Skip to content
Noroxi

eyesofnetwork records

40 published records for vendor eyesofnetwork.

Researcher profile

Entered KEV
2 · 5%
Weaponized
5 · 12.5%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
636 days

Records by year

  1. 17
  2. 19
  3. 20
  4. 21
  5. 22
  6. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

40 records
  • CVE-2020-8657
    97Now

    An issue was discovered in EyesOfNetwork 5.3.

    CriticalCVSS 9.8KEVWeaponizedEPSS 91%

    eyesofnetwork · eyesofnetworkFeb 6, 2020

  • CVE-2020-8655
    79This week

    An issue was discovered in EyesOfNetwork 5.3.

    HighCVSS 7.8KEVWeaponizedEPSS 59%

    eyesofnetwork · eyesofnetworkFeb 6, 2020

  • CVE-2020-8656
    64This week

    An issue was discovered in EyesOfNetwork 5.3.

    CriticalCVSS 9.8WeaponizedEPSS 84%

    eyesofnetwork · eyesofnetworkFeb 6, 2020

  • CVE-2020-9465
    64This week

    An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3.

    CriticalCVSS 9.8WeaponizedEPSS 81%

    eyesofnetwork · eyesofnetworkFeb 28, 2020

  • CVE-2020-8654
    62This week

    An issue was discovered in EyesOfNetwork 5.3.

    HighCVSS 8.8WeaponizedEPSS 91%

    eyesofnetwork · eyesofnetworkFeb 6, 2020

  • CVE-2021-27513
    44Plan

    The module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload arbitrary .xml.php files because it relies on "le

    HighCVSS 8.8Proof of conceptEPSS 28%

    eyesofnetwork · eyesofnetworkFeb 21, 2021

  • CVE-2021-27514
    40Plan

    EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-force authentication

    CriticalCVSS 9.8No exploitEPSS 3%

    eyesofnetwork · eyesofnetworkFeb 21, 2021

  • CVE-2017-1000060
    40Plan

    EyesOfNetwork (EON) 5.1 Unauthenticated SQL Injection in eonweb leading to remote root

    CriticalCVSS 9.8No exploitEPSS 3%

    eyesofnetwork · eyesofnetworkJul 17, 2017

  • CVE-2021-40643
    40Plan

    EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail options configuration page.

    CriticalCVSS 9.8No exploitEPSS 2%

    eyesofnetwork · eyesofnetworkJun 30, 2022

  • CVE-2020-27886
    40Plan

    An issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8.

    CriticalCVSS 9.8No exploitEPSS 1%

    eyesofnetwork · eyesofnetworkOct 29, 2020

  • CVE-2017-14252
    39Monitor

    SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the group_id cookie to side.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    eyesofnetwork · eyesofnetworkSep 11, 2017

  • CVE-2017-14402
    39Monitor

    The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name parameter to module/admin_user/add_modify_user.php in

    CriticalCVSS 9.8No exploitEPSS 1%

    eyesofnetwork · eyesofnetworkSep 12, 2017

  • CVE-2017-14401
    39Monitor

    The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name parameter to module/admin_user/add_modify_user.php in

    CriticalCVSS 9.8No exploitEPSS 1%

    eyesofnetwork · eyesofnetworkSep 12, 2017

  • CVE-2017-14403
    39Monitor

    The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the term parameter to module/admin_group/search.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    eyesofnetwork · eyesofnetworkSep 12, 2017

  • CVE-2017-14247
    39Monitor

    SQL Injection exists in the EyesOfNetwork web interface (aka eonweb) 5.1-0 via the user_id cookie to header.php, a related issue to CVE-2017

    CriticalCVSS 9.8No exploitEPSS 1%

    eyesofnetwork · eyesofnetworkSep 11, 2017

  • CVE-2022-41571
    39Monitor

    An issue was discovered in EyesOfNetwork (EON) through 5.3.11.

    CriticalCVSS 9.8No exploitEPSS 1%

    eyesofnetwork · eyesofnetworkSep 27, 2022

  • CVE-2022-41570
    39Monitor

    An issue was discovered in EyesOfNetwork (EON) through 5.3.11.

    CriticalCVSS 9.8No exploitEPSS 0%

    eyesofnetwork · eyesofnetworkSep 27, 2022

  • CVE-2022-41572
    39Monitor

    An issue was discovered in EyesOfNetwork (EON) through 5.3.11.

    CriticalCVSS 9.8No exploitEPSS 0%

    eyesofnetwork · eyesofnetworkJan 7, 2025

  • CVE-2021-33525
    37Monitor

    EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution (by authenticated users) via shell metacharacters in the nagios_path par

    HighCVSS 8.8No exploitEPSS 7%

    eyesofnetwork · eyesofnetworkMay 24, 2021

  • CVE-2019-14923
    36Monitor

    EyesOfNetwork 5.1 allows Remote Command Execution via shell metacharacters in the module/tool_all/ host field.

    HighCVSS 8.8No exploitEPSS 4%

    eyesofnetwork · eyesofnetworkAug 16, 2019

  • CVE-2017-14119
    36Monitor

    In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\snmpwalk.php does not properly restrict popen calls, which allo

    HighCVSS 8.8No exploitEPSS 2%

    eyesofnetwork · eyesofnetworkSep 3, 2017

  • CVE-2017-14118
    36Monitor

    In the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\interface.php does not properly restrict exec calls, which allo

    HighCVSS 8.8No exploitEPSS 2%

    eyesofnetwork · eyesofnetworkSep 3, 2017

  • CVE-2020-27887
    36Monitor

    An issue was discovered in EyesOfNetwork 5.3 through 5.3-8.

    HighCVSS 8.8No exploitEPSS 1%

    eyesofnetwork · eyesofnetworkOct 29, 2020

  • CVE-2017-13780
    31Monitor

    The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows directory traversal attacks for reading arbitrary files via the module/admin_conf/

    HighCVSS 7.5No exploitEPSS 2%

    eyesofnetwork · eyesofnetworkAug 30, 2017

  • CVE-2017-6088
    30Monitor

    Multiple SQL injection vulnerabilities in EyesOfNetwork (aka EON) 5.0 and earlier allow remote authenticated users to execute arbitrary SQL

    HighCVSS 7.2Proof of conceptEPSS 5%

    eyesofnetwork · eyesofnetworkApr 11, 2017