CloudView NMS before 2.10a allows remote attackers to obtain sensitive information via a direct request for admin/auto.def.
Vendor
cloudviewnms vulnerabilities
4 published CVES affecting cloudviewnms, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 4
- Critical
- 1
- High
- 1
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
Latest cloudviewnms CVEs
Newest publication first
-
HighCVSS 7.5
-
MediumCVSS 6.1
CloudView NMS before 2.10a has XSS via a TELNET login.
-
CriticalCVSS 9.8
CloudView NMS before 2.10a has a format string issue exploitable over SNMP.
-
MediumCVSS 6.1
CloudView NMS before 2.10a has XSS via SNMP.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.