Vulnerabilities

TI-2021-20200 CVE-2021-44674 · GHSA-g8vf-4345-rm84

An information exposure issue has been discovered in Opmantek Open-AudIT 4.2.0.

LOW 31

An information exposure issue has been discovered in Opmantek Open-AudIT 4.2.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01081 Published 2022-01-03 No fix listed CWE-22

TI-2021-17613 CVE-2021-40612 · GHSA-vcqx-6wc6-5ghv

An issue was discovered in Opmantek Open-AudIT after 3.5.0.

MEDIUM 46

An issue was discovered in Opmantek Open-AudIT after 3.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02073 Published 2021-12-22 No fix listed

TI-2021-20328 CVE-2021-44916 · GHSA-w4hj-6g7h-5wc8

Opmantek Open-AudIT Community 4.2.0 (Fixed in 4.3.0) is affected by a Cross Site…

LOW 34

Opmantek Open-AudIT Community 4.2.0 (Fixed in 4.3.0) is affected by a Cross Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03709 Published 2021-12-20 No fix listed CWE-79

TI-2021-02335 CVE-2021-3333 · GHSA-v59p-pfh8-62m9

Opmantek Open-AudIT 4.0.1 is affected by cross-site scripting (XSS).

LOW 29

Opmantek Open-AudIT 4.0.1 is affected by cross-site scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00766 Published 2021-02-05 No fix listed CWE-79

TI-2021-02222 CVE-2021-3130 · GHSA-qpq8-7ff2-687p

Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH…

LOW 29

Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users using HTML 'password field' obfuscation.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01332 Published 2021-01-20 No fix listed

TI-2020-09607 CVE-2020-11943 · GHSA-7j94-4wqv-jq54

An issue was discovered in Open-AudIT 3.2.2.

MEDIUM 59

An issue was discovered in Open-AudIT 3.2.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.23901 Published 2020-04-29 No fix listed CWE-434

TI-2020-09606 CVE-2020-11942 · GHSA-2w7w-x22q-pmfp

An issue was discovered in Open-AudIT 3.2.2.

MEDIUM 45

An issue was discovered in Open-AudIT 3.2.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01237 Published 2020-04-29 No fix listed CWE-89

TI-2020-09796 CVE-2020-12261 · GHSA-2m97-wq46-x8xx

Open-AudIT 3.3.0 allows an XSS attack after login.

LOW 29

Open-AudIT 3.3.0 allows an XSS attack after login.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.02587 Published 2020-04-28 No fix listed CWE-79

TI-2020-09729 CVE-2020-12078 · GHSA-4288-822w-vf72

An issue was discovered in Open-AudIT 3.3.1.

MEDIUM 50

An issue was discovered in Open-AudIT 3.3.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.09999 Published 2020-04-28 No fix listed CWE-78

TI-2020-09605 CVE-2020-11941 · GHSA-v6r2-q8r3-9w6g

An issue was discovered in Open-AudIT 3.2.2.

MEDIUM 45

An issue was discovered in Open-AudIT 3.2.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04558 Published 2020-04-27 No fix listed CWE-78

TI-2020-07071 CVE-2020-8813 · GHSA-gg99-fwr4-rcj9

graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS…

HIGH 76

graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.73957 Published 2020-02-22 No fix listed CWE-78

TI-2019-12264 CVE-2019-16293 · GHSA-69jq-wmhm-pw4j

The Create Discoveries feature of Open-AudIT before 3.2.0 allows an authenticated…

MEDIUM 41

The Create Discoveries feature of Open-AudIT before 3.2.0 allows an authenticated attacker to execute arbitrary OS commands via a crafted value for a URL field.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01613 Published 2019-09-13 No fix listed CWE-78

TI-2018-11902 CVE-2018-16607 · GHSA-rcjr-ww2g-f988

Cross-site scripting (XSS) vulnerability in the Orgs Page in Open-AudIT Professional…

LOW 25

Cross-site scripting (XSS) vulnerability in the Orgs Page in Open-AudIT Professional edition in 2.2.7 allows remote attackers to inject arbitrary web script via the Orgs name field.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00653 Published 2018-09-19 No fix listed CWE-79

TI-2018-10394 CVE-2018-14493 · GHSA-8xmf-7cm7-rpmm

Cross-site scripting (XSS) vulnerability in the Groups Page in Open-Audit Community 2.2.6…

MEDIUM 55

Cross-site scripting (XSS) vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the group name.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.40907 Published 2018-07-25 No fix listed CWE-79

TI-2018-07894 CVE-2018-11124 · GHSA-mpgx-8ww8-7cf7

Cross-site scripting (XSS) vulnerability in Attributes functionality in Open-AudIT…

LOW 28

Cross-site scripting (XSS) vulnerability in Attributes functionality in Open-AudIT Community edition before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted attribute name of an Attribut…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01867 Published 2018-07-06 No fix listed CWE-79

TI-2018-07310 CVE-2018-10314 · GHSA-p26q-5mcm-ff33

Cross-site scripting (XSS) vulnerability in Open-AudIT Community 2.2.0 allows remote…

LOW 28

Cross-site scripting (XSS) vulnerability in Open-AudIT Community 2.2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the action parameter in the Disc…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01766 Published 2018-05-10 No fix listed CWE-79

TI-2016-05598 CVE-2016-6534 · GHSA-933m-qxvc-7xc2

Command injection in Opmantek NMIS before 8.5.12G

LOW 35

Opmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in the tools.pl CGI script.

CVSS 3.0HIGH 7.5 Network Low privileges No interaction EPSS 0.01187 Published 2017-04-10 No fix listed CWE-77

TI-2016-04905 CVE-2016-5642 · GHSA-28j8-cx9h-v2r5

Opmantek NMIS before 8.5.12G has XSS via SNMP.

LOW 25

Opmantek NMIS before 8.5.12G has XSS via SNMP.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00498 Published 2017-04-10 No fix listed CWE-79

Vulnerabilities

Filters