groundwork monitor vulnerabilities and fixes

Recent CVEs affecting groundwork monitor, with upgrade or downgrade steps. 15 tracked.

Also searched as: groundworkmonitor.

groundwork monitor has 15 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2013-05-08. Highest priority: CVE-2013-3502 (score 52/100).

• CVE-2013-3513 MEDIUM 6.8 DOWNGRADE Multiple cross-site request forgery (CSRF) vulnerabilities in the Noma component in GroundWork Monitor Enterpr
• CVE-2013-3512 MEDIUM 6.5 DOWNGRADE The Cacti component in GroundWork Monitor Enterprise 6.7.0 does not properly perform authorization checks, whi
• CVE-2013-3511 MEDIUM 5.8 DOWNGRADE Open redirect vulnerability in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote attacke
• CVE-2013-3510 MEDIUM 6.5 DOWNGRADE Multiple SQL injection vulnerabilities in GroundWork Monitor Enterprise 6.7.0 allow remote authenticated users
• CVE-2013-3509 MEDIUM 6.5 DOWNGRADE html/System-NeDi.php in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated
• CVE-2013-3508 MEDIUM 6.5 DOWNGRADE html/System-Files.php in the System File Overview feature in the NeDi component in GroundWork Monitor Enterpri
• CVE-2013-3507 MEDIUM 4.0 DOWNGRADE The NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to obtain sensitiv
• CVE-2013-3506 HIGH 7.5 DOWNGRADE cgi-bin/performance/perfchart.cgi in the Performance component in GroundWork Monitor Enterprise 6.7.0 does not
• CVE-2013-3505 MEDIUM 4.0 DOWNGRADE The Nagios-App component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to bypass in
• CVE-2013-3504 MEDIUM 5.5 DOWNGRADE Directory traversal vulnerability in monarch.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7
• CVE-2013-3503 LOW 3.5 DOWNGRADE The Profile Importer feature in monarch.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 al
• CVE-2013-3502 MEDIUM 6.5 DOWNGRADE monarch_scan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated u
• CVE-2013-3501 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in GroundWork Monitor Enterprise 6.7.0 allow remote attack
• CVE-2013-3500 HIGH 7.5 DOWNGRADE The Foundation webapp admin interface in GroundWork Monitor Enterprise 6.7.0 uses the nagios account as the ow
• CVE-2013-3499 HIGH 7.5 DOWNGRADE GroundWork Monitor Enterprise 6.7.0 performs authentication on the basis of the HTTP Referer header, which all

FAQ

How do I fix groundwork monitor vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is groundwork monitor being exploited right now?

None of the tracked groundwork monitor CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which groundwork monitor CVE should I patch first?

CVE-2013-3502 currently ranks highest (52/100): monarch_scan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated u.

RSS feed for groundwork monitor · ← Back to latest CVEs