Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Network Optix Clear all filters
TI-2026-54524 CVE-2026-78414 · GHSA-237w-25vx-r57c

Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site name

Priority LOW 37

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser…

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00338 Published 2026-08-24 Fixed in 6.1.3 CWE-79
TI-2026-08813 CVE-2026-10056 · GHSA-r863-5pgm-c8g4

CORS misconfiguration in Nx Witness VMS allows session token exfiltration via cross-origin request

Priority LOW 34

CORS misconfiguration in the REST API of Network Optix Nx Witness VMS before version 6.1.2, when running in the default Standard security mode, on Linux and Windows allows an unauthenticated remote attacker to steal the…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00242 Published 2026-05-29 Fixed in 6.1.2 CWE-942
TI-2023-05751 CVE-2023-6263 · GHSA-xh6m-2h5x-55mh

Server Spoofing Vulnerability in NxCloud

Priority LOW 37

An issue was discovered by IPVM team in Network Optix NxCloud before 23.1.0.40440.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00489 Published 2023-11-22 Fixed in 23.1.0.40440 CWE-290