enigma network management solution vulnerabilities and fixes

Recent CVEs affecting enigma network management solution, with upgrade or downgrade steps. 11 tracked.

Also searched as: enigmanetworkmanagementsolution.

enigma network management solution has 11 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 11. Most recent: 2020-03-20. Highest priority: CVE-2019-16072 (score 69/100).

• CVE-2019-16072 CRITICAL 9.8 UPGRADE An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and pr
• CVE-2019-16070 MEDIUM 6.1 UPGRADE A number of stored Cross-site Scripting (XSS) vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and
• CVE-2019-16069 MEDIUM 6.1 UPGRADE A number of stored Cross-site Scripting (XSS) vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and
• CVE-2019-16068 HIGH 8.8 UPGRADE A CSRF vulnerability exists in NETSAS ENIGMA NMS version 65.0.0 and prior that could allow an attacker to be a
• CVE-2019-16067 HIGH 7.5 UPGRADE NETSAS Enigma NMS 65.0.0 and prior utilises basic authentication over HTTP for enforcing access control to the
• CVE-2019-16066 HIGH 8.8 UPGRADE An unrestricted file upload vulnerability exists in user and system file upload functions in NETSAS Enigma NMS
• CVE-2019-16065 HIGH 8.8 UPGRADE A remote SQL injection web vulnerability was discovered in the Enigma NMS 65.0.0 and prior web application tha
• CVE-2019-16064 CRITICAL 9.6 UPGRADE NETSAS Enigma NMS 65.0.0 and prior suffers from a directory traversal vulnerability that can allow an authenti
• CVE-2019-16063 HIGH 7.5 UPGRADE NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data rendered within web pages
• CVE-2019-16062 MEDIUM 6.5 UPGRADE NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data stored within the SQL database
• CVE-2019-16061 HIGH 8.8 UPGRADE A number of files on the NETSAS Enigma NMS server 65.0.0 and prior are granted weak world-readable and world-w

FAQ

How do I fix enigma network management solution vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is enigma network management solution being exploited right now?

None of the tracked enigma network management solution CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which enigma network management solution CVE should I patch first?

CVE-2019-16072 currently ranks highest (69/100): An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and pr.

RSS feed for enigma network management solution · ← Back to latest CVEs