Opservices Opmon
5 CVEs affecting Opservices Opmon. Latest disclosed: 2022-04-08. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-8636 | Critical | 9.8 | 2020-02-06 | An issue was discovered in OpServices OpMon 9.3.2 that allows Remote Code Execution . |
CVE-2020-5841 | Critical | 9.8 | 2020-01-07 | An issue was discovered in OpServices OpMon 9.3.1-1. Using password change parameters, an attacker could perform SQL injection without authentication. |
CVE-2020-7954 | High | 7.8 | 2020-02-06 | An issue was discovered in OpServices OpMon 9.3.2. Starting from the apache user account, it is possible to perform privilege escalation through the lack of co… |
CVE-2020-7953 | High | 7.5 | 2020-02-06 | An issue was discovered in OpServices OpMon 9.3.2. Without authentication, it is possible to read server files (e.g., /etc/passwd) due to the use of the nmap -… |
CVE-2021-43009 | Medium | 6.1 | 2022-04-08 | A Cross Site Scripting (XSS) vulnerability exists in OpServices OpMon through 9.11 via the search parameter in the request URL. |