guardian · threatengine.sh

Home/Product/nozominetworks guardian

Product

nozominetworks guardian

33 known vulnerabilities across versions

Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.

Sort Min CVSS Published since

Hashgraph Guardian through version 3.5.1, fixed in commit 45fbe2f, contains an unsandboxed JavaScript execution vulnerability in t

A Stored HTML Injection vulnerability was discovered in the Alerted Nodes Dashboard functionality due to improper validation on an

A path traversal vulnerability was discovered in the Import Arc data archive functionality due to insufficient validation of the i

A Stored HTML Injection vulnerability was discovered in the Asset List functionality due to improper validation of network traffic

A Stored Cross-Site Scripting vulnerability was discovered in the Reports functionality due to improper validation of an input par

A Stored HTML Injection vulnerability was discovered in the Time Machine Snapshot Diff functionality due to improper validation of

A path traversal vulnerability was discovered in the Time Machine functionality due to missing validation of two input parameters.

A SQL Injection vulnerability was discovered in the CLI functionality due to improper validation of an input parameter. An authent

A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authe

A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authe

A SQL Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter.

An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being properly en

A client-side path traversal vulnerability was discovered in the web management interface front-end due to missing validation of a

An access control vulnerability was discovered in the Reports section due to a specific access restriction not being properly enfo

In cases where a multi-tenant stack user is operating Foundry’s Linter service, and the user changes a group name from the defau

A missing authentication check in the WebSocket channel used for the Check Point IoT integration in Nozomi Networks Guardian and C

>= 22.6.0 and < 22.6.3

A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields us

A SQL Injection vulnerability has been found in Nozomi Networks Guardian and CMC, due to improper input validation in certain para

>= 22.6.0 and < 22.6.3

A SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the

A partial DoS vulnerability has been detected in the Reports section, exploitable by a malicious authenticated user forcing a repo

An authenticated administrator can upload a SAML configuration file with the wrong format, with the application not checking the c

An access control vulnerability was found, due to the restrictions that are applied on actual assertions not being enforced in the

A blind SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the alerts_count comp

An authenticated attacker with administrative access to the web management interface can inject malicious JavaScript code inside t

A blind SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the sorting parameter

In certain conditions, depending on timing and the usage of the Chrome web browser, Guardian/CMC versions before 22.6.2 do not alw

Due to improper input validation in the Alerts controller, a SQL injection vulnerability in Nozomi Networks Guardian and CMC allow

Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticated attacke

Improper Input Validation vulnerability in custom report logo upload in Nozomi Networks Guardian, and CMC allows an authenticated

>= 19.0.0 and < 19.0.12

Path Traversal vulnerability when changing timezone using web GUI of Nozomi Networks Guardian, CMC allows an authenticated adminis

>= 19.0.0 and < 19.0.12

OS Command Injection vulnerability when changing date settings or hostname using web GUI of Nozomi Networks Guardian and CMC allow

Nozomi Networks OS before 19.0.4 allows /#/network?tab=network_node_list.html CSV Injection.

Nozomi Guardian before 19.0.4 allows attackers to achieve stored XSS (in the web front end) by leveraging the ability to create a

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin