Alienvault Unified Security Management vulnerabilities

• alienvault open source security information management, unified security management +1 more A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1. CVE-2018-7279 9.8 CriticalMarch 14, 2018
• alienvault unified security management AlienVault USM v5.4.2 and earlier offers authenticated users the functionality of exporting... CVE-2017-14956 Public exploit 5.7 MediumOctober 18, 2017
• alienvault ossim, nfsen, alienvault unified security management +2 more AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping... CVE-2017-6972 Public exploit EPSS 14.6% 9.8 CriticalMarch 22, 2017
• alienvault ossim, nfsen, alienvault unified security management +2 more AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to... CVE-2017-6971 Public exploit EPSS 16.2% 8.8 HighMarch 22, 2017
• alienvault ossim, nfsen, alienvault unified security management +2 more AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute... CVE-2017-6970 Public exploit 8.4 HighMarch 22, 2017
• alienvault ossim, unified security management +1 more The logcheck function in session.inc in AlienVault OSSIM before 5.3.1, when an action has been... CVE-2016-7955 9.8 CriticalMarch 15, 2017
• alienvault open source security information and event management, unified security management +1 more Multiple GET parameters in the vulnerability scan scheduler of AlienVault OSSIM and USM before 5... CVE-2016-8583 6.1 MediumOctober 28, 2016
• alienvault open source security information and event management, unified security management +1 more A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an... CVE-2016-8582 Public exploit EPSS 57.4% 9.8 CriticalOctober 28, 2016
• alienvault open source security information and event management, unified security management +1 more A persistent XSS vulnerability exists in the User-Agent header of the login process of AlienVault... CVE-2016-8581 Public exploit EPSS 17.1% 6.1 MediumOctober 28, 2016
• alienvault open source security information and event management, unified security management +1 more PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM... CVE-2016-8580 Public exploit 9.8 CriticalOctober 28, 2016
• alienvault open source security information and event management, unified security management +1 more Cross-site scripting (XSS) vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows... CVE-2016-6913 5.4 MediumSeptember 26, 2016
• alienvault unified security management The Framework Daemon in AlienVault Unified Security Management before 4.15 allows remote... CVE-2015-3446 9.3 HighMay 1, 2015