Netsas Enigma Network Management Solution
11 CVEs affecting Netsas Enigma Network Management Solution. Latest disclosed: 2020-03-20. Critical: 2, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-16072 | Critical | 9.8 | 2020-03-20 | An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an attacker to execute arbitrary code… |
CVE-2019-16064 | Critical | 9.6 | 2020-03-19 | NETSAS Enigma NMS 65.0.0 and prior suffers from a directory traversal vulnerability that can allow an authenticated user to access files and directories stored… |
CVE-2019-16068 | High | 8.8 | 2020-03-19 | A CSRF vulnerability exists in NETSAS ENIGMA NMS version 65.0.0 and prior that could allow an attacker to be able to trick a victim into submitting a malicious… |
CVE-2019-16066 | High | 8.8 | 2020-03-19 | An unrestricted file upload vulnerability exists in user and system file upload functions in NETSAS Enigma NMS 65.0.0 and prior. This allows an attacker to upl… |
CVE-2019-16065 | High | 8.8 | 2020-03-19 | A remote SQL injection web vulnerability was discovered in the Enigma NMS 65.0.0 and prior web application that allows an attacker to execute SQL commands to e… |
CVE-2019-16061 | High | 8.8 | 2020-03-19 | A number of files on the NETSAS Enigma NMS server 65.0.0 and prior are granted weak world-readable and world-writable permissions, allowing any low privileged… |
CVE-2019-16063 | High | 7.5 | 2020-03-19 | NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data rendered within web pages. It is possible for an attacker to expose unencrypted sensitive da… |
CVE-2019-16067 | High | 7.5 | 2020-03-19 | NETSAS Enigma NMS 65.0.0 and prior utilises basic authentication over HTTP for enforcing access control to the web application. The use of weak authentication… |
CVE-2019-16062 | Medium | 6.5 | 2020-03-19 | NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data stored within the SQL database. It is possible for an attacker to expose unencrypted sensiti… |
CVE-2019-16069 | Medium | 6.1 | 2020-03-19 | A number of stored Cross-site Scripting (XSS) vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threat actor to inject m… |
CVE-2019-16070 | Medium | 6.1 | 2020-03-19 | A number of stored Cross-site Scripting (XSS) vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and prior that could allow a threat actor to inject m… |