Op5
8 CVEs across 3 Op5 products. Browse Op5 vulnerabilities, severities, and proof-of-concept exploits.
Op5 products with known CVEs
Op5 CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2021-40272 | Medium | 6.1 | 2022-11-14 | OP5 Monitor 8.3.1, 8.3.2, and OP5 8.3.3 are vulnerable to Cross Site Scripting (XSS). |
CVE-2014-4907 | | | 2014-07-11 | Cross-site scripting (XSS) vulnerability in share/pnp/application/views/kohana_error_page.php in PNP4Nagios before 0.6.22 allows remote attackers to inject arb… |
CVE-2013-6141 | | | 2014-01-29 | Unspecified vulnerability in op5 Monitor before 6.1.3 allows attackers to read arbitrary files via unknown vectors related to lack of authorization. |
CVE-2012-0264 | | | 2013-12-31 | op5 Monitor and op5 Appliance before 5.5.0 do not properly manage session cookies, which allows remote attackers to have an unspecified impact via unspecified… |
CVE-2012-0263 | | | 2013-12-31 | monitor/index.php in op5 Monitor and op5 Appliance before 5.5.1 allows remote authenticated users to obtain sensitive information such as database and user cre… |
CVE-2012-0262 | | | 2013-12-31 | op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shel… |
CVE-2012-0261 | | | 2013-12-31 | license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacha… |
CVE-2008-5028 | | | 2008-11-10 | Cross-site request forgery (CSRF) vulnerability in cmd.cgi in (1) Nagios 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote attackers to send commands to the… |
CVE-2008-5027 | | | 2008-11-10 | The Nagios process in (1) Nagios before 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote authenticated users to bypass authorization checks, and trigger ex… |