Zenoss Core vulnerabilities

• zenoss core, debian linux +1 more Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core... CVE-2014-6262 Fix available 7.5 HighFebruary 12, 2020
• zenoss core Zenoss Core before 4.2.5 SP161 sets an infinite lifetime for the session ID cookie, which makes... CVE-2014-9386 6.8 MediumDecember 15, 2014
• zenoss core Cross-site request forgery (CSRF) vulnerability in Zenoss Core through 5 Beta 3 allows remote... CVE-2014-9385 6.8 MediumDecember 15, 2014
• zenoss core Zenoss Core through 5 Beta 3 stores cleartext passwords in the session database, which might... CVE-2014-9252 2.1 LowDecember 15, 2014
• zenoss core Zenoss Core through 5 Beta 3 uses a weak algorithm to hash passwords, which makes it easier for... CVE-2014-9251 5.0 MediumDecember 15, 2014
• zenoss core Zenoss Core through 5 Beta 3 does not include the HTTPOnly flag in a Set-Cookie header for the... CVE-2014-9250 5.0 MediumDecember 15, 2014
• zenoss core The default configuration of Zenoss Core before 5 allows remote attackers to read or modify... CVE-2014-9249 7.5 HighDecember 15, 2014
• zenoss core Zenoss Core through 5 Beta 3 does not require complex passwords, which makes it easier for remote... CVE-2014-9248 5.0 MediumDecember 15, 2014
• zenoss core Zenoss Core through 5 Beta 3 allows remote authenticated users to obtain sensitive (1) user... CVE-2014-9247 4.0 MediumDecember 15, 2014
• zenoss core Zenoss Core through 5 Beta 3 allows remote attackers to obtain sensitive information by... CVE-2014-9245 5.0 MediumDecember 15, 2014
• zenoss core Zenoss Core through 5 Beta 3 does not properly implement the Check For Updates feature, which... CVE-2014-6261 EPSS 19.7% 9.3 HighDecember 15, 2014
• zenoss core Zenoss Core through 5 Beta 3 does not require a password for modifying the pager command string,... CVE-2014-6260 6.8 MediumDecember 15, 2014
• zenoss core Zenoss Core through 5 Beta 3 does not properly detect recursion during entity expansion, which... CVE-2014-6259 5.0 MediumDecember 15, 2014
• zenoss core An unspecified endpoint in Zenoss Core through 5 Beta 3 allows remote attackers to cause a denial... CVE-2014-6258 5.0 MediumDecember 15, 2014
• zenoss core Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions by... CVE-2014-6257 5.0 MediumDecember 15, 2014
• zenoss core Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions and... CVE-2014-6256 7.5 HighDecember 15, 2014
• zenoss core Open redirect vulnerability in the login form in Zenoss Core before 4.2.5 SP161 allows remote... CVE-2014-6255 6.4 MediumDecember 15, 2014
• zenoss core Multiple cross-site scripting (XSS) vulnerabilities in Zenoss Core through 5 Beta 3 allow remote... CVE-2014-6254 4.3 MediumDecember 15, 2014
• zenoss core Multiple cross-site request forgery (CSRF) vulnerabilities in Zenoss Core through 5 Beta 3 allow... CVE-2014-6253 6.8 MediumDecember 15, 2014