netgain-systems enterprise manager vulnerabilities and exploits

(subscribe to this query)

9

CVSSv2

NetGain Enterprise Manager (EM) is affected by OS Command Injection vulnerabilities in versions prior to 10.0.57. These vulnerabilities could allow remote authenticated malicious users to inject arbitrary code, resulting in remote code execution.

Netgain-systems Enterprise Manager

5

CVSSv2

This vulnerability allows remote malicious users to disclose sensitive information on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within download.jsp. The issue results from the lac...

Netgain-systems Enterprise Manager

7.5

CVSSv2

This vulnerability allows remote malicious users to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within an exposed RMI registry, which listens on TCP ports ...

Netgain-systems Enterprise Manager

3.5

CVSSv2

NetGain Enterprise Manager (EM) is affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities in versions prior to 10.1.12.

Netgain-systems Enterprise Manager

5

CVSSv2

This vulnerability allows remote malicious users to disclose sensitive information on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within heapdumps.jsp. The issue results from the la...

Netgain-systems Enterprise Manager

7.5

CVSSv2

This vulnerability allows remote malicious users to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within exec.jsp. The issue results from the lack of proper ...

Netgain-systems Enterprise Manager

7.5

CVSSv2

This vulnerability allows remote malicious users to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within upload_save_do.jsp. The issue results from the lack ...

Netgain-systems Enterprise Manager

6.8

CVSSv2

This vulnerability allows remote malicious users to bypass authentication on vulnerable installations of NetGain Systems Enterprise Manager 7.2.699 build 1001. User interaction is required to exploit this vulnerability. The specific flaw exists within the MainFilter servlet. The ...

Netgain-systems Enterprise Manager 7.2.699

4

CVSSv2

This vulnerability allows remote malicious users to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.699 build 1001. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be...

Netgain-systems Enterprise Manager 7.2.699

4

CVSSv2

This vulnerability allows remote malicious users to delete arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypasse...

Netgain-systems Enterprise Manager 7.2.730

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook