Approved changes feed: RSS · Atom

cpe:2.3:a:nfsen:nfsen:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNfsen (3360e1d3-c459-5e12-9976-595edbc3f538)
ProductNfsen (f3c76139-5c94-5c20-b2e8-20daed462362)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/p-alik/nfsen purl2cpe 2026-06-01 10:17:01.979011
pkg:github/sown/nfsen purl2cpe 2026-06-01 10:17:01.979015
pkg:sourceforge/nfsen purl2cpe 2026-06-01 10:17:01.979018

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-7175 vulnerable 2026-06-08 05:09:55.427432 Details available
NfSen before 1.3.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the customfmt parameter (aka the "Custom output format" field).
Published: 2017-07-10T19:00:00.000Z
Updated: 2024-08-05T15:56:36.049Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6972 vulnerable 2026-06-08 05:09:55.211166 Details available
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945, a different vulnerability than CVE-2017-6970 and CVE-2017-6971.
Published: 2017-03-22T20:00:00.000Z
Updated: 2024-08-05T15:49:02.101Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6971 vulnerable 2026-06-08 05:09:55.210753 Details available
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged context, or launch a reverse shell, via vectors involving the PHP session ID and the NfSen PHP code, aka AlienVault ID ENG-104862.
Published: 2017-03-22T14:00:00.000Z
Updated: 2024-08-05T15:49:02.140Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6970 vulnerable 2026-06-08 05:09:55.210252 Details available
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privileged context via an NfSen socket, aka AlienVault ID ENG-104863.
Published: 2017-03-22T14:00:00.000Z
Updated: 2024-08-05T15:49:02.827Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.