CVE-2013-3936

< 4.4.1

Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 and Opsview Core before 20130522 allow remote attacker

6.1MEDIUM

CVE-2013-3935

< 4.4.1

Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.1 and Opsview Core before 20130522 allows remote attackers t

8.8HIGH

CVE-2018-16148

< 5.3.1

The diagnosticsb2ksy parameter of the /rest endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cross

6.1MEDIUM

CVE-2018-16147

< 5.3.1

The data parameter of the /settings/api/router endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to Cr

6.1MEDIUM

CVE-2018-16146

>= 5.4.0 and < 5.4.2

The web management console of Opsview Monitor 5.4.x before 5.4.2 provides functionality accessible by an authenticated administrat

7.2HIGH

CVE-2018-16145

< 5.3.1

The /etc/init.d/opsview-reporting-module script that runs at boot time in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 invo

8.1HIGH

CVE-2018-16144

< 5.3.1

The test connection functionality in the NetAudit section of Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerable to

9.8CRITICAL

CVE-2016-10368

all versions

Open redirect vulnerability in Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and

6.1MEDIUM

CVE-2016-10367

all versions

In Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016

7.5HIGH

CVE-2015-6035

<= 4.6.3

Opsview before 2015-11-06 has XSS via SNMP.

6.1MEDIUM

CVE-2015-4420

<= 4.6.2

Multiple cross-site scripting (XSS) vulnerabilities in Opsview 4.6.2 and earlier allow remote attackers to inject arbitrary web sc

CVE-2013-7256

<= 4.4.1

Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.2 allows remote attackers to hijack the authentication of un

CVE-2013-7255

<= 4.4.1

Open redirect vulnerability in Opsview before 4.4.2 allows remote attackers to redirect users to arbitrary web sites and conduct p

CVE-2013-7254

<= 4.4.1

Cross-site scripting (XSS) vulnerability in Opsview before 4.4.2 allows remote attackers to inject arbitrary web script or HTML vi

CVE-2013-5695

<= 4.4

Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 allow remote attackers to inject arbitrary web script

CVE-2013-5694

<= 4.4

SQL injection vulnerability in status/service/acknowledge in Opsview before 4.4.1 allows remote attackers to execute arbitrary SQL