PatchTheCVEnetsas vulnerabilities
Recent CVEs affecting netsas products. 12 tracked.
netsas has 12 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 12. Most recent: 2020-03-20. Highest priority: CVE-2019-16072 (score 69/100).
- CVE-2019-16072 CRITICAL 9.8 UPGRADE An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and pr
- CVE-2019-16071 HIGH 8.8 UPGRADE Enigma NMS 65.0.0 and prior allows administrative users to create low-privileged accounts that do not have the
- CVE-2019-16070 MEDIUM 6.1 UPGRADE A number of stored Cross-site Scripting (XSS) vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and
- CVE-2019-16069 MEDIUM 6.1 UPGRADE A number of stored Cross-site Scripting (XSS) vulnerabilities were identified in NETSAS Enigma NMS 65.0.0 and
- CVE-2019-16068 HIGH 8.8 UPGRADE A CSRF vulnerability exists in NETSAS ENIGMA NMS version 65.0.0 and prior that could allow an attacker to be a
- CVE-2019-16067 HIGH 7.5 UPGRADE NETSAS Enigma NMS 65.0.0 and prior utilises basic authentication over HTTP for enforcing access control to the
- CVE-2019-16066 HIGH 8.8 UPGRADE An unrestricted file upload vulnerability exists in user and system file upload functions in NETSAS Enigma NMS
- CVE-2019-16065 HIGH 8.8 UPGRADE A remote SQL injection web vulnerability was discovered in the Enigma NMS 65.0.0 and prior web application tha
- CVE-2019-16064 CRITICAL 9.6 UPGRADE NETSAS Enigma NMS 65.0.0 and prior suffers from a directory traversal vulnerability that can allow an authenti
- CVE-2019-16063 HIGH 7.5 UPGRADE NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data rendered within web pages
- CVE-2019-16062 MEDIUM 6.5 UPGRADE NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data stored within the SQL database
- CVE-2019-16061 HIGH 8.8 UPGRADE A number of files on the NETSAS Enigma NMS server 65.0.0 and prior are granted weak world-readable and world-w
FAQ
How do I fix netsas vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is netsas being exploited right now?
None of the tracked netsas CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which netsas CVE should I patch first?
CVE-2019-16072 currently ranks highest (69/100): An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and pr.