Zenoss vulnerabilities

Products

• Core 19
• Zenoss 6

Newest

• ross video ltd. dashboard Zenoss Dashboard defaultportlets.js cross site scripting CVE-2018-25063 3.5 LowJanuary 1, 2023
• zenoss core, debian linux +1 more Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core... CVE-2014-6262 Fix available 7.5 HighFebruary 12, 2020
• zenoss pyraw in Zenoss 2.5.3 allows local privilege escalation by modifying environment variables to... CVE-2019-14257 7.8 HighAugust 21, 2019
• zenoss The XML-RPC subsystem in Zenoss 2.5.3 allows XXE attacks that lead to unauthenticated information... CVE-2019-14258 7.5 HighAugust 21, 2019
• zenoss core Zenoss Core before 4.2.5 SP161 sets an infinite lifetime for the session ID cookie, which makes... CVE-2014-9386 6.8 MediumDecember 15, 2014
• zenoss core Cross-site request forgery (CSRF) vulnerability in Zenoss Core through 5 Beta 3 allows remote... CVE-2014-9385 6.8 MediumDecember 15, 2014
• zenoss core Zenoss Core through 5 Beta 3 stores cleartext passwords in the session database, which might... CVE-2014-9252 2.1 LowDecember 15, 2014
• zenoss core Zenoss Core through 5 Beta 3 uses a weak algorithm to hash passwords, which makes it easier for... CVE-2014-9251 5.0 MediumDecember 15, 2014
• zenoss core Zenoss Core through 5 Beta 3 does not include the HTTPOnly flag in a Set-Cookie header for the... CVE-2014-9250 5.0 MediumDecember 15, 2014
• zenoss core The default configuration of Zenoss Core before 5 allows remote attackers to read or modify... CVE-2014-9249 7.5 HighDecember 15, 2014
• zenoss core Zenoss Core through 5 Beta 3 does not require complex passwords, which makes it easier for remote... CVE-2014-9248 5.0 MediumDecember 15, 2014
• zenoss core Zenoss Core through 5 Beta 3 allows remote authenticated users to obtain sensitive (1) user... CVE-2014-9247 4.0 MediumDecember 15, 2014
• zenoss core Zenoss Core through 5 Beta 3 allows remote attackers to obtain sensitive information by... CVE-2014-9245 5.0 MediumDecember 15, 2014
• zenoss core Zenoss Core through 5 Beta 3 does not properly implement the Check For Updates feature, which... CVE-2014-6261 EPSS 19.7% 9.3 HighDecember 15, 2014
• zenoss core Zenoss Core through 5 Beta 3 does not require a password for modifying the pager command string,... CVE-2014-6260 6.8 MediumDecember 15, 2014
• zenoss core Zenoss Core through 5 Beta 3 does not properly detect recursion during entity expansion, which... CVE-2014-6259 5.0 MediumDecember 15, 2014
• zenoss core An unspecified endpoint in Zenoss Core through 5 Beta 3 allows remote attackers to cause a denial... CVE-2014-6258 5.0 MediumDecember 15, 2014
• zenoss core Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions by... CVE-2014-6257 5.0 MediumDecember 15, 2014
• zenoss core Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions and... CVE-2014-6256 7.5 HighDecember 15, 2014
• zenoss core Open redirect vulnerability in the login form in Zenoss Core before 4.2.5 SP161 allows remote... CVE-2014-6255 6.4 MediumDecember 15, 2014
• zenoss core Multiple cross-site scripting (XSS) vulnerabilities in Zenoss Core through 5 Beta 3 allow remote... CVE-2014-6254 4.3 MediumDecember 15, 2014
• zenoss core Multiple cross-site request forgery (CSRF) vulnerabilities in Zenoss Core through 5 Beta 3 allow... CVE-2014-6253 6.8 MediumDecember 15, 2014
• zenoss Open redirect vulnerability in zport/acl_users/cookieAuthHelper/login_form in Zenoss 4.2.5 allows... CVE-2014-3739 5.8 MediumMay 20, 2014
• zenoss Cross-site scripting (XSS) vulnerability in Zenoss 4.2.5 allows remote attackers to inject... CVE-2014-3738 Public exploit 4.3 MediumMay 20, 2014
• zenoss Multiple cross-site request forgery (CSRF) vulnerabilities in Zenoss 2.3.3, and other versions... CVE-2010-0713 Public exploit 6.8 MediumFebruary 26, 2010
• zenoss Multiple SQL injection vulnerabilities in zport/dmd/Events/getJSONEventsInfo in Zenoss 2.3.3, and... CVE-2010-0712 Public exploit 6.5 MediumFebruary 26, 2010