EY
Product
EyesOfNetwork
On CISA KEVExploited in the wild
37
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 15Medium 7Low 0
Watch
Add EyesOfNetwork to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8657 In wildKEV | 9.8 | Feb 6 | EyesOfNetwork Use of Hard-Coded Credentials Vulnerability Affected: 5.3-0 |
| CVE-2020-8655 In wildKEV | 7.8 | Feb 6 | EyesOfNetwork Improper Privilege Management Vulnerability Affected: 5.3-0 |
| CVE-2022-41572 | 9.8 | Jan 7 | An issue was discovered in EyesOfNetwork (EON) through 5.3.11 Affected: through 5.3-11 |
| CVE-2022-41571 | 9.8 | Sep 27 | An issue was discovered in EyesOfNetwork (EON) through 5.3.11 Affected: through 5.3-11 |
| CVE-2022-41570 | 9.8 | Sep 27 | An issue was discovered in EyesOfNetwork (EON) through 5.3.11 Affected: through 5.3-11 |
| CVE-2021-40643 | 9.8 | Jun 30 | EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail options configuration page Affected: before 2021-07-07 |
| CVE-2021-27514 | 9.8 | Feb 22 | EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-force authentication bypass (such as in CVE-2021-27513… Affected: 5.3-10 |
| CVE-2020-27886 | 9.8 | Oct 29 | An issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8 Affected: 5.3-7 through 5.3-8 |
| CVE-2020-9465 | 9.8 | Feb 28 | An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3 Affected: 5.1 before 5.3-3 |
| CVE-2020-8656 | 9.8 | Feb 7 | An issue was discovered in EyesOfNetwork 5.3 Affected: 5.3-0 |
| CVE-2017-14403 | 9.8 | Sep 13 | The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the term parameter to module/admin_group/search.php Affected: 5.1-0 |
| CVE-2017-14402 | 9.8 | Sep 13 | The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name parameter to module/admin_user/add_modify_user.php in the "ACCOUNT CREATION" section,… Affected: 5.1-0 |
| CVE-2017-14401 | 9.8 | Sep 13 | The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name parameter to module/admin_user/add_modify_user.php in the "ACCOUNT UPDATE" section Affected: 5.1-0 |
| CVE-2017-14252 | 9.8 | Sep 11 | SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the group_id cookie to side.php Affected: 5.1-0 |
| CVE-2017-14247 | 9.8 | Sep 11 | SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the user_id cookie to header.php, a related issue to CVE-2017-1000060 Affected: 5.1-0 |
| CVE-2017-1000060 | 9.8 | Jul 17 | EyesOfNetwork (EON) 5.1 Unauthenticated SQL Injection in eonweb leading to remote root Affected: 5.1-0 |
| CVE-2021-33525 | 8.8 | May 24 | EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution (by authenticated users) via shell metacharacters in the nagios_path parameter to lilac/export.php, as… Affected: through 5.3-11 |
| CVE-2021-27513 | 8.8 | Feb 22 | The module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload arbitrary .xml.php files because it relies on "le filtre userside." Affected: 5.3-10 |
| CVE-2020-27887 | 8.8 | Oct 29 | An issue was discovered in EyesOfNetwork 5.3 through 5.3-8 Affected: 5.3 through 5.3-8 |
| CVE-2020-8654 | 8.8 | Feb 7 | An issue was discovered in EyesOfNetwork 5.3 Affected: 5.3-0 |
| CVE-2019-14923 | 8.8 | Aug 16 | EyesOfNetwork 5.1 allows Remote Command Execution via shell metacharacters in the module/tool_all/ host field Affected: 5.1-0 |
| CVE-2017-14119 | 8.8 | Sep 3 | In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\snmpwalk.php does not properly restrict popen calls, which allows remote attackers to execute… Affected: 5.1-0 |
| CVE-2017-14118 | 8.8 | Sep 3 | In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\interface.php does not properly restrict exec calls, which allows remote attackers to execute… Affected: 5.1-0 |
| CVE-2017-14404 | 7.5 | Sep 13 | The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows local file inclusion via the tool_list parameter (aka the url_tool variable) to module/tool_all/select_tool.php, as… Affected: 5.1-0 |
| CVE-2017-13780 | 7.5 | Aug 30 | The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows directory traversal attacks for reading arbitrary files via the module/admin_conf/download.php file parameter Affected: 5.1-0 |
| CVE-2017-16000 | 7.2 | Oct 29 | SQL injection vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the graph… Affected: 5.1-0 |
| CVE-2017-15933 | 7.2 | Oct 27 | SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via… Affected: 5.1-0 |
| CVE-2017-15880 | 7.2 | Oct 24 | SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via… Affected: 5.1-0 |
| CVE-2017-14405 | 7.2 | Sep 13 | The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote command execution via shell metacharacters in a hosts_cacti array parameter to module/admin_device/index.php Affected: 5.1-0 |
| CVE-2017-6088 | 7.2 | Apr 11 | Multiple SQL injection vulnerabilities in EyesOfNetwork (aka EON) 5.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) bp_name, (2)… Affected: through 5.0 |
| CVE-2020-24390 | 6.1 | Aug 27 | eonweb in EyesOfNetwork before 5.3-7 does not properly escape the username on the /module/admin_logs page, which might allow pre-authentication stored XSS during login/logout logs… Affected: before 5.3 |
| CVE-2022-24612 | 5.4 | Feb 25 | An authenticated user can upload an XML file containing an XSS via the ITSM module of EyesOfNetwork 5.3.11, resulting in a stored XSS Affected: 5.3-11 |
| CVE-2017-14985 | 5.4 | Oct 3 | Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the url… Affected: 5.1-0 |
| CVE-2017-14984 | 5.4 | Oct 3 | Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the… Affected: 5.1-0 |
| CVE-2017-14753 | 5.4 | Sep 27 | Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the… Affected: 5.1-0 |
| CVE-2017-15188 | 4.8 | Oct 11 | A persistent (stored) XSS vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via… Affected: 5.1-0 |
| CVE-2017-14983 | 4.8 | Oct 3 | Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML… Affected: 5.1-0 |
Showing 37