Skip to contentNozominetworks vulnerabilities
Newest
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreIncorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0CVE-2026-333907.2 High
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreDoS through oversized audit log entries in Guardian/CMC before 26.2.0CVE-2026-319848.7 High
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreMissing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.0CVE-2026-319836.9 Medium
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreOpen Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0CVE-2026-319825.3 Medium
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreHTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.0CVE-2026-319814.8 Medium
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreHTML injection in Smart Polling in Guardian/CMC before 26.1.0CVE-2025-409045.1 Medium
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreHTML injection in Schedule Restore Archive in Guardian/CMC before 26.1.0CVE-2025-409034.8 Medium
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreHTML injection in Users in Guardian/CMC before 26.1.0CVE-2025-409024.8 Medium
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreHTML injection in Credentials Manager in Guardian/CMC before 26.1.0CVE-2025-409014.8 Medium
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreAngular template injection in Reports in Guardian/CMC before 26.1.0CVE-2025-409005.1 Medium
- nozomi networks arcLack of TLS certificate validation when connecting Arc to a Guardian or CMC, in Arc before v2.2.0CVE-2025-408966.3 Medium
- nozomi networks cmcHTML injection in Sensor Map in CMC before 25.6.0CVE-2025-408952.0 Low
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreHTML injection in Alerted Nodes Dashboard in Guardian/CMC before 25.6.0CVE-2025-408942.1 Low
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 morePath traversal in Import Arc data archive functionality in Guardian/CMC before 25.5.0CVE-2025-408987.2 High
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreHTML injection in Asset List in Guardian/CMC before 25.5.0CVE-2025-408935.3 Medium
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreStored Cross-Site Scripting (XSS) in Reports in Guardian/CMC before 25.5.0CVE-2025-408927.1 High
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreHTML injection in in Time Machine functionality in Guardian/CMC before 25.5.0CVE-2025-408912.3 Low
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated SQL Injection on CLI functionality in Guardian/CMC before 25.3.0CVE-2025-408886.0 Medium
- hashgraph guardian, nozomi networks cmc +1 morePath traversal in Time Machine functionality in Guardian/CMC before 25.2.0CVE-2025-408897.2 High
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0CVE-2025-408876.0 Medium
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0CVE-2025-408867.7 High
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated SQL Injection on Smart Polling functionality in Guardian/CMC before 25.2.0CVE-2025-408856.0 Medium
- hashgraph guardian, nozomi networks cmc +1 moreIncorrect authorization for CLI in Guardian/CMC before 25.2.0CVE-2025-37197.2 High
- hashgraph guardian, nozomi networks cmc +1 moreClient-side path traversal in Guardian/CMC before 25.2.0CVE-2025-37185.8 Medium
- hashgraph guardian, nozomi networks cmc +1 moreIncorrect authorization for Reports configuration in Guardian/CMC before 24.2.0CVE-2024-44655.8 Medium
- nozomi networks arcUnsafe temporary data privileges on Unix systems in Arc before v1.6.0CVE-2023-59367.3 High
- nozomi networks arcMissing authentication for local web interface in Arc before v1.6.0CVE-2023-59357.3 High
- hashgraph guardianDoS on IDS parsing of malformed Radius packets in Guardian before 23.4.1CVE-2024-02188.2 High
- hashgraph guardian, nozomi networks cmc, nozominetworks central management control +2 moreInformation disclosure via audit records for OpenAPI requests in Guardian/CMC before 23.4.1CVE-2023-69167.5 High
- hashgraph guardian, nozomi networks cmc +1 moreCheck Point IoT integration: WebSocket returns assets data without authentication in Guardian/CMC before 23.3.0CVE-2023-52536.3 Medium
- hashgraph guardian, nozomi networks cmc +1 moreDoS on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0CVE-2023-326498.2 High
- hashgraph guardian, nozomi networks cmc +1 moreSQL Injection on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0CVE-2023-292459.2 Critical
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated SQL Injection on Query functionality in Guardian/CMC before 22.6.3 and 23.1.0CVE-2023-25678.7 High
- hashgraph guardian, nozomi networks cmc +1 moreDoS via SAML configuration in Guardian/CMC before 22.6.2CVE-2023-239036.9 Medium
- hashgraph guardian, nozomi networks cmc +1 morePartial DoS on Reports section due to null report name in Guardian/CMC before 22.6.2CVE-2023-240155.3 Medium
- hashgraph guardian, nozomi networks cmc +1 moreInformation disclosure via the debug function in assertions in Guardian/CMC before 22.6.2CVE-2023-244717.1 High
- hashgraph guardian, nozomi networks cmc +1 moreStored Cross-Site Scripting (XSS) in Threat Intelligence rules in Guardian/CMC before 22.6.2CVE-2023-228437.3 High
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated Blind SQL Injection on alerts count in Guardian/CMC before 22.6.2CVE-2023-235748.7 High
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated Blind SQL Injection on sorting in Guardian/CMC before 22.6.2CVE-2023-223788.7 High
- hashgraph guardian, nozomi networks cmc +1 moreSession Fixation in Guardian/CMC before 22.6.2CVE-2023-244775.4 Medium
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated SQL Injection on Alerts in Guardian/CMC before 22.5.2CVE-2022-42598.7 High
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated RCE on project configuration import in Guardian/CMC before 22.0.0CVE-2022-05518.6 High
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated RCE on logo report upload in Guardian/CMC before 22.0.0CVE-2022-05508.6 High
- hashgraph guardian, nozomi networks cmc, nozominetworks central management control +2 moreAuthenticated command injection when changing date settings or hostname in Guardian/CMC before 20.0.7.4CVE-2021-267248.6 High
- hashgraph guardian, nozomi networks cmc, nozominetworks central management control +2 moreAuthenticated command path traversal on timezone settings in Guardian/CMC before 20.0.7.4CVE-2021-267258.6 High
- nozominetworks guardianNozomi Networks OS before 19.0.4 allows /#/network?tab=network_node_list.html CSV Injection.CVE-2020-70497.3 High
- nozominetworks guardianNozomi Guardian before 19.0.4 allows attackers to achieve stored XSS (in the web front end) by...CVE-2020-153076.1 Medium