Login Request a demo
EY
Vendor
EyesOfNetwork
2 products with CVEs on record
40
CVEs
2
On KEV
0
New 30D
Products
EY
EyesOfNetwork
EyesOfNetwork
9.8
37 CVEs2 on KEV0 new
WI
Web Interface
Eyesofnetwork
6.1
3 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2022-41572
EY
Eyesofnetwork
Eyesofnetwork
9.8
1%
Jan 7An issue was discovered in EyesOfNetwork (EON) through 5.3.11
CVE-2022-41434
WI
Web Interface
Eyesofnetwork
6.1
0%
Nov 8EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /lilac/main.php
CVE-2022-41433
WI
Web Interface
Eyesofnetwork
4.8
0%
Nov 8EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /module/admin_bp/add_application.php
CVE-2022-41432
WI
Web Interface
Eyesofnetwork
4.8
0%
Nov 8EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /module/report_event/index.php
CVE-2022-41571
EY
Eyesofnetwork
Eyesofnetwork
9.8
1%
Sep 27An issue was discovered in EyesOfNetwork (EON) through 5.3.11
CVE-2022-41570
EY
Eyesofnetwork
Eyesofnetwork
9.8
1%
Sep 27An issue was discovered in EyesOfNetwork (EON) through 5.3.11
CVE-2021-40643
EY
Eyesofnetwork
Eyesofnetwork
9.8
3%
Jun 30EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail options configuration page
CVE-2022-24612
EY
Eyesofnetwork
Eyesofnetwork
5.4
1%
Feb 25An authenticated user can upload an XML file containing an XSS via the ITSM module of EyesOfNetwork 5.3.11, resulting in a stored XSS
CVE-2021-33525
EY
Eyesofnetwork
Eyesofnetwork
8.8
8%
May 24EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution (by authenticated users) via shell metacharacters in the nagios_path parameter to lilac/export.php, as…
CVE-2021-27514
EY
Eyesofnetwork
Eyesofnetwork
9.8
4%
Feb 22EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-force authentication bypass (such as in CVE-2021-27513…
CVE-2021-27513
EY
Eyesofnetwork
Eyesofnetwork
8.8
28%
Feb 22The module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload arbitrary .xml.php files because it relies on "le filtre userside."
CVE-2020-27887
EY
Eyesofnetwork
Eyesofnetwork
8.8
2%
Oct 29An issue was discovered in EyesOfNetwork 5.3 through 5.3-8
CVE-2020-27886
EY
Eyesofnetwork
Eyesofnetwork
9.8
2%
Oct 29An issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8
CVE-2020-24390
EY
Eyesofnetwork
Eyesofnetwork
6.1
1%
Aug 27eonweb in EyesOfNetwork before 5.3-7 does not properly escape the username on the /module/admin_logs page, which might allow pre-authentication stored XSS during login/logout logs…
CVE-2020-9465
EY
Eyesofnetwork
Eyesofnetwork
9.8
82%
Feb 28An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3
CVE-2020-8656
EY
Eyesofnetwork
Eyesofnetwork
9.8
85%
Feb 7An issue was discovered in EyesOfNetwork 5.3
CVE-2020-8654
EY
Eyesofnetwork
Eyesofnetwork
8.8
92%
Feb 7An issue was discovered in EyesOfNetwork 5.3
CVE-2020-8655
In wildKEV
EY
Eyesofnetwork
Eyesofnetwork
7.8
60%
Feb 6EyesOfNetwork Improper Privilege Management Vulnerability
CVE-2020-8657
In wildKEV
EY
Eyesofnetwork
Eyesofnetwork
9.8
92%
Feb 6EyesOfNetwork Use of Hard-Coded Credentials Vulnerability
CVE-2019-14923
EY
Eyesofnetwork
Eyesofnetwork
8.8
4%
Aug 16EyesOfNetwork 5.1 allows Remote Command Execution via shell metacharacters in the module/tool_all/ host field
CVE-2017-16000
EY
Eyesofnetwork
Eyesofnetwork
7.2
2%
Oct 29SQL injection vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the graph…
CVE-2017-15933
EY
Eyesofnetwork
Eyesofnetwork
7.2
2%
Oct 27SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via…
CVE-2017-15880
EY
Eyesofnetwork
Eyesofnetwork
7.2
2%
Oct 24SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via…
CVE-2017-15188
EY
Eyesofnetwork
Eyesofnetwork
4.8
1%
Oct 11A persistent (stored) XSS vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML via…
CVE-2017-14985
EY
Eyesofnetwork
Eyesofnetwork
5.4
1%
Oct 3Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the url…
CVE-2017-14984
EY
Eyesofnetwork
Eyesofnetwork
5.4
1%
Oct 3Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the…
CVE-2017-14983
EY
Eyesofnetwork
Eyesofnetwork
4.8
1%
Oct 3Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to inject arbitrary web script or HTML…
CVE-2017-14753
EY
Eyesofnetwork
Eyesofnetwork
5.4
1%
Sep 27Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the…
CVE-2017-14405
EY
Eyesofnetwork
Eyesofnetwork
7.2
4%
Sep 13The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote command execution via shell metacharacters in a hosts_cacti array parameter to module/admin_device/index.php
CVE-2017-14404
EY
Eyesofnetwork
Eyesofnetwork
7.5
2%
Sep 13The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows local file inclusion via the tool_list parameter (aka the url_tool variable) to module/tool_all/select_tool.php, as…
CVE-2017-14403
EY
Eyesofnetwork
Eyesofnetwork
9.8
1%
Sep 13The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the term parameter to module/admin_group/search.php
CVE-2017-14402
EY
Eyesofnetwork
Eyesofnetwork
9.8
1%
Sep 13The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name parameter to module/admin_user/add_modify_user.php in the "ACCOUNT CREATION" section,…
CVE-2017-14401
EY
Eyesofnetwork
Eyesofnetwork
9.8
1%
Sep 13The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name parameter to module/admin_user/add_modify_user.php in the "ACCOUNT UPDATE" section
CVE-2017-14252
EY
Eyesofnetwork
Eyesofnetwork
9.8
1%
Sep 11SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the group_id cookie to side.php
CVE-2017-14247
EY
Eyesofnetwork
Eyesofnetwork
9.8
1%
Sep 11SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the user_id cookie to header.php, a related issue to CVE-2017-1000060
CVE-2017-14119
EY
Eyesofnetwork
Eyesofnetwork
8.8
2%
Sep 3In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\snmpwalk.php does not properly restrict popen calls, which allows remote attackers to execute…
CVE-2017-14118
EY
Eyesofnetwork
Eyesofnetwork
8.8
2%
Sep 3In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\interface.php does not properly restrict exec calls, which allows remote attackers to execute…
CVE-2017-13780
EY
Eyesofnetwork
Eyesofnetwork
7.5
2%
Aug 30The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows directory traversal attacks for reading arbitrary files via the module/admin_conf/download.php file parameter
CVE-2017-1000060
EY
Eyesofnetwork
Eyesofnetwork
9.8
3%
Jul 17EyesOfNetwork (EON) 5.1 Unauthenticated SQL Injection in eonweb leading to remote root
CVE-2017-6088
EY
Eyesofnetwork
Eyesofnetwork
7.2
6%
Apr 11Multiple SQL injection vulnerabilities in EyesOfNetwork (aka EON) 5.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) bp_name, (2)…