Vulnerabilities

TI-2016-04393 CVE-2016-5076 · GHSA-rx9f-26mc-8crr

Information disclosure in CloudView NMS before 2.10a

LOW 36

CloudView NMS before 2.10a allows remote attackers to obtain sensitive information via a direct request for admin/auto.def.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01424 Published 2017-04-10 No fix listed CWE-200

TI-2016-04392 CVE-2016-5075 · GHSA-pcv2-79g6-vcp8

LOW 28

CloudView NMS before 2.10a has XSS via a TELNET login.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00652 Published 2017-04-10 No fix listed CWE-79

TI-2016-04391 CVE-2016-5074 · GHSA-xfpx-qrr3-2gmv

MEDIUM 45

CloudView NMS before 2.10a has a format string issue exploitable over SNMP.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0131 Published 2017-04-10 No fix listed CWE-134

TI-2016-04390 CVE-2016-5073 · GHSA-475m-7xf6-mpr9

LOW 28

CloudView NMS before 2.10a has XSS via SNMP.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00652 Published 2017-04-10 No fix listed CWE-79