Priority HIGH 81
NetGain EM Plus 10.1.68 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious parameters to the script_test.jsp endpoint.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.0086 · Published 2026-03-11 · No fix listed CWE-94
Priority LOW 37
NetGain Enterprise Manager (EM) is affected by OS Command Injection vulnerabilities in versions before 10.0.57.
CVSS 3.0HIGH 7.2· Network · High privileges · No interaction · EPSS 0.03278 · Published 2018-11-01 · No fix listed CWE-78
Priority LOW 23
NetGain Enterprise Manager (EM) is affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities in versions before 10.1.12.
CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00518 · Published 2018-11-01 · No fix listed CWE-79
Priority MEDIUM 49
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager v7.2.699 build 1001.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0386 · Published 2018-01-23 · No fix listed CWE-78
Priority MEDIUM 49
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04491 · Published 2018-01-23 · No fix listed CWE-502
Priority MEDIUM 50
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04849 · Published 2018-01-23 · No fix listed CWE-22
Priority LOW 38
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Netgain Enterprise Manager.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02851 · Published 2018-01-23 · No fix listed CWE-39
Priority MEDIUM 49
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04232 · Published 2018-01-23 · No fix listed CWE-78
Priority LOW 38
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Netgain Enterprise Manager.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02847 · Published 2018-01-23 · No fix listed CWE-200
Priority MEDIUM 45
This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04123 · Published 2018-01-23 · No fix listed CWE-22
Priority LOW 33
This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02436 · Published 2018-01-23 · No fix listed CWE-22
Priority LOW 33
This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02264 · Published 2018-01-23 · No fix listed CWE-22
Priority HIGH 70
This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.54025 · Published 2018-01-23 · No fix listed CWE-22
Priority MEDIUM 44
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03152 · Published 2018-01-23 · No fix listed CWE-78
Priority LOW 33
This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02264 · Published 2018-01-23 · No fix listed CWE-22
Priority LOW 33
This vulnerability allows remote attackers to overwrite files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02409 · Published 2018-01-23 · No fix listed CWE-22
Priority LOW 34
This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03027 · Published 2018-01-23 · No fix listed CWE-22
Priority MEDIUM 45
This vulnerability allows remote attackers to execute code by overwriting arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04123 · Published 2018-01-23 · No fix listed CWE-22
Priority HIGH 76
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.57295 · Published 2018-01-23 · No fix listed CWE-22
Priority LOW 35
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03391 · Published 2018-01-23 · No fix listed CWE-22
Priority LOW 35
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03391 · Published 2018-01-23 · No fix listed CWE-22
Priority LOW 34
This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02558 · Published 2018-01-23 · No fix listed CWE-434
Priority LOW 33
This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02116 · Published 2018-01-23 · No fix listed CWE-22
Priority LOW 35
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03391 · Published 2018-01-23 · No fix listed CWE-22
Priority LOW 35
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.699 build 1001.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03391 · Published 2018-01-23 · No fix listed CWE-22
Load more