Netentsec application security gateway vulnerabilities

Latest Netentsec application security gateway CVEs

Newest publication first · page 1 of 2

1. CVE-2024-6007 Netentsec NS-ASG Application Security Gateway deleteiscgwrouteconf.php sql injection

   Published 2024-06-15

   Medium·CVSS 5.3 EPSS 0.60%

   A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /protocol/iscgwtunnel/deleteiscgwrouteconf.php. The manipulation of the argument messagecontent leads to sql injection. It is possi...

2. CVE-2024-5773 Netentsec NS-ASG Application Security Gateway deletemacbind.php sql injection

   Published 2024-06-09

   Medium·CVSS 5.3 EPSS 0.65%

   A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown function of the file /protocol/firewall/deletemacbind.php. The manipulation of the argument messagecontent leads to sql injection. It is possi...

3. CVE-2024-5772 Netentsec NS-ASG Application Security Gateway deleteiscuser.php sql injection

   Published 2024-06-09

   Medium·CVSS 5.3 EPSS 0.68%

   A vulnerability, which was classified as critical, has been found in Netentsec NS-ASG Application Security Gateway 6.3. This issue affects some unknown processing of the file /protocol/iscuser/deleteiscuser.php. The manipulation of the argument messagecontent leads to sql injecti...

4. CVE-2024-5590 Netentsec NS-ASG Application Security Gateway JSON Content uploadiscuser.php sql injection

   Published 2024-06-03

   Medium·CVSS 5.3 EPSS 0.62%

   A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. This vulnerability affects unknown code of the file /protocol/iscuser/uploadiscuser.php of the component JSON Content Handler. The manipulation of the argument messag...

5. CVE-2024-5589 Netentsec NS-ASG Application Security Gateway sql injection

   Published 2024-06-03

   Medium·CVSS 5.3 EPSS 0.54%

   A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /admin/config_MT.php?action=delete. The manipulation of the argument Mid leads to sql injection. It is possible to initiate...

6. CVE-2024-3458 Netentsec NS-ASG Application Security Gateway add_ikev2.php sql injection

   Published 2024-04-08

   Critical·CVSS 9.8 EPSS 0.71%

   A vulnerability classified as critical was found in Netentsec NS-ASG Application Security Gateway 6.3. This vulnerability affects unknown code of the file /admin/add_ikev2.php. The manipulation of the argument TunnelId leads to sql injection. The attack can be initiated remotely....

7. CVE-2024-3457 Netentsec NS-ASG Application Security Gateway config_ISCGroupNoCache.php sql injection

   Published 2024-04-08

   Critical·CVSS 9.8 EPSS 0.68%

   A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/config_ISCGroupNoCache.php. The manipulation of the argument GroupId leads to sql injection. It is possible to initiate the...

8. CVE-2024-3456 Netentsec NS-ASG Application Security Gateway config_Anticrack.php sql injection

   Published 2024-04-08

   Critical·CVSS 9.8 EPSS 0.76%

   A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/config_Anticrack.php. The manipulation of the argument GroupId leads to sql injection. The attack...

9. CVE-2024-3455 Netentsec NS-ASG Application Security Gateway add_postlogin.php sql injection

   Published 2024-04-08

   Critical·CVSS 9.8 EPSS 0.73%

   A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/add_postlogin.php. The manipulation of the argument SingleLoginId leads to sql injection...

10. CVE-2024-30859 netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupSSLCert.php.

    Published 2024-04-01

    High·CVSS 8.8 EPSS 0.67%

    netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupSSLCert.php.

11. CVE-2024-30871 netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php.

    Published 2024-04-01

    High·CVSS 8.8 EPSS 0.71%

    netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php.

12. CVE-2024-30870 netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/address_interpret.php.

    Published 2024-04-01

    High·CVSS 8.8 EPSS 0.67%

    netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/address_interpret.php.

13. CVE-2024-30860 netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/export_excel_user.php.

    Published 2024-04-01

    High·CVSS 8.8 EPSS 0.61%

    netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/export_excel_user.php.

14. CVE-2024-3041 Netentsec NS-ASG Application Security Gateway listloginfo.php sql injection

    Published 2024-03-28

    Critical·CVSS 9.8 EPSS 0.82%

    A vulnerability has been found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. This vulnerability affects unknown code of the file /protocol/log/listloginfo.php. The manipulation leads to sql injection. The attack can be initiated remotely. The ex...

15. CVE-2024-3040 Netentsec NS-ASG Application Security Gateway list_crl_conf sql injection

    Published 2024-03-28

    Critical·CVSS 9.8 EPSS 0.82%

    A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/list_crl_conf. The manipulation of the argument CRLId leads to sql injection. It is possible to initiate the attack r...

16. CVE-2024-2649 Netentsec NS-ASG Application Security Gateway deleteonlineuser.php sql injection

    Published 2024-03-19

    Critical·CVSS 9.8 EPSS 0.84%

    A vulnerability has been found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /protocol/iscdevicestatus/deleteonlineuser.php. The manipulation of the argument messagecontent l...

17. CVE-2024-2648 Netentsec NS-ASG Application Security Gateway naccheck.php xpath injection

    Published 2024-03-19

    Medium·CVSS 5.3 EPSS 0.73%

    A vulnerability, which was classified as problematic, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown function of the file /nac/naccheck.php. The manipulation of the argument username leads to improper neutralization of data within xpath exp...

18. CVE-2024-2647 Netentsec NS-ASG Application Security Gateway singlelogin.php sql injection

    Published 2024-03-19

    Critical·CVSS 9.8 EPSS 0.95%

    A vulnerability, which was classified as critical, has been found in Netentsec NS-ASG Application Security Gateway 6.3. This issue affects some unknown processing of the file /admin/singlelogin.php. The manipulation of the argument loginId leads to sql injection. The attack may b...

19. CVE-2024-2646 Netentsec NS-ASG Application Security Gateway sql injection

    Published 2024-03-19

    Critical·CVSS 9.8 EPSS 0.81%

    A vulnerability classified as critical was found in Netentsec NS-ASG Application Security Gateway 6.3. This vulnerability affects unknown code of the file /vpnweb/index.php?para=index. The manipulation of the argument check_VirtualSiteId leads to sql injection. The attack can be...

20. CVE-2024-2645 Netentsec NS-ASG Application Security Gateway resetpwd.php xpath injection

    Published 2024-03-19

    Medium·CVSS 5.3 EPSS 0.73%

    A vulnerability classified as problematic has been found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /vpnweb/resetpwd/resetpwd.php. The manipulation of the argument UserId leads to improper neutralization of data within xpath exp...

21. CVE-2024-2644 Netentsec NS-ASG Application Security Gateway addfirewall.php sql injection

    Published 2024-03-19

    Critical·CVSS 9.8 EPSS 0.84%

    A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /protocol/firewall/addfirewall.php. The manipulation of the argument FireWallTableArray leads to sql inj...

22. CVE-2024-2330 Netentsec NS-ASG Application Security Gateway index.php sql injection

    Published 2024-03-09

    Critical·CVSS 9.8 EPSS 17.6%

    A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /protocol/index.php. The manipulation of the argument IPAddr leads to sql injection. It is possible to initiate the attack...

23. CVE-2024-2329 Netentsec NS-ASG Application Security Gateway sql injection

    Published 2024-03-09

    Critical·CVSS 9.8 EPSS 0.72%

    A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/list_resource_icon.php?action=delete. The manipulation of the argument IconId leads to sql injection....

24. CVE-2024-2022 Netentsec NS-ASG Application Security Gateway list_ipAddressPolicy.php sql injection

    Published 2024-03-01

    Critical·CVSS 9.8 EPSS 8.5%

    A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/list_ipAddressPolicy.php. The manipulation of the argument GroupId leads to sql injectio...

25. CVE-2024-2021 Netentsec NS-ASG Application Security Gateway list_localuser.php sql injection

    Published 2024-02-29

    Critical·CVSS 9.8 EPSS 0.74%

    A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. Affected is an unknown function of the file /admin/list_localuser.php. The manipulation of the argument ResId leads to sql injection. It is possible to launch the a...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.