| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2014-9614 | 7.5 |
The Web Panel in Netsweeper before 4.0.5 has a default password of branding for the branding account, which makes it easier for remote attackers to obtain access via a request to webadmin/.
|
20-02-2020 - 19:07 | 19-02-2020 - 20:15 | |
| CVE-2014-9613 | 7.5 |
Multiple SQL injection vulnerabilities in Netsweeper before 2.6.29.10 allow remote attackers to execute arbitrary SQL commands via the (1) login parameter to webadmin/auth/verification.php or (2) dpid parameter to webadmin/deny/index.php.
|
20-02-2020 - 17:23 | 19-02-2020 - 20:15 | |
| CVE-2014-9617 | 5.8 |
Open redirect vulnerability in remotereporter/load_logfiles.php in Netsweeper before 4.0.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.
|
20-02-2020 - 17:09 | 19-02-2020 - 21:15 | |
| CVE-2014-9615 | 4.3 |
Cross-site scripting (XSS) vulnerability in Netsweeper 4.0.4 allows remote attackers to inject arbitrary web script or HTML via the url parameter to webadmin/deny/index.php.
|
20-02-2020 - 17:03 | 19-02-2020 - 20:15 | |
| CVE-2014-9607 | 4.3 |
Cross-site scripting (XSS) vulnerability in remotereporter/load_logfiles.php in Netsweeper 4.0.3 and 4.0.4 allows remote attackers to inject arbitrary web script or HTML via the url parameter.
|
20-02-2020 - 17:00 | 19-02-2020 - 20:15 | |
| CVE-2014-9606 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) server parameter to remotereporter/load_logfiles.php
|
20-02-2020 - 16:30 | 19-02-2020 - 20:15 | |
| CVE-2014-9609 | 5.0 |
Directory traversal vulnerability in webadmin/reporter/view_server_log.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to list directory contents via a .. (dot dot) in the log parameter in a stats a
|
20-02-2020 - 16:26 | 19-02-2020 - 20:15 | |
| CVE-2014-9612 | 7.5 |
SQL injection vulnerability in remotereporter/load_logfiles.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to execute arbitrary SQL commands via the server parameter.
|
20-02-2020 - 16:17 | 19-02-2020 - 20:15 | |
| CVE-2014-9608 | 4.3 |
Cross-site scripting (XSS) vulnerability in webadmin/policy/group_table_ajax.php/ in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
|
20-02-2020 - 15:11 | 19-02-2020 - 20:15 | |
| CVE-2014-9618 | 7.5 |
The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL.
|
29-09-2017 - 13:47 | 19-09-2017 - 15:29 | |
| CVE-2014-9611 | 7.5 |
Netsweeper before 4.0.5 allows remote attackers to bypass authentication and create arbitrary accounts and policies via a request to webadmin/nslam/index.php.
|
27-09-2017 - 20:00 | 19-09-2017 - 15:29 | |
| CVE-2014-9610 | 5.0 |
Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and remove IP addresses from the quarantine via the ip parameter to webadmin/user/quarantine_disable.php.
|
27-09-2017 - 19:49 | 19-09-2017 - 15:29 | |
| CVE-2014-9616 | 5.0 |
Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to obtain sensitive information by making a request that redirects to the deny page.
|
27-09-2017 - 19:49 | 19-09-2017 - 15:29 | |
| CVE-2014-9619 | 6.5 |
Unrestricted file upload vulnerability in webadmin/ajaxfilemanager/ajaxfilemanager.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote authenticated users with admin privileges on the Cloud Manager web console to
|
27-09-2017 - 19:48 | 19-09-2017 - 15:29 |