Vulnerabilities

TI-2021-17382 CVE-2021-40272 · GHSA-6cg3-968w-gr56

OP5 Monitor 8.3.1, 8.3.2, and OP5 8.3.3 are vulnerable to Cross Site Scripting (XSS).

MEDIUM 60

OP5 Monitor 8.3.1, 8.3.2, and OP5 8.3.3 are vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01127 Published 2022-11-14 No fix listed CWE-79

TI-2014-04039 CVE-2014-4907 · GHSA-x4qq-4jc6-hr2v

Cross-site scripting (XSS) vulnerability in…

LOW 24

Cross-site scripting (XSS) vulnerability in share/pnp/application/views/kohana_error_page.php in PNP4Nagios before 0.6.22 allows remote attackers to inject arbitrary web script or HTML via a parameter that is not properl…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02214 Published 2014-07-11 No fix listed CWE-79

TI-2013-05181 CVE-2013-6141 · GHSA-qg44-p348-c8xm

Unspecified vulnerability in op5 Monitor before 6.1.3 allows attackers to read arbitrary…

LOW 25

Unspecified vulnerability in op5 Monitor before 6.1.3 allows attackers to read arbitrary files via unknown vectors related to lack of authorization.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.00993 Published 2014-01-29 No fix listed

TI-2012-00255 CVE-2012-0264 · GHSA-99gw-rhm2-2xpx

op5 Monitor and op5 Appliance before 5.5.0 do not properly manage session cookies, which…

MEDIUM 50

op5 Monitor and op5 Appliance before 5.5.0 do not properly manage session cookies, which allows remote attackers to have an unspecified impact via unspecified vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04361 Published 2013-12-31 No fix listed CWE-264

TI-2012-00254 CVE-2012-0263 · GHSA-h86x-wqgp-fw29

monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote…

LOW 23

monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user credentials via error messages that are triggered by (1) a malfo…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01941 Published 2013-12-31 No fix listed CWE-200

TI-2012-00253 CVE-2012-0262 · GHSA-w6rg-f6c3-mj53

op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance…

HIGH 81

op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.72851 Published 2013-12-31 No fix listed CWE-94

TI-2012-00252 CVE-2012-0261 · GHSA-v3fr-hqx7-jgff

license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3…

HIGH 81

license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.73949 Published 2013-12-31 No fix listed CWE-94

TI-2008-04781 CVE-2008-5028 · GHSA-f844-p5pg-6j6p

Cross-site request forgery (CSRF) vulnerability in cmd.cgi in (1) Nagios 3.0.5 and (2)…

LOW 34

Cross-site request forgery (CSRF) vulnerability in cmd.cgi in (1) Nagios 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote attackers to send commands to the Nagios process, and trigger execution of arbitrary programs…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02187 Published 2008-11-10 No fix listed CWE-352

TI-2008-04780 CVE-2008-5027 · GHSA-97vg-j9rv-47hw

The Nagios process in (1) Nagios before 3.0.5 and (2) op5 Monitor before 4.0.1 allows…

LOW 38

The Nagios process in (1) Nagios before 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote authenticated users to bypass authorization checks, and trigger execution of arbitrary programs by this process, via an (a) cus…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.06738 Published 2008-11-10 No fix listed CWE-264

Vulnerabilities

Filters