Approved changes feed: RSS · Atom

cpe:2.3:a:eyesofnetwork:eyesofnetwork:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEyesofnetwork (3d1c26bb-f92b-5479-b25c-e187da0068a9)
ProductEyesofnetwork (18df0076-784d-5d9e-8b07-7a16548236a8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/eyesofnetworkcommunity/eonweb purl2cpe 2026-06-01 10:17:41.522556

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-41572 vulnerable 2026-06-08 05:48:30.549947 Details available
An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Privilege escalation can be accomplished on the server because nmap can be run as root. The attacker achieves total control over the server.
Published: 2025-01-07T00:00:00.000Z
Updated: 2025-01-08T15:08:14.133Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41571 vulnerable 2026-06-08 05:48:30.549626 Details available
An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Local file inclusion can occur.
Published: 2022-09-27T01:53:53.000Z
Updated: 2025-05-21T18:28:42.471Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41570 vulnerable 2026-06-08 05:48:30.549121 Details available
An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Unauthenticated SQL injection can occur.
Published: 2022-09-27T01:53:21.000Z
Updated: 2025-05-21T15:27:02.614Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40643 vulnerable 2026-06-08 05:35:18.847492 Details available
EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail options configuration page. In the location of the "sendmail" application in the "cacti" configuration page (by default/usr/sbin/sendmail) it is possible to execute any command, which will be executed when we make a test of the configuration ("send test mail").
Published: 2022-06-30T10:41:32.000Z
Updated: 2024-08-04T02:51:06.278Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33525 vulnerable 2026-06-08 05:32:11.566721 Details available
EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution (by authenticated users) via shell metacharacters in the nagios_path parameter to lilac/export.php, as demonstrated by %26%26+curl to insert an "&& curl" substring for the shell.
Published: 2021-05-24T19:48:02.000Z
Updated: 2024-08-03T23:50:42.979Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9465 vulnerable 2026-06-08 05:28:01.783948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27887 vulnerable 2026-06-08 05:23:53.462860 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27886 vulnerable 2026-06-08 05:23:53.462319 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-24390 vulnerable 2026-06-08 05:22:32.974218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6088 vulnerable 2026-06-08 05:09:50.507534 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.