Skip to content
Noroxi

Opsview records

16 published records for vendor opsview.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 20

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

16 records
  • CVE-2018-16144
    49Plan

    The test connection functionality in the NetAudit section of Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to command in

    CriticalCVSS 9.8No exploitEPSS 33%

    opsview · opsviewSep 5, 2018

  • CVE-2016-10367
    35Monitor

    In Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security

    HighCVSS 7.5Proof of conceptEPSS 16%

    opsview · opsviewMay 3, 2017

  • CVE-2013-3935
    35Monitor

    Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.1 and Opsview Core before 20130522 allows remote attackers to hijack t

    HighCVSS 8.8No exploitEPSS 1%

    opsview · opsviewJan 2, 2020

  • CVE-2018-16145
    33Monitor

    The /etc/init.d/opsview-reporting-module script that runs at boot time in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 invokes a file

    HighCVSS 8.1No exploitEPSS 2%

    opsview · opsviewSep 5, 2018

  • CVE-2013-5694
    31Monitor

    SQL injection vulnerability in status/service/acknowledge in Opsview before 4.4.1 allows remote attackers to execute arbitrary SQL commands

    HighCVSS 7.5Proof of conceptEPSS 3%

    opsview · opsviewNov 5, 2013

  • CVE-2018-16146
    30Monitor

    The web management console of Opsview Monitor 5.4.x before 5.4.2 provides functionality accessible by an authenticated administrator to test

    HighCVSS 7.2No exploitEPSS 6%

    opsview · opsviewSep 5, 2018

  • CVE-2013-7256
    27Monitor

    Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.2 allows remote attackers to hijack the authentication of unspecified

    MediumCVSS 6.8No exploitEPSS 1%

    opsview · opsviewJan 3, 2014

  • CVE-2016-10368
    25Monitor

    Open redirect vulnerability in Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x with

    MediumCVSS 6.1Proof of conceptEPSS 2%

    opsview · opsviewMay 3, 2017

  • CVE-2018-16148
    24Monitor

    The diagnosticsb2ksy parameter of the /rest endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross-Site Scri

    MediumCVSS 6.1No exploitEPSS 1%

    opsview · opsviewSep 5, 2018

  • CVE-2018-16147
    24Monitor

    The data parameter of the /settings/api/router endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross-Site S

    MediumCVSS 6.1No exploitEPSS 1%

    opsview · opsviewSep 5, 2018

  • CVE-2013-3936
    24Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 and Opsview Core before 20130522 allow remote attackers to injec

    MediumCVSS 6.1No exploitEPSS 1%

    opsview · opsviewJan 2, 2020

  • CVE-2015-6035
    24Monitor

    Opsview before 2015-11-06 has XSS via SNMP.

    MediumCVSS 6.1No exploitEPSS 1%

    opsview · opsviewApr 9, 2017

  • CVE-2013-7255
    23Monitor

    Open redirect vulnerability in Opsview before 4.4.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing at

    MediumCVSS 5.8No exploitEPSS 1%

    opsview · opsviewJan 3, 2014

  • CVE-2015-4420
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Opsview 4.6.2 and earlier allow remote attackers to inject arbitrary web script or HT

    MediumCVSS 4.3Proof of conceptEPSS 2%

    opsview · opsviewJun 18, 2015

  • CVE-2013-7254
    17Monitor

    Cross-site scripting (XSS) vulnerability in Opsview before 4.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecif

    MediumCVSS 4.3No exploitEPSS 1%

    opsview · opsviewJan 3, 2014

  • CVE-2013-5695
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 allow remote attackers to inject arbitrary web script or HTML vi

    MediumCVSS 4.3No exploitEPSS 1%

    opsview · opsviewNov 5, 2013