Opsview
16 CVEs across 3 Opsview products. Browse Opsview vulnerabilities, severities, and proof-of-concept exploits.
Opsview products with known CVEs
Opsview CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2013-3936 | Medium | 6.1 | 2020-01-02 | Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 and Opsview Core before 20130522 allow remote attackers to inject arbitrary web scr… |
CVE-2013-3935 | High | 8.8 | 2020-01-02 | Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.1 and Opsview Core before 20130522 allows remote attackers to hijack the authentication o… |
CVE-2018-16148 | Medium | 6.1 | 2018-09-05 | The diagnosticsb2ksy parameter of the /rest endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross-Site Scripting. |
CVE-2018-16147 | Medium | 6.1 | 2018-09-05 | The data parameter of the /settings/api/router endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross-Site Scripting. |
CVE-2018-16146 | High | 7.2 | 2018-09-05 | The web management console of Opsview Monitor 5.4.x before 5.4.2 provides functionality accessible by an authenticated administrator to test notifications that… |
CVE-2018-16145 | High | 8.1 | 2018-09-05 | The /etc/init.d/opsview-reporting-module script that runs at boot time in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 invokes a file that can be edited… |
CVE-2018-16144 | Critical | 9.8 | 2018-09-05 | The test connection functionality in the NetAudit section of Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to command injection due to impr… |
CVE-2016-10368 | Medium | 6.1 | 2017-05-03 | Open redirect vulnerability in Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016… |
CVE-2016-10367 | High | 7.5 | 2017-05-03 | In Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch), an unauthen… |
CVE-2015-6035 | Medium | 6.1 | 2017-04-10 | Opsview before 2015-11-06 has XSS via SNMP. |
CVE-2015-4420 | | | 2015-06-18 | Multiple cross-site scripting (XSS) vulnerabilities in Opsview 4.6.2 and earlier allow remote attackers to inject arbitrary web script or HTML via a (1) crafte… |
CVE-2013-7256 | | | 2014-01-03 | Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.2 allows remote attackers to hijack the authentication of unspecified victims via unknown… |
CVE-2013-7255 | | | 2014-01-03 | Open redirect vulnerability in Opsview before 4.4.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecifi… |
CVE-2013-7254 | | | 2014-01-03 | Cross-site scripting (XSS) vulnerability in Opsview before 4.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
CVE-2013-5695 | | | 2013-11-05 | Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parame… |
CVE-2013-5694 | | | 2013-11-05 | SQL injection vulnerability in status/service/acknowledge in Opsview before 4.4.1 allows remote attackers to execute arbitrary SQL commands via the service_sel… |