Op5

9 CVEs across 3 Op5 products. Browse Op5 vulnerabilities, severities, and proof-of-concept exploits.

Op5 products with known CVEs

ProductCVEs
Monitor9
System-Op5config1
System-Portal1
Op5 CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2021-40272Medium6.12022-11-14OP5 Monitor 8.3.1, 8.3.2, and OP5 8.3.3 are vulnerable to Cross Site Scripting (XSS).
CVE-2014-49072014-07-11Cross-site scripting (XSS) vulnerability in share/pnp/application/views/kohana_error_page.php in PNP4Nagios before 0.6.22 allows remote attackers to inject arb…
CVE-2013-61412014-01-29Unspecified vulnerability in op5 Monitor before 6.1.3 allows attackers to read arbitrary files via unknown vectors related to lack of authorization.
CVE-2012-02642013-12-31op5 Monitor and op5 Appliance before 5.5.0 do not properly manage session cookies, which allows remote attackers to have an unspecified impact via unspecified…
CVE-2012-02632013-12-31monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user cre…
CVE-2012-02622013-12-31op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shel…
CVE-2012-02612013-12-31license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacha…
CVE-2008-50282008-11-10Cross-site request forgery (CSRF) vulnerability in cmd.cgi in (1) Nagios 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote attackers to send commands to the…
CVE-2008-50272008-11-10The Nagios process in (1) Nagios before 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote authenticated users to bypass authorization checks, and trigger ex…