Openfiler

5 CVEs across 1 Openfiler products. Browse Openfiler vulnerabilities, severities, and proof-of-concept exploits.

Openfiler products with known CVEs

ProductCVEs
Openfiler5
Openfiler CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2012-100402025-08-11Openfiler v2.x contains a command injection vulnerability in the system.html page. The device parameter is used to instantiate a NetworkCard object, whose cons…
CVE-2023-49488Medium6.12023-12-11A cross-site scripting (XSS) vulnerability in Openfiler ESA v2.99.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload i…
CVE-2011-1086Medium6.12020-02-07Cross-site scripting (XSS) vulnerability in admin/system.html in Openfiler 2.3 allows remote attackers to inject arbitrary web script or HTML via the device pa…
CVE-2014-71902014-09-30Multiple cross-site request forgery (CSRF) vulnerabilities in Openfiler 2.99.1 allow remote attackers to hijack the authentication of administrators for reques…
CVE-2014-43092014-06-18Multiple cross-site scripting (XSS) vulnerabilities in Openfiler 2.99 allow remote attackers to inject arbitrary web script or HTML via the (1) TinkerAjax para…