Eyesofnetwork vulnerabilities

Products

• Eyesofnetwork 37
• Web Interface 3

Newest

• eyesofnetwork An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Privilege escalation can be... CVE-2022-41572 9.8 CriticalJanuary 7, 2025
• eyesofnetwork web interface EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS)... CVE-2022-41434 6.1 MediumNovember 8, 2022
• eyesofnetwork web interface EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS)... CVE-2022-41433 4.8 MediumNovember 8, 2022
• eyesofnetwork web interface EyesOfNetwork Web Interface v5.3 was discovered to contain a reflected cross-site scripting (XSS)... CVE-2022-41432 4.8 MediumNovember 8, 2022
• eyesofnetwork An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Local file inclusion can occur. CVE-2022-41571 9.8 CriticalSeptember 27, 2022
• eyesofnetwork An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Unauthenticated SQL injection can... CVE-2022-41570 9.8 CriticalSeptember 27, 2022
• eyesofnetwork EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail options... CVE-2021-40643 9.8 CriticalJune 30, 2022
• eyesofnetwork An authenticated user can upload an XML file containing an XSS via the ITSM module of... CVE-2022-24612 5.4 MediumFebruary 25, 2022
• eyesofnetwork EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution (by authenticated users) via... CVE-2021-33525 8.8 HighMay 24, 2021
• eyesofnetwork The module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload... CVE-2021-27513 Public exploit EPSS 28.4% 8.8 HighFebruary 21, 2021
• eyesofnetwork EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might... CVE-2021-27514 9.8 CriticalFebruary 21, 2021
• eyesofnetwork An issue was discovered in EyesOfNetwork 5.3 through 5.3-8. An authenticated web user with... CVE-2020-27887 8.8 HighOctober 29, 2020
• eyesofnetwork An issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8. The eonweb web interface is... CVE-2020-27886 9.8 CriticalOctober 29, 2020
• eyesofnetwork eonweb in EyesOfNetwork before 5.3-7 does not properly escape the username on the /module... CVE-2020-24390 6.1 MediumAugust 27, 2020
• eyesofnetwork An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3. The eonweb web... CVE-2020-9465 Public exploit EPSS 81.8% 9.8 CriticalFebruary 28, 2020
• eyesofnetwork An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege... CVE-2020-8655 In KEVPublic exploit EPSS 59.9% 7.8 HighFebruary 6, 2020
• eyesofnetwork An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient... CVE-2020-8654 Public exploit EPSS 91.3% 8.8 HighFebruary 6, 2020
• eyesofnetwork An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL... CVE-2020-8656 Public exploit EPSS 84.6% 9.8 CriticalFebruary 6, 2020
• eyesofnetwork An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded... CVE-2020-8657 In KEVPublic exploit EPSS 91.9% 9.8 CriticalFebruary 6, 2020
• eyesofnetwork EyesOfNetwork 5.1 allows Remote Command Execution via shell metacharacters in the module/tool_all... CVE-2019-14923 8.8 HighAugust 16, 2019
• eyesofnetwork SQL injection vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote... CVE-2017-16000 7.2 HighOctober 29, 2017
• eyesofnetwork SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0... CVE-2017-15933 7.2 HighOctober 27, 2017
• eyesofnetwork SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0... CVE-2017-15880 7.2 HighOctober 24, 2017
• eyesofnetwork A persistent (stored) XSS vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0... CVE-2017-15188 4.8 MediumOctober 10, 2017
• eyesofnetwork Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0... CVE-2017-14985 5.4 MediumOctober 2, 2017
• eyesofnetwork Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0... CVE-2017-14984 5.4 MediumOctober 2, 2017
• eyesofnetwork Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0... CVE-2017-14983 4.8 MediumOctober 2, 2017
• eyesofnetwork Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0... CVE-2017-14753 5.4 MediumSeptember 27, 2017
• eyesofnetwork The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote command execution via shell... CVE-2017-14405 7.2 HighSeptember 13, 2017
• eyesofnetwork The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows local file inclusion via the tool_list... CVE-2017-14404 7.5 HighSeptember 13, 2017
• eyesofnetwork The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the term parameter to... CVE-2017-14403 9.8 CriticalSeptember 13, 2017
• eyesofnetwork The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name parameter... CVE-2017-14402 9.8 CriticalSeptember 13, 2017
• eyesofnetwork The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name parameter... CVE-2017-14401 9.8 CriticalSeptember 13, 2017
• eyesofnetwork SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the group_id... CVE-2017-14252 9.8 CriticalSeptember 11, 2017
• eyesofnetwork SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the user_id cookie... CVE-2017-14247 9.8 CriticalSeptember 11, 2017
• eyesofnetwork In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\snmpwalk.php does... CVE-2017-14119 8.8 HighSeptember 3, 2017
• eyesofnetwork In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\interface.php does... CVE-2017-14118 8.8 HighSeptember 3, 2017
• eyesofnetwork The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows directory traversal attacks for reading... CVE-2017-13780 7.5 HighAugust 30, 2017
• eyesofnetwork EyesOfNetwork (EON) 5.1 Unauthenticated SQL Injection in eonweb leading to remote root CVE-2017-1000060 9.8 CriticalJuly 13, 2017
• eyesofnetwork Multiple SQL injection vulnerabilities in EyesOfNetwork (aka EON) 5.0 and earlier allow remote... CVE-2017-6088 Public exploit 7.2 HighApril 11, 2017