00883 Published 2017-09-27 No fix listed CWE-79

Vulnerabilities

Filters