Opmantek Open-audit
16 CVEs affecting Opmantek Open-audit. Latest disclosed: 2022-01-03. Critical: 2, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-40612 | Critical | 9.8 | 2021-12-22 | An issue was discovered in Opmantek Open-AudIT after 3.5.0. Without authentication, a vulnerability in code_igniter/application/controllers/util.php allows an… |
CVE-2020-11942 | Critical | 9.8 | 2020-04-29 | An issue was discovered in Open-AudIT 3.2.2. There are Multiple SQL Injections. |
CVE-2020-11943 | High | 8.8 | 2020-04-29 | An issue was discovered in Open-AudIT 3.2.2. There is Arbitrary file upload. |
CVE-2020-12078 | High | 8.8 | 2020-04-28 | An issue was discovered in Open-AudIT 3.3.1. There is shell metacharacter injection via attributes to an open-audit/configuration/ URI. An attacker can exploit… |
CVE-2020-11941 | High | 8.8 | 2020-04-27 | An issue was discovered in Open-AudIT 3.2.2. There is OS Command injection in Discovery. |
CVE-2020-8813 | High | 8.8 | 2020-02-22 | graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph… |
CVE-2019-16293 | High | 8.8 | 2019-09-13 | The Create Discoveries feature of Open-AudIT before 3.2.0 allows an authenticated attacker to execute arbitrary OS commands via a crafted value for a URL field. |
CVE-2021-44674 | Medium | 6.5 | 2022-01-03 | An information exposure issue has been discovered in Opmantek Open-AudIT 4.2.0. The vulnerability allows an authenticated attacker to read file outside of the… |
CVE-2021-44916 | Medium | 6.1 | 2021-12-20 | Opmantek Open-AudIT Community 4.2.0 (Fixed in 4.3.0) is affected by a Cross Site Scripting (XSS) vulnerability. If a bad value is passed to the routine via a U… |
CVE-2021-3333 | Medium | 6.1 | 2021-02-05 | Opmantek Open-AudIT 4.0.1 is affected by cross-site scripting (XSS). When outputting SQL statements for debugging, a maliciously crafted query can trigger an X… |
CVE-2018-14493 | Medium | 6.1 | 2018-07-25 | Cross-site scripting (XSS) vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows remote attackers to inject arbitrary web script or HTML via th… |
CVE-2021-3130 | Medium | 5.9 | 2021-01-20 | Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users using HTML 'password… |
CVE-2020-12261 | Medium | 5.4 | 2020-04-28 | Open-AudIT 3.3.0 allows an XSS attack after login. |
CVE-2018-16607 | Medium | 5.4 | 2018-09-19 | Cross-site scripting (XSS) vulnerability in the Orgs Page in Open-AudIT Professional edition in 2.2.7 allows remote attackers to inject arbitrary web script vi… |
CVE-2018-11124 | Medium | 5.4 | 2018-07-06 | Cross-site scripting (XSS) vulnerability in Attributes functionality in Open-AudIT Community edition before 2.2.2 allows remote attackers to inject arbitrary w… |
CVE-2018-10314 | Medium | 5.4 | 2018-05-10 | Cross-site scripting (XSS) vulnerability in Open-AudIT Community 2.2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a c… |