Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
nozominetworks guardian vulnerabilities and exploits
(subscribe to this query)
6.5
CVSSv3
CVE-2023-24471
An access control vulnerability was found, due to the restrictions that are applied on actual assertions not being enforced in their debug functionality. An authenticated user with reduced visibility can obtain unauthorized information via the debug functionality, obtaining data ...
Nozominetworks Cmc
Nozominetworks Guardian
7
CVSSv3
CVE-2023-24477
In certain conditions, depending on timing and the usage of the Chrome web browser, Guardian/CMC versions prior to 22.6.2 do not always completely invalidate the user session upon logout. Thus an authenticated local attacker may gain acces to the original user's session.
Nozominetworks Cmc
Nozominetworks Guardian
4.8
CVSSv3
CVE-2023-22843
An authenticated attacker with administrative access to the appliance can inject malicious JavaScript code inside the definition of a Threat Intelligence rule, that will later be executed by another legitimate user viewing the details of such a rule. An attacker may be able to pe...
Nozominetworks Cmc
Nozominetworks Guardian
7.2
CVSSv3
CVE-2022-0551
Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticated attacker with admin or import manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Netw...
Nozominetworks Cmc
Nozominetworks Guardian
7.2
CVSSv3
CVE-2021-26724
OS Command Injection vulnerability when changing date settings or hostname using web GUI of Nozomi Networks Guardian and CMC allows authenticated administrators to perform remote code execution. This issue affects: Nozomi Networks Guardian 20.0.7.3 version 20.0.7.3 and prior vers...
Nozominetworks Guardian
Nozominetworks Central Management Control
4.9
CVSSv3
CVE-2021-26725
Path Traversal vulnerability when changing timezone using web GUI of Nozomi Networks Guardian, CMC allows an authenticated administrator to read-protected system files. This issue affects: Nozomi Networks Guardian 20.0.7.3 version 20.0.7.3 and prior versions. Nozomi Networks CMC ...
Nozominetworks Guardian
Nozominetworks Central Management Control
6.1
CVSSv3
CVE-2020-15307
Nozomi Guardian prior to 19.0.4 allows malicious users to achieve stored XSS (in the web front end) by leveraging the ability to create a custom field with a crafted field name.
Nozominetworks Guardian
7.3
CVSSv3
CVE-2020-7049
Nozomi Networks OS prior to 19.0.4 allows /#/network?tab=network_node_list.html CSV Injection.
Nozominetworks Guardian
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2