Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Eyeofnetwork Clear all filters
TI-2022-17990 CVE-2022-38357 · GHSA-w9xf-vff6-27gq

Injection in Eyes of Network Web

Priority MEDIUM 40

Improper neutralization of special elements leaves the Eyes of Network Web application vulnerable to an iFrame injection attack, via the url parameter of /module/module_frame/index.php.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0108 Published 2022-08-15 No fix listed CWE-74
TI-2022-17992 CVE-2022-38359 · GHSA-3wqh-9cfw-65c4

Cross-site request forgery in Eyes of Network

Priority LOW 39

Cross-site request forgery attacks can be carried out against the Eyes of Network web application, due to an absence of adequate protections.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00506 Published 2022-08-15 No fix listed CWE-352
TI-2022-17991 CVE-2022-38358 · GHSA-823g-f5wm-9489

Cross-site scripting in Eyes of Network

Priority LOW 28

Improper neutralization of input during web page generation leaves the Eyes of Network web application vulnerable to cross-site scripting attacks at /module/admin_notifiers/rules.php and /module/report_event/indext.php v…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00644 Published 2022-08-15 No fix listed CWE-79