Vulnerabilities

TI-2024-10810 CVE-2024-11664 · GHSA-5r88-6jm3-pfvc

eNMS TGZ File controller.py multiselect_filtering path traversal

HIGH 73

A vulnerability, which was classified as critical, has been found in eNMS up to 4.2.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0201 Published 2024-11-25 No fix listed CWE-22

TI-2024-31082 CVE-2024-46649 · GHSA-vvqc-xqxj-mg66

HIGH 72

eNMS up to 4.7.1 is vulnerable to Directory Traversal via download/folder.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00959 Published 2024-09-20 No fix listed CWE-22

TI-2024-31081 CVE-2024-46648 · GHSA-6q3p-cf37-rf5w

HIGH 72

eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via scan_folder.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00879 Published 2024-09-20 No fix listed CWE-22

TI-2024-31080 CVE-2024-46647 · GHSA-9f35-qf4j-2v26

MEDIUM 62

eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via upload_files.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00818 Published 2024-09-20 No fix listed CWE-22

TI-2024-31079 CVE-2024-46646 · GHSA-f8cf-9769-43r2

MEDIUM 62

eNMS up to 4.7.1 is vulnerable to Directory Traversal via /download/file.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00836 Published 2024-09-20 No fix listed CWE-22

TI-2024-31078 CVE-2024-46645 · GHSA-2x56-wxfv-qqrm

HIGH 72

eNMS 4.0.0 is vulnerable to Directory Traversal via get_tree_files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00879 Published 2024-09-20 No fix listed CWE-22

TI-2024-31077 CVE-2024-46644 · GHSA-458x-pm5m-qh42

MEDIUM 62

eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via edit_file.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0082 Published 2024-09-20 No fix listed CWE-22