Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: Nozomi Networks CMC, Guardian 25.2.0 Clear all filters
TI-2025-03278 CVE-2025-3719 · GHSA-r268-f892-gv94

Incorrect authorization for CLI in Guardian/CMC before 25.2.0

Priority LOW 33

An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being properly enforced for users with limited privileges.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00276 Published 2025-10-07 Fixed in 25.2.0 CWE-863
TI-2025-03277 CVE-2025-3718 · GHSA-wmvw-wjx4-2qxx

Client-side path traversal in Guardian/CMC before 25.2.0

Priority LOW 26

A client-side path traversal vulnerability was discovered in the web management interface front-end due to missing validation of an input parameter.

CVSS 4.0MEDIUM 5.8 Network Low privileges User interaction EPSS 0.00232 Published 2025-10-07 Fixed in 25.2.0 CWE-22