EY
Product
EyesOfNetwork
On CISA KEVExploited in the wild
37
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 15Medium 7Low 0
Watch
Add EyesOfNetwork to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8657 In wildKEV | 9.8 | Feb 6 | EyesOfNetwork Use of Hard-Coded Credentials Vulnerability Affected: 5.3-0 |
| CVE-2022-41572 | 9.8 | Jan 7 | An issue was discovered in EyesOfNetwork (EON) through 5.3.11 Affected: through 5.3-11 |
| CVE-2022-41571 | 9.8 | Sep 27 | An issue was discovered in EyesOfNetwork (EON) through 5.3.11 Affected: through 5.3-11 |
| CVE-2022-41570 | 9.8 | Sep 27 | An issue was discovered in EyesOfNetwork (EON) through 5.3.11 Affected: through 5.3-11 |
| CVE-2021-40643 | 9.8 | Jun 30 | EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail options configuration page Affected: before 2021-07-07 |
| CVE-2021-27514 | 9.8 | Feb 22 | EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-force authentication bypass (such as in CVE-2021-27513… Affected: 5.3-10 |
| CVE-2020-27886 | 9.8 | Oct 29 | An issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8 Affected: 5.3-7 through 5.3-8 |
| CVE-2020-9465 | 9.8 | Feb 28 | An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3 Affected: 5.1 before 5.3-3 |
| CVE-2020-8656 | 9.8 | Feb 7 | An issue was discovered in EyesOfNetwork 5.3 Affected: 5.3-0 |
| CVE-2017-14403 | 9.8 | Sep 13 | The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the term parameter to module/admin_group/search.php Affected: 5.1-0 |
| CVE-2017-14402 | 9.8 | Sep 13 | The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name parameter to module/admin_user/add_modify_user.php in the "ACCOUNT CREATION" section,… Affected: 5.1-0 |
| CVE-2017-14401 | 9.8 | Sep 13 | The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name parameter to module/admin_user/add_modify_user.php in the "ACCOUNT UPDATE" section Affected: 5.1-0 |
| CVE-2017-14252 | 9.8 | Sep 11 | SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the group_id cookie to side.php Affected: 5.1-0 |
| CVE-2017-14247 | 9.8 | Sep 11 | SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the user_id cookie to header.php, a related issue to CVE-2017-1000060 Affected: 5.1-0 |
| CVE-2017-1000060 | 9.8 | Jul 17 | EyesOfNetwork (EON) 5.1 Unauthenticated SQL Injection in eonweb leading to remote root Affected: 5.1-0 |
Showing 15