EY
Product
EyesOfNetwork
On CISA KEVExploited in the wild
37
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 15Medium 7Low 0
Watch
Add EyesOfNetwork to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-24390 | 6.1 | Aug 27 | eonweb in EyesOfNetwork before 5.3-7 does not properly escape the username on the /module/admin_logs page, which might allow pre-authentication stored XSS during login/logout logs… Affected: before 5.3 |
| CVE-2022-24612 | 5.4 | Feb 25 | An authenticated user can upload an XML file containing an XSS via the ITSM module of EyesOfNetwork 5.3.11, resulting in a stored XSS Affected: 5.3-11 |
| CVE-2017-14985 | 5.4 | Oct 3 | Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the url… Affected: 5.1-0 |
| CVE-2017-14984 | 5.4 | Oct 3 | Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the… Affected: 5.1-0 |
| CVE-2017-14753 | 5.4 | Sep 27 | Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the… Affected: 5.1-0 |
| CVE-2017-15188 | 4.8 | Oct 11 | A persistent (stored) XSS vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via… Affected: 5.1-0 |
| CVE-2017-14983 | 4.8 | Oct 3 | Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML… Affected: 5.1-0 |
Showing 7