Alienvault vulnerabilities

Products

• Open Source Security Information Management 22
• Unified Security Management 12
• Ossim 7
• Open Source Security Information And Event Management 5

Newest

• alienvault open source security information management OSSIM before 4.3.3.1 has tele_compress.php path traversal vulnerability CVE-2013-6056 7.5 HighJanuary 27, 2020
• alienvault open source security information management, unified security management +1 more A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1. CVE-2018-7279 9.8 CriticalMarch 14, 2018
• alienvault unified security management AlienVault USM v5.4.2 and earlier offers authenticated users the functionality of exporting... CVE-2017-14956 Public exploit 5.7 MediumOctober 18, 2017
• alienvault open source security information management The asset discovery scanner in AlienVault OSSIM before 5.0.1 allows remote authenticated users to... CVE-2015-4046 7.2 HighMay 23, 2017
• alienvault open source security information management The sudoers file in the asset discovery scanner in AlienVault OSSIM before 5.0.1 allows local... CVE-2015-4045 6.7 MediumMay 23, 2017
• alienvault ossim, nfsen, alienvault unified security management +2 more AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping... CVE-2017-6972 Public exploit EPSS 14.6% 9.8 CriticalMarch 22, 2017
• alienvault ossim, nfsen, alienvault unified security management +2 more AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to... CVE-2017-6971 Public exploit EPSS 16.2% 8.8 HighMarch 22, 2017
• alienvault ossim, nfsen, alienvault unified security management +2 more AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute... CVE-2017-6970 Public exploit 8.4 HighMarch 22, 2017
• alienvault ossim, unified security management +1 more The logcheck function in session.inc in AlienVault OSSIM before 5.3.1, when an action has been... CVE-2016-7955 9.8 CriticalMarch 15, 2017
• alienvault open source security information and event management, unified security management +1 more Multiple GET parameters in the vulnerability scan scheduler of AlienVault OSSIM and USM before 5... CVE-2016-8583 6.1 MediumOctober 28, 2016
• alienvault open source security information and event management, unified security management +1 more A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an... CVE-2016-8582 Public exploit EPSS 57.4% 9.8 CriticalOctober 28, 2016
• alienvault open source security information and event management, unified security management +1 more A persistent XSS vulnerability exists in the User-Agent header of the login process of AlienVault... CVE-2016-8581 Public exploit EPSS 17.1% 6.1 MediumOctober 28, 2016
• alienvault open source security information and event management, unified security management +1 more PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM... CVE-2016-8580 Public exploit 9.8 CriticalOctober 28, 2016
• alienvault open source security information and event management, unified security management +1 more Cross-site scripting (XSS) vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows... CVE-2016-6913 5.4 MediumSeptember 26, 2016
• alienvault unified security management The Framework Daemon in AlienVault Unified Security Management before 4.15 allows remote... CVE-2015-3446 9.3 HighMay 1, 2015
• alienvault open source security information management SQL injection vulnerability in AlienVault OSSIM before 4.7.0 allows remote authenticated users to... CVE-2014-5383 Public exploit EPSS 21.2% 6.5 MediumAugust 21, 2014
• alienvault open source security information management The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute... CVE-2014-5210 Public exploit EPSS 14.9% 10.0 HighAugust 21, 2014
• alienvault open source security information management SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0... CVE-2014-5159 7.5 HighAugust 21, 2014
• alienvault open source security information management The (1) av-centerd SOAP service and (2) backup command in the ossim-framework service in... CVE-2014-5158 10.0 HighAugust 21, 2014
• alienvault open source security information management The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to read... CVE-2014-4153 Public exploit 7.8 HighJune 18, 2014
• alienvault open source security information management The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to execute... CVE-2014-4152 10.0 HighJune 18, 2014
• alienvault open source security information management The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to create... CVE-2014-4151 10.0 HighJune 18, 2014
• alienvault open source security information management The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute... CVE-2014-3805 Public exploit EPSS 13.1% 10.0 HighJune 13, 2014
• alienvault open source security information management The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute... CVE-2014-3804 Public exploit EPSS 72.4% 10.0 HighJune 13, 2014
• alienvault open source security information management Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management ... CVE-2013-5967 Public exploit EPSS 19.0% 7.5 HighOctober 9, 2013
• alienvault open source security information management Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management ... CVE-2013-5321 Public exploit 7.5 HighAugust 20, 2013
• alienvault open source security information management Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security... CVE-2013-5300 4.3 MediumAugust 15, 2013
• alienvault open source security information management Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security... CVE-2012-3835 Public exploit 4.3 MediumJuly 3, 2012
• alienvault open source security information management SQL injection vulnerability in forensics/base_qry_main.php in AlienVault Open Source Security... CVE-2012-3834 Public exploit 6.5 MediumJuly 3, 2012
• alienvault open source security information management SQL injection vulnerability in repository/repository_attachment.php in AlienVault Open Source... CVE-2009-4375 Public exploit 7.5 HighDecember 21, 2009
• alienvault open source security information management Directory traversal vulnerability in repository/repository_attachment.php in AlienVault Open... CVE-2009-4374 7.5 HighDecember 21, 2009
• alienvault open source security information management Unrestricted file upload vulnerability in repository/repository_attachment.php in AlienVault Open... CVE-2009-4373 7.5 HighDecember 21, 2009
• alienvault open source security information management AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly other versions... CVE-2009-4372 Public exploit 7.5 HighDecember 21, 2009
• alienvault ossim Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to... CVE-2009-3441 5.0 MediumSeptember 28, 2009
• alienvault ossim Cross-site scripting (XSS) vulnerability in Open Source Security Information Management (OSSIM)... CVE-2009-3440 Public exploit 4.3 MediumSeptember 28, 2009
• alienvault ossim Multiple SQL injection vulnerabilities in Open Source Security Information Management (OSSIM)... CVE-2009-3439 Public exploit 6.5 MediumSeptember 28, 2009