Login Request a demo
NO
Vendor
Nozominetworks
4 products with CVEs on record
87
CVEs
0
On KEV
0
New 30D
Products
GU
Guardian
Nozominetworks
8.9
43 CVEs0 on KEV0 new
CM
Cmc
Nozominetworks
8.9
38 CVEs0 on KEV0 new
AR
Arc
Nozominetworks
7.8
3 CVEs0 on KEV0 new
CM
Central Management Control
Nozominetworks
7.2
3 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-33390
GU
Guardian
Nozominetworks
8.1
0%
Jul 9Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0
CVE-2026-31984
GU
Guardian
Nozominetworks
7.5
1%
Jul 9DoS through oversized audit log entries in Guardian/CMC before 26.2.0
CVE-2026-31983
GU
Guardian
Nozominetworks
5.3
0%
Jul 9Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.0
CVE-2026-31982
GU
Guardian
Nozominetworks
7.1
0%
Jul 9Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0
CVE-2026-31981
CM
Cmc
Nozominetworks
4.8
0%
Jul 9HTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.0
CVE-2025-40904
CM
Cmc
Nozominetworks
5.4
0%
May 19HTML injection in Smart Polling in Guardian/CMC before 26.1.0
CVE-2025-40903
CM
Cmc
Nozominetworks
4.8
0%
May 19HTML injection in Schedule Restore Archive in Guardian/CMC before 26.1.0
CVE-2025-40902
GU
Guardian
Nozominetworks
4.8
0%
May 19HTML injection in Users in Guardian/CMC before 26.1.0
CVE-2025-40901
GU
Guardian
Nozominetworks
4.8
0%
May 19HTML injection in Credentials Manager in Guardian/CMC before 26.1.0
CVE-2025-40900
GU
Guardian
Nozominetworks
4.6
0%
May 19Angular template injection in Reports in Guardian/CMC before 26.1.0
CVE-2025-40896
AR
Arc
Nozominetworks
4.8
0%
Mar 4Lack of TLS certificate validation when connecting Arc to a Guardian or CMC, in Arc before v2.2.0
CVE-2025-40895
CM
Cmc
Nozominetworks
4.8
0%
Mar 4HTML injection in Sensor Map in CMC before 25.6.0
CVE-2025-40894
CM
Cmc
Nozominetworks
5.4
0%
Mar 4HTML injection in Alerted Nodes Dashboard in Guardian/CMC before 25.6.0
CVE-2025-40898
CM
Cmc
Nozominetworks
8.1
0%
Dec 18Path traversal in Import Arc data archive functionality in Guardian/CMC before 25.5.0
CVE-2025-40893
CM
Cmc
Nozominetworks
6.1
0%
Dec 18HTML injection in Asset List in Guardian/CMC before 25.5.0
CVE-2025-40892
GU
Guardian
Nozominetworks
8.9
0%
Dec 18Stored Cross-Site Scripting (XSS) in Reports in Guardian/CMC before 25.5.0
CVE-2025-40891
GU
Guardian
Nozominetworks
4.7
0%
Dec 18HTML injection in in Time Machine functionality in Guardian/CMC before 25.5.0
CVE-2025-40888
GU
Guardian
Nozominetworks
6.5
0%
Oct 7Authenticated SQL Injection on CLI functionality in Guardian/CMC before 25.3.0
CVE-2025-40889
GU
Guardian
Nozominetworks
8.1
0%
Oct 7Path traversal in Time Machine functionality in Guardian/CMC before 25.2.0
CVE-2025-40887
GU
Guardian
Nozominetworks
6.5
0%
Oct 7Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0
CVE-2025-40886
GU
Guardian
Nozominetworks
8.8
0%
Oct 7Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0
CVE-2025-40885
GU
Guardian
Nozominetworks
6.5
0%
Oct 7Authenticated SQL Injection on Smart Polling functionality in Guardian/CMC before 25.2.0
CVE-2025-3719
CM
Cmc
Nozominetworks
8.1
0%
Oct 7Incorrect authorization for CLI in Guardian/CMC before 25.2.0
CVE-2025-3718
CM
Cmc
Nozominetworks
5.4
0%
Oct 7Client-side path traversal in Guardian/CMC before 25.2.0
CVE-2024-4465
GU
Guardian
Nozominetworks
5.0
0%
Sep 11Incorrect authorization for Reports configuration in Guardian/CMC before 24.2.0
CVE-2023-5936
AR
Arc
Nozominetworks
7.8
0%
May 15Unsafe temporary data privileges on Unix systems in Arc before v1.6.0
CVE-2023-5935
AR
Arc
Nozominetworks
7.4
0%
May 15Missing authentication for local web interface in Arc before v1.6.0
CVE-2024-0218
GU
Guardian
Nozominetworks
7.5
1%
Apr 10DoS on IDS parsing of malformed Radius packets in Guardian before 23.4.1
CVE-2023-6916
GU
Guardian
Nozominetworks
7.2
1%
Apr 10Information disclosure via audit records for OpenAPI requests in Guardian/CMC before 23.4.1
CVE-2023-5253
GU
Guardian
Nozominetworks
7.5
0%
Jan 15Check Point IoT integration: WebSocket returns assets data without authentication in Guardian/CMC before 23.3.0
CVE-2023-32649
GU
Guardian
Nozominetworks
7.5
1%
Sep 19DoS on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0
CVE-2023-29245
GU
Guardian
Nozominetworks
7.4
1%
Sep 19SQL Injection on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0
CVE-2023-2567
GU
Guardian
Nozominetworks
8.8
1%
Sep 19Authenticated SQL Injection on Query functionality in Guardian/CMC before 22.6.3 and 23.1.0
CVE-2023-23903
CM
Cmc
Nozominetworks
4.9
1%
Aug 9DoS via SAML configuration in Guardian/CMC before 22.6.2
CVE-2023-24015
CM
Cmc
Nozominetworks
4.3
1%
Aug 9Partial DoS on Reports section due to null report name in Guardian/CMC before 22.6.2
CVE-2023-24471
CM
Cmc
Nozominetworks
6.5
0%
Aug 9Information disclosure via the debug function in assertions in Guardian/CMC before 22.6.2
CVE-2023-22843
CM
Cmc
Nozominetworks
4.8
0%
Aug 9Stored Cross-Site Scripting (XSS) in Threat Intelligence rules in Guardian/CMC before 22.6.2
CVE-2023-23574
CM
Cmc
Nozominetworks
8.8
1%
Aug 9Authenticated Blind SQL Injection on alerts count in Guardian/CMC before 22.6.2
CVE-2023-22378
CM
Cmc
Nozominetworks
6.5
1%
Aug 9Authenticated Blind SQL Injection on sorting in Guardian/CMC before 22.6.2
CVE-2023-24477
CM
Cmc
Nozominetworks
7.0
0%
Aug 9Session Fixation in Guardian/CMC before 22.6.2
CVE-2022-4259
CM
Cmc
Nozominetworks
8.8
1%
May 4Authenticated SQL Injection on Alerts in Guardian/CMC before 22.5.2
CVE-2022-0551
CM
Cmc
Nozominetworks
7.2
1%
Mar 24Authenticated RCE on project configuration import in Guardian/CMC before 22.0.0
CVE-2022-0550
CM
Cmc
Nozominetworks
7.2
1%
Mar 24Authenticated RCE on logo report upload in Guardian/CMC before 22.0.0
CVE-2021-26725
GU
Guardian
Nozominetworks
4.9
1%
Feb 22Path Traversal vulnerability when changing timezone using web GUI of Nozomi Networks Guardian, CMC allows an authenticated administrator to read-protected system files
CVE-2021-26724
CM
Central Management Control
Nozominetworks
7.2
3%
Feb 22OS Command Injection vulnerability when changing date settings or hostname using web GUI of Nozomi Networks Guardian and CMC allows authenticated administrators to perform remote…
CVE-2020-7049
GU
Guardian
Nozominetworks
7.3
1%
Jun 30Nozomi Networks OS before 19.0.4 allows /#/network?tab=network_node_list.html CSV Injection
CVE-2020-15307
GU
Guardian
Nozominetworks
6.1
1%
Jun 30Nozomi Guardian before 19.0.4 allows attackers to achieve stored XSS (in the web front end) by leveraging the ability to create a custom field with a crafted field name