EY
Product
EyesOfNetwork
On CISA KEVExploited in the wild
37
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 15Medium 7Low 0
Watch
Add EyesOfNetwork to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8655 In wildKEV | 7.8 | Feb 6 | EyesOfNetwork Improper Privilege Management Vulnerability Affected: 5.3-0 |
| CVE-2021-33525 | 8.8 | May 24 | EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution (by authenticated users) via shell metacharacters in the nagios_path parameter to lilac/export.php, as… Affected: through 5.3-11 |
| CVE-2021-27513 | 8.8 | Feb 21 | The module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload arbitrary .xml.php files because it relies on "le filtre userside." Affected: 5.3-10 |
| CVE-2020-27887 | 8.8 | Oct 29 | An issue was discovered in EyesOfNetwork 5.3 through 5.3-8 Affected: 5.3 through 5.3-8 |
| CVE-2020-8654 | 8.8 | Feb 7 | An issue was discovered in EyesOfNetwork 5.3 Affected: 5.3-0 |
| CVE-2019-14923 | 8.8 | Aug 16 | EyesOfNetwork 5.1 allows Remote Command Execution via shell metacharacters in the module/tool_all/ host field Affected: 5.1-0 |
| CVE-2017-14119 | 8.8 | Sep 3 | In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\snmpwalk.php does not properly restrict popen calls, which allows remote attackers to execute… Affected: 5.1-0 |
| CVE-2017-14118 | 8.8 | Sep 3 | In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\interface.php does not properly restrict exec calls, which allows remote attackers to execute… Affected: 5.1-0 |
| CVE-2017-14404 | 7.5 | Sep 13 | The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows local file inclusion via the tool_list parameter (aka the url_tool variable) to module/tool_all/select_tool.php, as… Affected: 5.1-0 |
| CVE-2017-13780 | 7.5 | Aug 30 | The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows directory traversal attacks for reading arbitrary files via the module/admin_conf/download.php file parameter Affected: 5.1-0 |
| CVE-2017-16000 | 7.2 | Oct 29 | SQL injection vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the graph… Affected: 5.1-0 |
| CVE-2017-15933 | 7.2 | Oct 27 | SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via… Affected: 5.1-0 |
| CVE-2017-15880 | 7.2 | Oct 24 | SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via… Affected: 5.1-0 |
| CVE-2017-14405 | 7.2 | Sep 13 | The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote command execution via shell metacharacters in a hosts_cacti array parameter to module/admin_device/index.php Affected: 5.1-0 |
| CVE-2017-6088 | 7.2 | Apr 11 | Multiple SQL injection vulnerabilities in EyesOfNetwork (aka EON) 5.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) bp_name, (2)… Affected: through 5.0 |
Showing 15