GCVE - cpe:2.3:a:alienvault:ossim:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:alienvault:ossim:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Alienvault (`d51cdd55-2f5a-537b-8b4f-3f5508c62127`)
Product	Ossim (`73d86aaa-3d10-5516-8460-648aee291fe2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-6972`	vulnerable	2026-06-08 05:09:55.211121	Details available AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945, a different vulnerability than CVE-2017-6970 and CVE-2017-6971. Published: 2017-03-22T20:00:00.000Z Updated: 2024-08-05T15:49:02.101Z Open on db.gcve.eu Reference links https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/ http://www.securityfocus.com/bid/97016 https://www.exploit-db.com/exploits/42314/ https://www.alienvault.com/forums/discussion/8698	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-6971`	vulnerable	2026-06-08 05:09:55.210710	Details available AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged context, or launch a reverse shell, via vectors involving the PHP session ID and the NfSen PHP code, aka AlienVault ID ENG-104862. Published: 2017-03-22T14:00:00.000Z Updated: 2024-08-05T15:49:02.140Z Open on db.gcve.eu Reference links https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/ https://www.alienvault.com/forums/discussion/8325/ https://www.exploit-db.com/exploits/42306/ https://www.alienvault.com/forums/discussion/8698	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-6970`	vulnerable	2026-06-08 05:09:55.208795	Details available AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privileged context via an NfSen socket, aka AlienVault ID ENG-104863. Published: 2017-03-22T14:00:00.000Z Updated: 2024-08-05T15:49:02.827Z Open on db.gcve.eu Reference links https://sourceforge.net/p/nfsen/news/2017/01/nfsen-138-released---security-fix/ https://www.alienvault.com/forums/discussion/8325/ https://www.exploit-db.com/exploits/42305/ https://www.alienvault.com/forums/discussion/8698	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-7955`	vulnerable	2026-06-08 05:08:13.619534	Details available The logcheck function in session.inc in AlienVault OSSIM before 5.3.1, when an action has been created, and USM before 5.3.1 allows remote attackers to bypass authentication and consequently obtain sensitive information, modify the application, or execute arbitrary code as root via an "AV Report Scheduler" HTTP User-Agent header. Published: 2017-03-15T16:00:00.000Z Updated: 2024-08-06T02:13:21.102Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/540224/100/0/threaded http://www.zerodayinitiative.com/advisories/ZDI-16-517/ https://www.alienvault.com/forums/discussion/7765/alienvault-v5-3-1-hotfix	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3441`	vulnerable	2026-06-08 04:51:41.966113	Details available Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to bypass authentication, and read graphs or infrastructure information, via a direct request to (1) graphs/alarms_events.php or (2) host/draw_tree.php. Published: 2009-09-28T22:00:00.000Z Updated: 2024-08-07T06:31:10.310Z Open on db.gcve.eu Reference links http://dsecrg.com/pages/vul/show.php?id=155 http://www.securityfocus.com/bid/36504 http://secunia.com/advisories/36867 http://www.securityfocus.com/archive/1/506663/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3440`	vulnerable	2026-06-08 04:51:41.965738	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3439`	vulnerable	2026-06-08 04:51:41.962354	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.